{"report_id":"3eb9f42b-5b6c-4834-9e9a-d0ad900d5dc9","version":6,"status":"done","tags":[],"date":"2026-05-25T10:09:49Z","url":{"schema":"https","addr":"nibirufi-5mq.pages.dev","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"title":"Airdrops | Nibiru Chain","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T03:04:37.051165Z","times_seen":17911849,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-29T10:09:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-25T10:09:26Z","timestamp":1779703766,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":40840,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-25T10:09:26.115998+0000\",\"flow_id\":1377720816015172,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.72\",\"src_port\":40840,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"nibirufi-5mq.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":924,\"bytes_toclient\":3552,\"start\":\"2026-05-25T10:09:26.104260+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-24T22:26:02.229202Z","alert_count":0,"request_count":1,"received_data":388713,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-05-24T22:21:07.624228Z","alert_count":0,"request_count":1,"received_data":3215,"sent_data":460,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"nibirufi-5mq.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-05-25T10:09:52.055365Z","last_seen":"2026-05-25T10:09:52.055365Z","alert_count":16,"request_count":8,"received_data":8535498,"sent_data":3684,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-05-24T22:18:17.447529Z","alert_count":0,"request_count":3,"received_data":113301,"sent_data":1698,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e46eb7c6e9b4b050b4b3d5c849e4035a","sha1":"d59979b0a83fee3e4707ed3706e329454d56db7b","sha256":"bdabbdd113e75fa64299750833e19a978ca1237746ceca982272d47b3642afd2","sha512":"8fcd511a03840f59c8ce68b89ec4074f6710495243a27e0f9894e65c5bbdf7ffe2bd84efae5fbab3e0064984000a75dbbaabab2f4638db517719ffc2ff2395e8","ssdeep":"","tlshash":"fee02b286e5610f926b37495c71f7240e86000735081dc01fd1cf68a4fc0f1934b1fca","size":303,"data":"","first_seen":"2024-04-19T19:24:31Z","last_seen":"2026-06-01T09:56:06.251798Z","times_seen":45,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/1abe2e4f3b1baa7-349d95.js","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25bbbc9d37a97fc3568eae4f6dd2faa1","sha1":"1fedeb726fa8c516f4ad5dffd550cf90d419fd55","sha256":"541b52c9261c88d81ed25d96575af068200ad52b723847192e679338eea97729","sha512":"281c29a27f9a1e113cd7af761355e0f59010c8b0fc737d58b00ed1586baa5d9a0ddae5eda4230b5e4efef6ca653d44dd57177e8fec213d48b251d27f58dd7db7","ssdeep":"24576:5lXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJJARbWeK5GMl8pUWtUiC:TjBXpyI6yQo7ebCNt9YWd/YpS","tlshash":"cb553334ab032dbfcf5cd73ad1cf0b0d2d954e938898d9eeda1860d3919bf4405aa864","size":1408505,"data":"","first_seen":"2026-05-25T10:09:55.048246Z","last_seen":"2026-05-25T10:09:55.048246Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"41d30b7e08524bbc4846f310d0179a2c","sha1":"484a3971afed6bd701f55b15659e0fd64b2d0761","sha256":"e053ff1a6fe0a08ead8bd665f31a3b78ac2a692ecb038b5929cf7b0b7044c73f","sha512":"f8df3c644d5ec7e5db4c2a3631a4a78cbde3720b296334708277004bb3c0a9af91c3628e0abf9930e5f11eb94f5cda498ef805d80576064643d8fd2462830960","ssdeep":"","tlshash":"2cd097e82d95133823736424831f92803be08003a0e0f802325ce5c70fe1e1000bf4db","size":260,"data":"","first_seen":"2024-04-19T19:24:31Z","last_seen":"2026-06-01T09:56:06.254105Z","times_seen":52,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MTZCQ3SH\u0026l=dataLayer","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5de2f4bcc186ea32c260c5b30840b9d","sha1":"90319ef22c32d11f45984a7fc80a69ec1a172e12","sha256":"82042774fde00587af5d6e4c2dc7cebe607566d4c0aa0ce1a91f61cf0303b1ac","sha512":"4efe96eab1a98262fde05a5207f16e2df2c96242d25e731217c0bf2834dea971a24082249d387bab675c5827b567af701b89b56f71c77ca99bade25562b9e37b","ssdeep":"6144:gTpDlqfVfuCeAnCa5qjxndXRFqGFCWNYbLTb:gAVfuCeAd5aXYDb","tlshash":"3e8408cdb3d674629392a478903f028ba57a78e2f44cc899f189ccd42e7065a4277f7d","size":388063,"data":"","first_seen":"2026-05-25T10:09:55.042745Z","last_seen":"2026-05-25T10:09:55.042745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de336bfd9869fb1b7097515e9c63f256","sha1":"94555ab2e1b3843b713e2ef8e7596e84901286da","sha256":"dedcb040698082aed8924ac00eda5306bb0838651eb3f41766153c89e3e1fbb4","sha512":"d9b02eb03c0b0a3d0bfa114de4e5e75fcf1baeec08fc978d9069714ded3f1585c2685601e65b7324c15e0a18ec8d945d7f4dbda54f5c05e6718805a9568e35f4","ssdeep":"","tlshash":"50e0cd3d35751574097bd86fc64b934f7db2141b6001e8167d4c914b0fa4f1034f6599","size":337,"data":"","first_seen":"2024-04-19T19:24:31Z","last_seen":"2026-06-01T09:56:06.254668Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=DM+Sans:400,500,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:26.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:08 GMT","end":"Thu, 30 Jul 2026 15:53:07 GMT"},"fingerprint":{"sha1":"A0:20:9F:E4:EB:B9:7E:2F:51:C6:BD:BB:AF:02:44:35:C1:8D:84:74","sha256":"EB:51:AB:28:F2:0A:E5:3F:51:9B:1B:F4:37:AA:7D:8A:6F:D7:99:5E:A2:B6:9C:EC:43:85:C5:36:68:23:BE:CD"}}},"request":{"raw":"GET /css?family=DM+Sans:400,500,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nibirufi-5mq.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 25 May 2026 10:09:26 GMT\r\ndate: Mon, 25 May 2026 10:09:26 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2529,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1bce780bf8498996ec928e2cce04ea37","sha1":"5b609e026ddcca874ab7c3de84d045d6a41fb99e","sha256":"fc72d3abc18f364da9d514a18d9702fd68bc9b56a99315c42a7bf69a49d64ad5","sha512":"d5b462952dd3713e1a7583135e43781781fb315aa7d9c7117be90310c0e4f86be8dd9cbd51c19dc5b3aa8491b7834297edd68fd3ca1de332cf4a9ab589a03018","ssdeep":"","tlshash":"eb518841042ba550e79328c9218dbd72eb1fa15464546c70abfe289cfc6ac7e5372b8d","first_seen":"2025-09-11T17:27:38.861401Z","last_seen":"2026-08-05T17:27:26.220107Z","times_seen":290,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":147,"dns":1,"connect":7,"send":0,"wait":20,"receive":0,"ssl":139},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/favicon.ico","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:27.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibirufi-5mq.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 23:20:57 GMT","end":"Fri, 14 Aug 2026 00:19:41 GMT"},