{"report_id":"3a3fedec-a287-40ee-badf-7aaa7e8b7338","version":0,"status":"done","tags":[],"date":"2026-09-19T22:20:08Z","url":{"schema":"http","addr":"willemleeks.com/","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"willemleeks.com/","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"title":"Entrepreneurs’ Organization Romania","dom":{"size":165355,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (430)","md5":"915b9c56cfb01325374d128a4eb0500e","sha1":"73a3be62b8ef71c15809fd3c79ca97b825769f51","sha256":"be9bcf0f366654118e4b8eb64a6631cd317fa7b9dbc296e275f22e603d153f27","sha512":"4489e9f3ce39c68aaa3344641636c8878242581bdac1b29e7d34f9c77d544fd20067ca635a14c796c0cfd8a376cb6a1068300d41bdf113a62017b28379c6fde8","ssdeep":"1536:uo9bUtmIxu5W9nEBt77pb5/qLuGRBxHIgi2QXKOX7Z9RI0lRI06rdAgnMnHx1OjR:uhRnmBgipXnLggS","tlshash":"54f3764f97f23075394f7154aa25a3612ba58243ce49eff03aec5254cf499a948f327c","dom_hash":"domhash52a565f8f34a604a5f960e3d12a5fab0","first_seen":"2026-06-26T02:39:35.343382Z","last_seen":"2026-09-23T09:28:38.295426Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"willemleeks.com/","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T22:20:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"willemleeks.com","ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-01","domain_rank":0,"first_seen":"2026-06-26T17:26:14.210363Z","last_seen":"2026-09-19T22:13:19.442293Z","alert_count":140,"request_count":35,"received_data":2909498,"sent_data":18314,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"willemleeks.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T12:50:34.886868Z","times_seen":438066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3925456e43912597459ed4329ff956a","sha1":"0255c022bde777177783229d1939dbec1b060527","sha256":"5355b46cf0f195289db238daf7d7cd6c452f6083742cca6f98db158e43885bdc","sha512":"cdda750b12d44efe0d1e626300edd8f9b036f963a3047710fd9f50075d6e6ab8b5d13ff191b441a06477ebb1932b10d26bbfbeb6322c30bacf5000cea019ed9c","ssdeep":"","tlshash":"9ed02335533034b154277155c55eb240b5b1105b7415dd02fc4c818d9f44f2574b3e42","size":220,"data":"","first_seen":"2026-06-09T12:57:58.463408Z","last_seen":"2026-09-23T09:30:39.175302Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/wpem-grid.min.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.868Z","timestamp":1789856378868,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/wpem-grid.min.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zdU8ZVY5MhRnu2Ygy%2Brf6NHnKrWIaQs%2FMh78izGwfOZDwCA2ZOYDG2zyhIcLZZDw7U1whomjoyfeyJ8UnXG5%2BaGWOVva2H1rOGccNwA2Aeg7jvMmbT2z93JSMb418UiYMEA%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-dcea\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf91fec1eb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56554,"size_decoded":6285,"mime_type":"text/css","magic":"ASCII text, with very long lines (56554), with no line terminators","md5":"4f111b5cb1a952fc42588d31c5ad8eae","sha1":"2f8af26d432578049a918f78466b1669cb20e263","sha256":"0a687c92a7e9226570734cfd7bbba2dc5b2bec4e675ecb870a1744abe7915257","sha512":"51d58a048179b8eca1b0b0a5b5fdb304d22ae285bd185b5c9e28e8f7999282ee0ac3e0af349a5613e73e426a3de30035dd3448b4fe9c507a4f072972818e4c72","ssdeep":"192:nxdn4FoyvGLJDBY6ZX2UG1muBTrAS9kBmBxEmtFnyVs4qs6qZy2mXveE20zIMAno:D4FoyvGkKMqBmfMs7gxw+9xC+ECAT","tlshash":"c9439f63f791222f818eae2a96713bfc4a6f9057a7556ee644933f304b467c3887140f","first_seen":"2025-03-15T10:55:42.644772Z","last_seen":"2026-09-23T09:30:39.150204Z","times_seen":1006,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/popup.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.881Z","timestamp":1789856378881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/popup.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kXMj00ea2QWobpRsXfKP7df5gBWB9Wd0Gsn2DEFubTBL5zhmdV3qPQZ0iZdW6CIC6yvakh32mWBLSizA1QNYQzaZ4YlFelS1iTkqxo20PCDV0pFqKCVsSGFWMCJDjcqmbOw%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-1389\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9200c27b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5001,"size_decoded":1681,"mime_type":"text/css","magic":"ASCII text, with very long lines (5001), with no line terminators","md5":"de3e0625d50bcb2e7b8c552585307bc0","sha1":"68e4453126243cdcd4d843f6208d0125987c0a11","sha256":"2f1e0ba0f1a9560f8d67fb010c58f8995fa681625c321e18133ccec0043bce47","sha512":"8aaba984c7c49f88ff7495711bcf6fef2e5a4d68a0680cdb5d56607bb5e67691c5ba8ef5c492fee32f4f1b27f7369eadfb0846180247e37c010f3d57ff83a209","ssdeep":"48:cXM4UvcnWInlXj6R6X9rHcrfmScE7vrHcnlgVcxrxFrxwZhrxJrxZrxmrxa0L0Wm:hyp+RD77cKOYvBcAF","tlshash":"aba107318a333522babaf746f6914e08e560ad03fbde1dbf6145c50d56c7cc0825e5ac","first_seen":"2024-02-27T15:23:22Z","last_seen":"2026-09-23T12:02:29.20088Z","times_seen":3299,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/AvertaStd-Semibold.woff2","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.075Z","timestamp":1789856379075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-Semibold.woff2 HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6a212df9-c138\"\r\nexpires: Tue, 29 Sep 2026 22:12:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aNwDxr%2FSCxt%2BHauvEEtRL%2BsiI8Gmey14vpBEPsvGizKVcCwHZuuzzdMu8EMl%2BOTrdc0WqkANBrHvYBNu8Zp404X48V%2BYFow1E9i8k4wpgmuhxBJBCJJuYTA0WMmUr%2BcK5uU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9213c48b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 49464\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49464,"size_decoded":50245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 49464, version 1.0","md5":"18f04fd1cce6e66d32f0157367dfe0ed","sha1":"87ba1b014af989806c1bcf4dbd335b8d2880a26d","sha256":"02a07334fdc34f9885d92f035d0c30ca6fafd23e972915c31da44ca115b69f77","sha512":"459a1a65e5eca742469feeb2a7b229c0ad4025e64585fcbb380f0094f067aa5c0be34a737bb4196bf6d6e69592e127bc16a78c6d224b38703a3538d1b1052c47","ssdeep":"1536:Z/vkN227qkD+IkUGX0Tv6XSbMiOeRjG1lEBVz1U3P:ZXNjkDdsX0Tv6wRPRjwlOzU3P","tlshash":"0923f1966f192167edc9ec2f11ea2486678d981f8d5c2d28236d1ebf2e0823b35351c7","first_seen":"2026-05-30T03:26:08.01856Z","last_seen":"2026-09-23T09:30:39.157292Z","times_seen":11,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/swiper.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.880Z","timestamp":1789856378880,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/swiper.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0%2BGo%2Fm8hEFig8eS%2F95uTPbSO0oMMt4tkhIuaGyQS9vomJlsDHdyfaEc%2B3lXuMbHpNMn72i8l7U%2F6vR%2FPbLtL%2FtLcETMrSRWSL7DhF4ZgbaPfqEgqxv44KF0scyOcDRAE2tE%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-4746\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9200c25b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18246,"size_decoded":3823,"mime_type":"text/css","magic":"ASCII text","md5":"37009493830156f163d54e34b57962c8","sha1":"a0cc0954e28b1f617727c2c6d6f202c24df1dc20","sha256":"cf7e97acbcd59ab5cbf7b0480ff3cb431e7ebcd2c487731065f402deaafad66e","sha512":"1f5f16bf070d75362f2204a1cb2f00c79a182143d311941ceae6f4d4276d67c6200fcc8e01699d37e3a03f7797ff65ce4f5ebcb7a7e8fcb8d5d81069f58eb791","ssdeep":"192:vwScGaNLNi2rZ9faPUt3V5H40yAWtSStY+7oyJrtYaPtYZVXuHBVtS+wjvqXAXAj:vuJjfNVYef+h0IJxFOMFcsABdZDyZ","tlshash":"7982f1545b622c13b22a4e1d0be697706b68c4834a47ccad73c1ed88efba4f8315ee55","first_seen":"2026-05-30T03:26:08.007504Z","last_seen":"2026-09-23T09:30:39.081225Z","times_seen":11,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.890Z","timestamp":1789856378890,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Mon, 21 Sep 2026 22:19:38 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zuy89rBiTEmGCNGgUWjIzlqTYLvMG6e7qr0i0ujmyB6%2Bo2cbzOshZamDaA%2BRjjz58I0lnBp5DTjOAMbSRMJI%2BsDQP8Zaj4CI5Vf%2BkNZ9HMJ%2BlmzrSAwrA6FM0dAK17XjHw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\nserver: cloudflare\r\ncf-ray: a3dbf9201c2db4f3-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1294,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T12:50:34.886868Z","times_seen":438066,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/bg-half-circles-pink.png","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.018Z","timestamp":1789856379018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/bg-half-circles-pink.png HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=4,i\r\netag: \"6a212df9-1ff7\"\r\nexpires: Tue, 29 Sep 2026 22:08:55 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 643\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fZ1kcsRXxLgI7yl92kXYsSQ3d6jgD10sZhCTy6dNKL5exghWYIAP9Sz0EqUXpspOcFe6AXSn%2FdhrsvRpg8LJ%2B9hUjAD66X8KZrpM8gsFhYorW8AgYLGPfjjRpqz0T6Ts%2BNc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf920dc38b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8183\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8183,"size_decoded":8953,"mime_type":"image/png","magic":"PNG image data, 529 x 538, 4-bit colormap, non-interlaced","md5":"01d5d812638915ac33088fab944e6611","sha1":"6da1275cb044461c8978b0285507b2f7e8d7f54b","sha256":"ca42d2e7b08c5f7dbca0c3ce8de95cef55c1c776b287a58ea3a58152ff87dd7c","sha512":"27e6e6cfca56830c250b5d1210f9d561789b04ff7753fa5816d4b46a3bbd4e241a1ca7e14e84c2ff845cfe34ed5dee484ac11d40b5bdde4fcedccac095296a3e","ssdeep":"192:Cv3cGCg7dELwBxeH1dwxP+G31WrKpaassFZnEpsZ99:N/gR4pHUBW2rFZKI99","tlshash":"59f1bff8ae9867ad901b026453d1a09335cb7cea9d3805ce6e30f5d85ec86c6d2c0de3","first_seen":"2026-05-30T03:26:08.013047Z","last_seen":"2026-09-23T09:30:39.106126Z","times_seen":11,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/AvertaStd-Regular.woff2","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.067Z","timestamp":1789856379067,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-Regular.woff2 HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6a212df9-a238\"\r\nexpires: Tue, 29 Sep 2026 22:12:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7WxDQbRLx1Grmqu4yb67uImww8nPDB9KPEFX9B7NYow5RoOGRSkRUIHRNbvjjGxDtPVGvB9QziwbyUlsCDqMm6qrbD%2FjSCTLKWeLOE6mf2aw058fRw5JOdF9UtpnG3IlpQk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9212c42b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 41528\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41528,"size_decoded":42299,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41528, version 1.0","md5":"62479015e32c43453c7ab4ceb191a613","sha1":"d886ab861430f70e68f1526b8a4cf8da49159089","sha256":"5e606643bdc5267254f793d9544bb27b6201c97ec17f249789ba70fe1370d18f","sha512":"27ed7b5c78c47e781b0f227d9962eef3cb6e4674bfc90840befc7b043cd723a5b565244ee9b2b95783979590749e10c7014021ac3f9d8a492d4fb0e6a68453d6","ssdeep":"768:682ZgDJ15WHSzHhix/D6GhF08Qr7hYBazu9wKeizd3riQw:6vZcoHSzk56GFRQnhYBa6Sg7rw","tlshash":"a713014c9f467c10d514b5f43cdc2b8fa64ee9b521a22083c186bdb9b9dac7918268f9","first_seen":"2025-06-27T19:40:05.789239Z","last_seen":"2026-09-23T09:30:39.154338Z","times_seen":111,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T22:19:38.548Z","timestamp":1789856378548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=66jU0zz1hfQHKhLgeUpyNNt02IXYMx%2BVaXgldZdkGuevyhRJ0OZHlQ%2F3hzS9UWZdicEMp8OSwKf1UInhHyDtNdyC6m2alBSyxGqU%2BG6mirE4oWT2OwGNHfT%2BVitLas1WHXw%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-cache, no-store, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Sat, 19 Sep 2026 22:19:38 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3dbf91e2c01b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":178205,"size_decoded":24375,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (330)","md5":"4264a26434b1cf212dd14cce8e6173b6","sha1":"2aa7104b835e537454e04747de604089ff133b34","sha256":"4f027cf63cafec14543f65e3ce7d55f369d4f0fb6d63878389335a2336c7fb4e","sha512":"59990ba08ab3ee2f6dc30905a9459490059ec80e8f45bfe0896ba5bdfb5b154b88d6bc10afc6591673a35ba6b7c8ed3d73e76437ffbb96ad6dd9bd1872b5814e","ssdeep":"1536:q9bUtmoxIcfHhEBt7/pb5JId/iRS7jprzI/JOX7Z9RI0lRI06rdAgnMnHx1OjARw:j1hkKrU/8LggW","tlshash":"9304968fabf23071354bb164ae25b7652ba48043dd49ed603bfca254cf899a544f327c","first_seen":"2026-09-19T22:20:11.233599Z","last_seen":"2026-09-19T22:20:11.233599Z","times_seen":1,"resource_available":true,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":7,"connect":21,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/style.min.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.872Z","timestamp":1789856378872,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/style.min.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lUYSJ2tV9QhDzyAafgxVHBG26zhqtuY%2BfieZTDTSL19msQVET0tTnbIXft0dxGxZBoUnX6DuWQbfJzy6UiIdo6xWfDeLuCFmxWyYAGmARN8NrTB3ya55XwGieqceTrjgcBg%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-698fc\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf91ffc21b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432380,"size_decoded":39089,"mime_type":"text/css","magic":"ASCII text, with very long lines (35903)","md5":"d3216af0528e51f12c496a6bbed6d943","sha1":"78424172648e99b0226d2a3be2a7edfa1a3db11c","sha256":"8a756dad106db3d799b559682130327e71d7e3b2511feecc609c4f5495cc2ca9","sha512":"9798674d3476c8a8cd68fab08c82ee16dea5744d1bbcdd03af028c3aa450f194b57123d8259ebe081425f5648806da24998240e2f76f6b3e44ffc875ef7898d7","ssdeep":"6144:wf3fXjkikiqZjbJ7fExtOQYLyf3fXjs0qp:ojkikiFjw","tlshash":"599412e69a6012856123cf0583cd5aa5e73cc263b5e50cefb316290f8743b9d239bb57","first_seen":"2026-05-30T03:26:08.016842Z","last_seen":"2026-09-23T09:30:39.091529Z","times_seen":11,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/bundle.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.877Z","timestamp":1789856378877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/bundle.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWEDwv4CrbSNDoIqWxe9kM0cVKj1WgRr3%2B5K5a2trgJMy3mEIZXl%2BOSCDlE1OUmEOkShQ89BqpmcHxty1QIq3kP3t8auE84trtwsbtw1RSzQXg%2BagfDRTkFfqxpJqOCrt%2BU%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-a00f\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf91ffc23b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40975,"size_decoded":6323,"mime_type":"text/css","magic":"ASCII text, with very long lines (40974)","md5":"23c4e9de4519985b921fd0ce705d77c2","sha1":"2ab23eff941f4a53d30219268c9f6d17a772a1be","sha256":"00931ac697c7e7d00770675f4213c8d497aca1d64b3ecf4747a705d18a65a58f","sha512":"8df8e1a7b6851f2e56fa26a3aa010716708c8e6628ccdeb9d91782d97023a7c1c08b4b57418ef223f8bc2ca07a75762c4a93670b75f920c2e54f44be86d9a2cd","ssdeep":"768:zg/KXA2ztiB53EyEe8TB96yUg53vFkl/wYhQ0vHUzRBjL6fLzlZO8Y:zgCXnzwBpLuB96yUyu/wYhQ0vHUzRBjL","tlshash":"3b03ff2fb581d83c637f601de476e12147a4ba0af94efdbb38b7a00cc79a5895421b5c","first_seen":"2025-09-12T11:38:19.092447Z","last_seen":"2026-09-23T09:30:39.144907Z","times_seen":56,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/magnific_popup.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.878Z","timestamp":1789856378878,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/magnific_popup.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CTvWJYYpDrsBXFBFU4akyMpRCIpcBn9LDl05cX9gkcVQiVWewaZ6Pasxz4O2IqdRKeiFdOlofawifZBKI3DGw173wxxQXIBVB09SRmx2Is6GRuB%2FaLU6Wn7Nhkb1NJ8iXv4%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-1946\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf91ffc24b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6470,"size_decoded":2557,"mime_type":"text/css","magic":"ASCII text, with very long lines (6470), with no line terminators","md5":"9389a240ec2d748902e2f3d837d46912","sha1":"8c5e52769ff791c2751cde97d2f59b2b11d095d3","sha256":"ca3af915877e0f119ce0df14dfce6249f76222c600e23882fa7c7f99788971cc","sha512":"66b15795777de6d0f465c9afb67f8b6808333e8e7454c3bbc26783748f29a74ec365f18b520fbedce88e7137d1919025d0e65836bdc58007f623255b66a3feed","ssdeep":"96:HaiIwxc4SZIORnNj0aZ/XH9iNOsaD+XicVDAdVMk9HcCWhR:6NNZIORnNwaZ/X9iAD6wMk9zWhR","tlshash":"fbd165e2a141327ad532cd56e183ab1c27279263f67306efdf86a918c6cf4de0265348","first_seen":"2023-04-07T08:44:48Z","last_seen":"2026-09-23T12:02:29.180447Z","times_seen":7773,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/AvertaStd-Bold.woff2","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.073Z","timestamp":1789856379073,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-Bold.woff2 HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6a212df9-a4a4\"\r\nexpires: Tue, 29 Sep 2026 22:12:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3E6bVHqTMebCV4JMvVFBcWKcGuJWC1hJxAPBYxwkPUXw8%2BxZ0LUm3iYHZRx%2Bwl2QaebkpQIlMJ2MNNfNv7P4EeCRY8tp0tIDLYprxaCrEdE%2BvqM6Jd2n4EWGum1X2o%2BWios%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9213c46b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42148\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42148,"size_decoded":42925,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42148, version 1.0","md5":"4d8035453f996fd4f437d41603ba5a78","sha1":"b2023c06f2973d47cc037cd80e3e22b192b06997","sha256":"13a48215e1999d7fdfbcb310896ccb45b5ce7f70d8a3d44596c8edde68154930","sha512":"7b6b6f4eee859bc295b1e41cc8ec9572639bc487407aa085d4fc5639d1fb6f22172fdb44960111e5aa34ec5e40a5473c48cd5c4a15b93f5bf9e9a1903a510db2","ssdeep":"768:Kp/Aj5reHwtMXBjJhOXFZF5BZrG1VP1at5qwrPbxzmpgSRNCyp7NoOK:KG15gOVZzGLMgaIxRNCyDfK","tlshash":"401301c9c3c23992de6d2da56a880d737718d5962eb1227dc708285f85beadc7d81382","first_seen":"2026-05-30T03:26:08.026151Z","last_seen":"2026-09-23T09:30:39.15659Z","times_seen":11,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/cropped-EO_icon_primary_RGB-32x32.png","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.124Z","timestamp":1789856379124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/cropped-EO_icon_primary_RGB-32x32.png HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=6,i=?0\r\netag: \"6a212df9-86f\"\r\nexpires: Tue, 29 Sep 2026 22:08:55 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 644\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wT3l8yC6Egr3fo28qrHiXSpbVRlI7gQCiJSsTKU4RyTuSbhqNzVjREdff%2BmdNIvNrCoILGsCO3H%2Fut3QvkH11I5SXa80YLmMpQ6w%2Fse802l8MHDnyUCBEvZma0ByK6TNPLA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9218c4db4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2159\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2159,"size_decoded":2931,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f6e8b41ac1022d2c122692eb93a9615f","sha1":"48becd01b0c2f6bcc3b6e1d8865563357f80b228","sha256":"a5dca99dfc72c2d4b89d2982ab3877f5a542e4e2c7a659624f275865b8be6cda","sha512":"f698258371e1a65cf3f45d38acfcf1268563ba624e28e5a0334bf9cd66504bd02c1cb89288a7149177b9fe6c821e3ed225db5add2ebcaeefc0a3f7aa0e509265","ssdeep":"","tlshash":"3c415c46448e93d86d7b308cdbced0d2f4d42eddc01503887a3a2dce671a4e705083da","first_seen":"2026-05-30T03:26:08.019829Z","last_seen":"2026-09-23T09:30:39.13935Z","times_seen":11,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/css.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.870Z","timestamp":1789856378870,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/css.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p1QopZXgGljNRwqBxfbX4agpCbIZkb2%2FU%2Fr8QVWVbfbaUH0U6%2BgVVc%2BWKEyrUpg1q12%2FIM6%2Fjgy5NqWjzc4trGz5aQKCVKkcVuoVVrlLl8k2ZpnQwiqasR23iKNUX8px93g%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-dc41\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf91ffc20b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56385,"size_decoded":3161,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"a7bf12c6f80d5b677f04c02983574789","sha1":"70115696f580d27e84020fa871d8c3767ff63b1d","sha256":"9e229842b43cb0c0c3352982422c2a37a9336a8b40af65656e722b0254fa39f1","sha512":"64cb439cc872efeb037d48bfecf8377c83212ab10e0cb050a10bf44168098a0e917ea41d5eaa4c3e8f30c60ad751d58ba7cc9602010cf98867c16222f9dabcd8","ssdeep":"384:+rO3YC3DyvGqY49vtozYOsbV3UbvNqY49Wtxa2OOhX3uNv/qY49Yt/M/Or8W33GG:+CMG9B0b7umoWh9PxvUoK2NrQ+","tlshash":"42430b90042b2040a2575ce133de7f31ee4ea260b048d5786bfd979beecaca563b535c","first_seen":"2026-05-30T03:26:08.00616Z","last_seen":"2026-09-23T09:30:39.080361Z","times_seen":11,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/animate.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.883Z","timestamp":1789856378883,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/animate.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BQQWyCQPmchapdS8aYHvrhPzi9audE4mdTXKXmVDkmuWPpx%2Bv7wNjACuRW%2F9wJ%2BSe9f%2Fa7lVHgvZTUvXnab8waebfKEsnJwFEZPh42DxwOFNy%2FU4yAdbGxmY%2BQEXnHZYBJw%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-14d7e\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9200c28b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85374,"size_decoded":5681,"mime_type":"text/css","magic":"ASCII text","md5":"f733d0fb45713b13b3ef2e60abf101ba","sha1":"abc1c8bf1d48d261bf40ad9e86598b684a18a49c","sha256":"2414767fbf3e93d3269cb3795b6c667da0f58a8f662dfd8aabb0807243d1134f","sha512":"61e8e6c9a036e566a6060613aafd8891f41c2570f3fadb8b744772dd559c85e9103fa6f12f8d56f5e547f35e95728684bc297a764088e5b7a757886077a76ed4","ssdeep":"384:BHLeieV9+Y5e5eH1f1zFuFS+R+tK4RAcsTs+g:xLeieqY5e5eF+R+tK4RAcsTs+g","tlshash":"278331ad29d2108456638a1d83df4e68163ce1731816acee738e598fcf8bf6c57c9247","first_seen":"2023-04-07T08:44:48Z","last_seen":"2026-09-23T12:02:29.244349Z","times_seen":7512,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/style-1.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.887Z","timestamp":1789856378887,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/style-1.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGHOgkdEP%2BcO48JwIcvxz0hKKZkAjc5rj79WxTPvV1bIS4RdXI7AvosHWQoyrclZZmwKA6pxhLDyfQlrbcYTJATUTFXwi0887NhO9lHuQuv18NsK4SVKSNLJFZiqYrOL2ZY%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-9147\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9200c2bb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37191,"size_decoded":6617,"mime_type":"text/css","magic":"ASCII text","md5":"72d50f3a8ed01ce420c8cd2322ceec34","sha1":"5ac8b637faddf1d3a4d9d6b1b06d9a98b1c1a9cc","sha256":"3bde3a48f304117beb5a052031bc34cffcce319b26eec812f3489ae374f32adf","sha512":"f97bad0dec38af0d9d5bd491edb456a18bc93da629da7d022408cafcb6d4bfb730050b8554abea06e0290d79b3ef8c902e373bace4414ed1ff72b1386b1b2bae","ssdeep":"384:m1KwmaHMiCJwTljrFzcyHGjF3GBK6bNOAhPzRclfmCqjZFzt:mIwRXFwH6bNOAhPzkfmCqjZFJ","tlshash":"42f262cbfea62992711a5558fb63fbf96b6c00434e0d8e71b1b176789f803e101b168d","first_seen":"2026-05-30T03:26:08.022234Z","last_seen":"2026-09-23T09:30:39.09755Z","times_seen":11,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/EO_Romania_RGB_inverse-1280x615.png","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.888Z","timestamp":1789856378888,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/EO_Romania_RGB_inverse-1280x615.png HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i\r\netag: \"6a212df9-34b7\"\r\nexpires: Tue, 29 Sep 2026 12:27:08 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 35550\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ylBPXtu0no7WFrdtpqY4cJJteBZu0AmkEGzh%2Fc%2FbLlz4VAJ3y1tcldzvnBevlbjFZHeFFLz%2Fhp6LsLDxVVyvNFTI9TU6%2F6%2FTum5M4a7NA%2FZ1Y6aj3yj5JFpuPdg09hJBMGw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9200c2cb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13495\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13495,"size_decoded":14274,"mime_type":"image/png","magic":"PNG image data, 1280 x 615, 8-bit colormap, non-interlaced","md5":"5a75038acdba477464196a2142fd3e96","sha1":"861a7bcbf2ea07bc05d9f4aa3818fc6fc7566bdc","sha256":"be52bb0ff0b554beb0a83d71c037dbd2b777be50d7ce9d08fe98916b3d8d8909","sha512":"d2fd5f1cab89524a33a0fe68b542aa648b90b1c9bac01954bbbee82457d21be434058151a746d226622a4a7ed8081752b84ff6502fb2676a46fde71d68313525","ssdeep":"192:UukLru53SxjRwTaDlgRHH+Rm+8Cix1DqyStftlM/lgvsH50zLvET2wt/n:i4Sx115hxinOftVWz6XvA2Kn","tlshash":"f852b02051892ae5e20c03b12f50f815cb3b14981677d07ec93e3aa5aee0f9ddd5074d","first_seen":"2026-05-30T03:26:08.032205Z","last_seen":"2026-09-23T09:30:39.102839Z","times_seen":11,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/fa-brands-400.woff2","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.068Z","timestamp":1789856379068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/fa-brands-400.woff2 HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/lander/logic_ocean_camp_fire_done/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6a212df9-1327c\"\r\nexpires: Tue, 29 Sep 2026 22:12:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4LlQ13f2QRuyNLX9ULFzsLUKcC%2FgVyZ99b3G6jz1%2BcaAa3EV4FJF1jefzJNFj%2Foo5K5MzKLQO5DUFAygE6%2B1fw1pRbCwZFbpKG0A5kO0SOvhPfC8BEUSn1CfPj2eLVoGxi4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9212c43b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78460\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78460,"size_decoded":79238,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78460, version 331.-31392","md5":"f075c50f89795e4cdb4d45b51f1a6800","sha1":"f726c4275bb494a045fde059175f072de06c01df","sha256":"71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba","sha512":"5f4f35e9acdb825a245e678a834b2bc6d5c302693fffc3497717024c2d8385ffdeb233d4d7f368f1356a2adfcaab0a89157edbcca45b9f310f1cdd7f44cac955","ssdeep":"1536:uZWBokruo7jgeq3Yv8E9MjaR3yOWaaqPbkJSmMlckzeSUSalX:sWBbuo/vqov8yTS/qPmMekzyx","tlshash":"7b73124d6fe2a9eaa9bc3f332fb38412ac819d654bf2c1b3055e12d51c8177da8d4135","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-09-23T12:02:29.189593Z","times_seen":22805,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/jquery.timepicker.min.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.867Z","timestamp":1789856378867,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/jquery.timepicker.min.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L6Uewrrze2%2FxBNjxGhOYz%2BzlV2xjXm528EDv%2F7MkV5gSZeH%2FIldYqxinAkMLZgMNaQ%2B0WjESNzpwnXTTtjP0D9FcjC2QTvtPnD4J9LCNBUSq3zDXnF8ymRI%2FMJUkJEHqRD8%3D\"}]}\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-58f\"\r\nage: 647\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dbf91fec1db4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1423,"size_decoded":1225,"mime_type":"text/css","magic":"ASCII text, with very long lines (1423), with no line terminators","md5":"edd56f44a35a0e33b0eae66e5283ab77","sha1":"74a9d615f1f6c3974edb790a58cc802d09ad25e8","sha256":"449e2d8b37ae8b7cd0e922b7a32b6c8850527b2bb1e64d1a750551c5ba87c7dd","sha512":"1b58ea4c400586de9e0b293f61ba6c8729c61901ce24767a9fd4c8a0cb64b0bb2857d6d03ef95c9b36f6095e4e40181a88c345316d4b1b0cc68d99cca393b28a","ssdeep":"","tlshash":"3c214421b03f2e8b78bf81ab10307fffe37bd831a46036365de56214474e0a056d6216","first_seen":"2023-04-18T18:06:28Z","last_seen":"2026-09-23T09:30:39.147844Z","times_seen":1558,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/bg-circles-white-OP35.png","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.016Z","timestamp":1789856379016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/bg-circles-white-OP35.png HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=4,i\r\netag: \"6a212df9-16d0\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 647\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eIRw4XX12xsRuJ9JS3gvXrMk9Hl5S60r1nOUu6OjeM2zRlPPfp0QG%2BW8OVvSjlHY8hwBHeCrrCAPmto1hkHRyHV4wZzYxcgTtXIN%2BRpSKRo%2Bc%2FuqLqpqyjmvtcEQrycjJkM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf920dc36b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5840\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5840,"size_decoded":6612,"mime_type":"image/png","magic":"PNG image data, 529 x 538, 4-bit colormap, non-interlaced","md5":"b12a0ad57168113cb5f0821d9b844607","sha1":"5f531144def2a2b1e4e7c5fbecbb3788ff54970b","sha256":"91c06a0126e346fc6bf92611e131508d462c2bcf1a0a9aea94480390fc60528d","sha512":"c5756a0fcc7b541b6d8260f6eeda3ee4867ca9802292323ad21183c914325f1af5bd7233c5d45f0ab343ca5387c92563174e881ed07426ffa2c3d743259715d6","ssdeep":"96:sYHCZB+OeXvtZc0gLgBUWoOZx1L9FrR/+7Wjm6h5bkufOZYlJ+QSixXy:DmBbe1T5ZL7rwR65bkeVBy","tlshash":"17c16d8b45c8d1bc4b72daebfd3d568dd2995e20bc2c5e150ccee319d92379126e7880","first_seen":"2026-05-30T03:26:08.008584Z","last_seen":"2026-09-23T09:30:39.111148Z","times_seen":11,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/modules.woff","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.070Z","timestamp":1789856379070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/modules.woff HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/lander/logic_ocean_camp_fire_done/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: font/woff\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6a212df9-167b4\"\r\nexpires: Tue, 29 Sep 2026 22:12:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KfeH%2BIJ%2BOZiGk0FtWX0z32CFfcwJsAQgQyj1NWQM9xAIKJRmKFGjV%2BQgjIz3MX0RsTeNv13b%2FefIM%2FCObnDciJLbFrrL%2Bkq4U6Zhaw%2Bvzs1WFa4UsPwXqYnBKHMfVVvwA%2BE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9213c44b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 92084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92084,"size_decoded":92869,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 92084, version 2.4","md5":"4f7c51948ce1b802a13ebbccec151d0c","sha1":"5b1d3cd0929108da4b6334c4a487db08c9520f1d","sha256":"fe67b77ac7e0ef4b482dafb86adfa403db1b89a2f337d2dc8bd1278cfe975196","sha512":"87fab156e0c1e79f4dd07075cee8905dcc8c01c7708fbf6e9f6592f1c0f62083c86d0076ec23f73fc4351b51d6e03951ff7aece0ad9305488b910a8f8fefb023","ssdeep":"1536:n2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWIh:n2S6qLRqKELiXMjCs7VDmGWAN8H79OIl","tlshash":"e593f97bc3cbcf7fe955e775087b4a252dfadb26926fc40e9a451c869504cf80d28290","first_seen":"2023-09-22T00:38:17Z","last_seen":"2026-09-23T13:03:46.042845Z","times_seen":47635,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/AvertaStd-RegularItalic.woff2","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.071Z","timestamp":1789856379071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-RegularItalic.woff2 HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6a212df9-9e4c\"\r\nexpires: Tue, 29 Sep 2026 22:12:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M%2BTyQEvMJvUfMuhsQbaOlOqDRdAifTsiMRP6xSkfjelzGpoG1nn1EGiouU%2BCW1axpQ05hciLkUS6ns4TteQzEzZ7dEjxf5jgsDzQ21OMRMqYyySMBSATpOD6Q6GjziUyN3w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9213c45b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40524\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40524,"size_decoded":41297,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40524, version 1.0","md5":"f8e4a3390c306a40716993bd14a23488","sha1":"43ecffaac6deff6e7020309bb8c0dc991267d3f2","sha256":"81cb1a0bb4d6b040af9ee50577917d923cfd1770c35f06aae6bce2a9d1f83dd0","sha512":"131ba13decf620d5de923aff4dd99e6e1a28d8a8da439da4a48a1b1cb7fe752d712135be1b18d17d3aeef2c8e3debd09646507191bf83abda10f38e5eca6d70a","ssdeep":"768:VUqhAC2G5p943MiNk9w8B3WgoOjFMTbAx+HX1bMMEcwsJkPnGMs5PmnOsct:KpC2GZdBxxcbAwHhbvJqw5mpE","tlshash":"b203f2657466e184b2bc22f607e49e48c5f9234c47947f8ee55b68f082e27b374c065b","first_seen":"2026-05-30T03:26:08.009633Z","last_seen":"2026-09-23T09:30:39.121249Z","times_seen":11,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/cropped-EO_icon_primary_RGB-192x192.png","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.123Z","timestamp":1789856379123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/cropped-EO_icon_primary_RGB-192x192.png HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=6,i=?0\r\netag: \"6a212df9-4ac6\"\r\nexpires: Tue, 29 Sep 2026 22:12:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nlLZ2QnOUQ46mJ4bYQQ8YHG8ALQnAfLk0BHcuxk%2FmzahRfGqqaJNGEJVN4mSI8%2F3M0THwd1t0m1soAKjPCuv1T%2B5uxffd26i%2FpK30vbzSRU97WojNR9UGUGf99ADftJhx30%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9218c4cb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19142,"size_decoded":19918,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c65b7ffd580a9a89d1bd12e4c7bfe055","sha1":"c9cfdfb608b2d2bcae7a57d32c0220ce3bcb1e8d","sha256":"0d1e0527657eea904af51997ddc2601225af900db31b7a11777d82470e625e89","sha512":"5d082930cd0d2b34213ec386b7a943963abfe071f46ab75310928757cf74f8296125626bd8b5b7e84e64b6013cafdd363ea4d5e3ebe033b8a0514f4d83a53165","ssdeep":"384:AjO7EvMKXKKw1eHGXPRsNOskpZZaGlu0TKpthlguxq3A2zaUQe:2OPKXKKw1eHGf6N1kQGxsuxA2zNQe","tlshash":"6d82e16f4a101c56b70a3a42e1555d35819f21a19dd839d33f22c9f32beffb121530e9","first_seen":"2026-05-30T03:26:08.014877Z","last_seen":"2026-09-23T09:30:39.089102Z","times_seen":11,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/column-stacking.min.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.862Z","timestamp":1789856378862,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/column-stacking.min.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oto14dn8NuPiuZyAaRbCh56GyOMOPTIot0sJEanaeXvbvq7KT0XqsN6HgNrgkRRPTqraCEgp3w4beM80INwFYWATIDmyrnMUm0UpPp5Xhub%2FBYI4Db5Qlh02dtArVGlsHHc%3D\"}]}\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-8b9\"\r\nage: 647\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dbf91fec1ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2233,"size_decoded":1264,"mime_type":"text/css","magic":"ASCII text, with very long lines (2233), with no line terminators","md5":"6c69d4437ac5a956a0a68cccc71e0145","sha1":"79f73a933a1c2a95550875725ac0e773ec44a7f4","sha256":"2e6639ff321279a4a6db26feda0ebe466e2306b53c6cee8aaecf759ff218020d","sha512":"9ecb924796ec7d57cdb19f8d3cb4758fa3c78b6514c5849befcb374b9c6aee4ecd5d191a171cda77d976c779c07e4c93f51ab04f586703ff3e8236d9e72983f2","ssdeep":"","tlshash":"2741298bf2bb2220a345cb0b87980e3b15dd38018b8b596fe9bb7ef145641c20930c5b","first_seen":"2025-01-05T17:23:32.091008Z","last_seen":"2026-09-23T09:30:39.157997Z","times_seen":226,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/jquery-ui.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.865Z","timestamp":1789856378865,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/jquery-ui.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KzzmExoLSS0wielNvZB1jO2959ANe6WUwNIkwy2SQEyjaffYuIb%2FJ%2Be8l9eCMKELT4ifDSL6QSnnapayafPbZJsubMZfHvBuAWEzHSAIyrh2rlARnOscxwFGTeflRYp43R0%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-55b1\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf91fec1cb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21937,"size_decoded":4876,"mime_type":"text/css","magic":"ASCII text, with very long lines (1188)","md5":"defff8c79fd72ee0ecf0899c5b35b704","sha1":"244a1f73081628d312395577de9d8c35555268ad","sha256":"7bd010a8f163b5c4df8bd5af6acb836589055da992fa89f8125373a29d263de0","sha512":"ba6757c74f5773d100607b40460ee12b06efad57f9538103982d5cb8550030f0c50f6bfbfb0e3cf5dbf1ade019401f1c503336e1fced51357df5489d3a21fb07","ssdeep":"192:M2fab6lYUQDlPiF5fy/EQgmB0iBfT9RhS2wV53skuMaaSQhQz0iIhBb:jCb5PiF5fy/E4DS25qb","tlshash":"d7a259316e43250dba5bd16461a11bf3d23f2342fc676e3e64ab25a8d3d94e0c16f9b0","first_seen":"2026-05-30T03:26:08.027946Z","last_seen":"2026-09-23T09:30:39.164773Z","times_seen":11,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/readmore.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.884Z","timestamp":1789856378884,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/readmore.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B%2FmRwpuUkCeZlQDzIsON%2Fc0CVfoGep0FJG419mVzCJ4YWHM9L2kV%2Bn3MVctq41mmVNejBImBQp3xCI7Tg4gDlOXNMF6jygRyArh4Ur71EoxWe9710XEJ5Qkj4njd107M9C0%3D\"}]}\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=2,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-6bd\"\r\nage: 647\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3dbf9200c29b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1725,"size_decoded":1375,"mime_type":"text/css","magic":"ASCII text","md5":"bbd61e5da0b9dd8b9718dd37a9582c3f","sha1":"cff350a63740a5a5eb17958f451c81b80b28aa1e","sha256":"009e58f3632270c3fa8d127a9e132807a0920ac00512a2a0c5f3e8d5d728d373","sha512":"3e52975ac4da3e0762b5d79b6aa4ef8148a3e3dce36e27aae16cd810e2d53fe3d7dbb3b6cc3eef1d0350720fd5f6f2dd5536a1e58ec5cb68f063316224feb354","ssdeep":"","tlshash":"0b31ff31f12b19807237dc6c33aba7da6b2b004341c9c41e7783ee688f9e58855d1b16","first_seen":"2023-09-13T08:36:27Z","last_seen":"2026-09-23T12:02:29.229963Z","times_seen":3112,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/AvertaStd-Light.woff2","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.074Z","timestamp":1789856379074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-Light.woff2 HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6a212df9-a464\"\r\nexpires: Tue, 29 Sep 2026 22:12:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=feRq164TNXvV%2B2Hmgx8wQUqMtyhrUzJEsw2kvtOTvQmY6bWYNeVRECMQ69nV63ypLH9JtHIvBG4mGYoulMpPkFGJNGi%2BLwt%2FaohD9r1IrFx%2FhJcxXmBS0sQPRjFEjdzoUJA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9213c47b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42084\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42084,"size_decoded":42861,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42084, version 1.0","md5":"3f5e0d4d19a91d7aa331b307bb3f8af2","sha1":"52dc630be0b99b26bbce23f17cfd30a46947a9a9","sha256":"c60040e34a6662511cd0dae1eaa42e50474535eddca98ef9c941a9aba24569b9","sha512":"81d448162f66c464fafc004e7cef021f0779e2e291e3b8469276454b1b4e163e75456d9a14dbd9dfcbef02af5cfdb49d680f4e385d41872bd010682ae548ec0c","ssdeep":"768:bZ6cvAhc5L+xRKdCcHu331hmH3a5NnCyODMrkXEXaYjqPGTleD3iT:b5vv5L+xAklcq5NnCbQrHXaYGeTlc3iT","tlshash":"c213f26db19067480c9162747d90fe34fcaad46a016ea8b78e4fdcafb1cb40f3685463","first_seen":"2026-05-30T03:26:08.013967Z","last_seen":"2026-09-23T09:30:39.128207Z","times_seen":11,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/frontend.min.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.864Z","timestamp":1789856378864,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/frontend.min.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iynvllWbGgWK%2Fc9oXCdiziY%2FTE6xJH%2Fx0s2GuieClItDXYnenw3LzXDiexZnnZco6XE8SAAfci7YPeoikMHDqFouC9MAt5xDbGnCC7YTWvw5t7MJlEEcGO1K3W%2FQdKE4ma4%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-21f93\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf91fec1bb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139155,"size_decoded":16140,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (65536), with no line terminators","md5":"8965c87e140b1f2e972b15956be98d33","sha1":"053ad33eba4954b559491ca914d30619fae06381","sha256":"6d0606444561cf6a8b3c281210eaecd8422f8cd607a1222c2f106267a2ccf467","sha512":"0f884cda618c291b805c431b778c39db80ea435b886727d5d6fa5a2bf2abdb063ed483858b3ad7ced36e4b04b5ac7c5e7a4d9e66780144cc84a54dc235899ce0","ssdeep":"3072:3rwh933Vg5nfcEMmjD+vYvA8I/P0xpxy0ysiqMo0x6UxyEJu34460npjXxrEhbAw:3rwh933Vg5nfcEMmjD+vYvA8I/P0xpxq","tlshash":"e3d310b0931a137bfd2f553d177de28c5b78eda3f6191da488616f08834f52212e3a4a","first_seen":"2026-05-30T03:26:08.01078Z","last_seen":"2026-09-23T09:30:39.162257Z","times_seen":11,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/choices.min.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.875Z","timestamp":1789856378875,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/choices.min.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SK0zSYVS5%2FTWL4WD1SSbwcDXn4D7OkG2iUDzLpWBjgSdw1TYgJgck78Q2IIedZHaupFuAr4atNYhTW%2F%2B6hfY7plkPbJTSezwFN1jDpuzA4EfEj%2Fk3uukRGchh%2F%2BLe7cEXRA%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-6c61\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf91ffc22b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27745,"size_decoded":3461,"mime_type":"text/css","magic":"ASCII text, with very long lines (27744)","md5":"1cc4202424e5e0dc7935b721a005d04a","sha1":"3e5554edb1d9145a384195303b7485d138b9c508","sha256":"98ef8f7cb33457c23db76f0cc75e612b0c0e11ca9bdb83dffc9f37412bd18028","sha512":"ac50a8ed498c8dc94da232f310c2a230b66d3e058c080d9e77d8bac1104c1fd3ae7f7e58d936da487e6857c74e5583f900b83c16230239cf25fde5549c9b2a91","ssdeep":"192:jQ0IQ68jQ92jDHX2TWQrQm6QE8jyt4ZPBz2TWGf:s0n6t8PHIEmpEt+RBCf","tlshash":"62c2bc7de7217ea8e93f855ff4ee56db5f24c09295084d7eda03e830eec08642112ba5","first_seen":"2026-05-30T03:26:07.995831Z","last_seen":"2026-09-23T09:30:39.109999Z","times_seen":11,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/style-static.min.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.886Z","timestamp":1789856378886,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/style-static.min.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GxnP2uSt3q4uJbaUlmNMYB3vCJ%2FC1gTYAX2jKXRp47mFMdtXU%2BjLt45SHK0Ea46Ky1OjqCNVkQqBX0NDdGSkbestKg8ZMrL5gRzPYZws5w77TzpBpKHQgAFGLBnhToU%2FyWY%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-c91af\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9200c2ab4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":823727,"size_decoded":79794,"mime_type":"text/css","magic":"ASCII text, with very long lines (65192)","md5":"2c0c8f3510c3fd5491e8e24ebe965578","sha1":"6138602a8720c24bf8e0b048d607dca20dc1137a","sha256":"30a5ace256e27f0eee80d048b15de9eb8001f7fdc23d089251755b73abce5587","sha512":"da9918e7d496a2118398e35fb2bfa58493bf097f14a05d517371c00a8dbe887d1f133872a3c6351609365190116c58a100e829bfd4fbae4275017221fbdaf0b8","ssdeep":"24576:1TQg4hNBo7hS974f5XSQ3fucSH54skc2XVeIUjnEgIPXi8xXK+hHbe+8w8mGwYg/:kNBo7hS974f5XSQ3fucSH54skc2XVeIR","tlshash":"6205768fef3236f133439798bcd6a7a4e1dd92439a0118d6bc60e62467c325b4a7319d","first_seen":"2026-05-30T03:26:08.030219Z","last_seen":"2026-09-23T09:30:39.092743Z","times_seen":11,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/bg-circles-white-alt-OP35.png","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.017Z","timestamp":1789856379017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/bg-circles-white-alt-OP35.png HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=4,i\r\netag: \"6a212df9-15ef\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 647\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EykOHL5g8Kr6HfVeEyvzpp5sVnFcBc8CCGHSwx9rMZuovAmLA5bG7LJIuaC11NHkEYsFYMqShlU7ftTl0fBn6xwHLBliv%2FOR2tpgPyvNdUziCGqzCtdC3j%2FzKOReaF95zsM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf920dc37b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5615\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5615,"size_decoded":6383,"mime_type":"image/png","magic":"PNG image data, 538 x 529, 4-bit colormap, non-interlaced","md5":"9500778d953f3c0d8cb85dfdb187d81c","sha1":"79f6264a72080d68db0274a69c9dddfe93f1cbb8","sha256":"c423ec3898e33c158bcaf9017d813474ad8d8122a1283664b1b4defd14a89305","sha512":"09b727223920bebf658256d260a82e1e61f9274f6949f915002f249e871335328a5d9b655c35c9020285fc493d01b922b094d6658a3da90508ab3abb77c8624e","ssdeep":"96:Q9iLrU+wiK/FrwGmk5+mESJALF4RqZZEdgBkfH5wkR/tf3J6YaVVV3E:wiLrJFK/ixkASw4RqZZ4gB4H5vR/tf3d","tlshash":"24c19eca98649968ae3ec1aef7c5e0eaca57cc3ed3c04a925109b5bc00de749108f6c5","first_seen":"2026-05-30T03:26:07.981325Z","last_seen":"2026-09-23T09:30:39.08725Z","times_seen":11,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/fa-solid-900.woff2","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.076Z","timestamp":1789856379076,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/fa-solid-900.woff2 HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/lander/logic_ocean_camp_fire_done/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6a212df9-139ac\"\r\nexpires: Tue, 29 Sep 2026 22:12:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nLXhI%2BignGmD2TTvO%2BU2ceNCqgOSjbldBusMo1p5WWisstTgoxpQHNPtrcVi87%2BurPJ%2FddGi19vMNZmZtFuSH4IuNY%2F7bGCy84cfmKHPwu00WdaXMS%2Fo1tnwxAiOjszdHKs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf9213c49b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 80300\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80300,"size_decoded":81082,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392","md5":"8e1ed89b6ccb8ce41faf5cb672677105","sha1":"9b592048b9062b00f0b2dd782d70a95b7dc69b83","sha256":"6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7","sha512":"e2f6b4574cb1541dff6852d0af44faae80286110e8451841eade4b53ebdf31150602640fe1bdfff41459ea4ae884d14d115fbc93b30d199c87b88f5d07e4cd72","ssdeep":"1536:Tek2SzK4WGTQH1GlyGLj3SUwtyIWeOo4XyydPl2mN4fsxDFsbaLsND1Vv08:ak2gTQVGLL7IyDelE7dPZ35FeND19","tlshash":"d3730272fd7b05541fe8e3ad39390568bb881acc35c949f2058afc95e0ab67a7684d03","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-09-23T13:08:59.432224Z","times_seen":31890,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/style.css","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:38.869Z","timestamp":1789856378869,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/style.css HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:38 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uat4XvZWOAxt9d81Gbyfat4s%2Bo%2Fi7qhzzLLnur67jfy6oyaYRgD0s55a9Q5Ih72ZJKPirHu7KbxScJVvsv%2FvYFisvygTVcBJpI3wCWR8m0N%2BlLWzsgL7TFAjlNrY2GTf7hw%3D\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a212df9-7457\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nvary: accept-encoding\r\nage: 647\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf91ffc1fb4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29783,"size_decoded":5604,"mime_type":"text/css","magic":"ASCII text","md5":"24ab47323b6390300769537d3dd7712d","sha1":"5a8bfbddd437827054f59026206649ea4a0e5e02","sha256":"c5582dc86627b2f997fd35a3e4607eb50850627b11b47a59a5a423bb2f96a3d8","sha512":"67f785709d3bcd6f4fe007b6fe356be69f69ab0f8853613a5d1a02b1ea3e4fa7f7fd199fc6935fb3c270ff4daacb35949d813e90b592b48f93fa297c5c77fec7","ssdeep":"384:bnYZfQdaWByHUawd+WHqa9Ha9psPrnbb4OWSI682E/RpO1wm:MIdpUH8d+WHqala9psrkZpOam","tlshash":"5fd2c6e4d6bd0ca3b305d0d153662513b75d927acd866e19d2b37a8cb5e221cc4832fe","first_seen":"2026-05-30T03:26:08.004788Z","last_seen":"2026-09-23T09:30:39.108787Z","times_seen":11,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/EO-Koepelgevangenis_header.webp","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.012Z","timestamp":1789856379012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/EO-Koepelgevangenis_header.webp HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=4,i\r\netag: \"6a212df9-5d51a\"\r\nexpires: Tue, 29 Sep 2026 22:08:51 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 647\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=li06YQ%2FOz%2BKgntu0CL%2FWhHZdFEVFWqQZLrv1JupfpkH%2BrSAVClFgU1OWbrGIBpg2DgbA51xoT7%2FcmvdBhNSpdSNECipj1wc9sop9QFh3vrhHxnyjiXtflfr7GhpjWpqZSI4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf920dc35b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 382234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382234,"size_decoded":383012,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1334, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"632660938e3c617637fcd459d395fd35","sha1":"2190f5fae7ea8d9b32f6904c5fd4986132cc6996","sha256":"66d84ea9e2b17a53a25f81bab39a36b5233705790c436c63af61ddcc24032838","sha512":"d3d70ccdd3c857339af9c78181a8d651d434ff35cceed19e1faae2ee5197ce782ce8367eaa719af38a2472334d0c19f85391841adec07c4361bc8b8c530199f4","ssdeep":"6144:o1gyckgFmWSXf6zeiaT9HAChOgWM/5ReGDC2bZq5zKvEyqfcP:TlmWSyQ2UOgWKHeGDC2Q5msyqo","tlshash":"438423572caa48538ab2c7c8cf351a8b53e4f25c7c82ba990f9f45e5c42d7e54f07a11","first_seen":"2026-05-30T03:26:07.980312Z","last_seen":"2026-09-23T09:30:39.085882Z","times_seen":11,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"willemleeks.com/lander/logic_ocean_camp_fire_done/fa-regular-400.woff2","fqdn":"willemleeks.com","domain":"willemleeks.com","tld":"com"},"ip":{"addr":"172.67.195.27","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://willemleeks.com/","date":"2026-09-19T22:19:39.168Z","timestamp":1789856379168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"willemleeks.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 07:55:57 GMT","end":"Sun, 01 Nov 2026 08:53:19 GMT"},"fingerprint":{"sha1":"A1:7A:05:40:F3:86:45:80:AB:97:86:EF:64:C1:AD:8E:50:FE:39:05","sha256":"9A:EA:86:DE:83:34:4F:60:06:40:4E:E8:9E:85:03:10:9C:10:0D:0A:0B:58:A1:8C:7D:6D:03:0F:3F:93:83:6D"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/fa-regular-400.woff2 HTTP/1.1\r\nHost: willemleeks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://willemleeks.com/lander/logic_ocean_camp_fire_done/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 22:19:39 GMT\r\ncontent-type: font/woff2\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\npriority: u=3,i=?0\r\netag: \"6a212df9-34ec\"\r\nexpires: Tue, 29 Sep 2026 22:12:47 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 412\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ywmXahK72tZ7u%2F5fzKdVgcrLePZRpJxD3Y1sf5leZcTbnUqEqFg%2B6QVRGA9A34Xxqk2ykUUT9WXLIstAAAEZvhGEppFBKbiGXwc1OtUbbWeQrBl%2BApGouyywxBNJTG9VqDs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3dbf921cc52b4f3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 13548\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13548,"size_decoded":14323,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13548, version 331.-31392","md5":"4a74738e7728e93c4394b8604081da62","sha1":"fb9648469530a05fa9aac80e47d4d6960472a242","sha256":"ce20ed8a323117c8a718ff1ddc6dabb997373b575a8e896f2bf02b846c082c9d","sha512":"cc1f2ea5a6321ad04ffbc43022184785acd7db636109b841694403261850744b47cb5f2b60fe4f72d717668880392f3ea477c013a90e61c66aa68fb60704790c","ssdeep":"192:MOw0hBKT6co4S2NIyI7e7biB9nnNn2AY28rvYI2k0EQTW50IBNd+N/KwWBuWAgm8:M/CgMNnN6jj4k0EQ6PNdE/KwzW2du","tlshash":"8452c1b68fa74c9cd2d33d140b5e5294f6175a8512baa22396cc82ac008bf745cdac87","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-09-23T12:58:17.844526Z","times_seen":11715,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"willemleeks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}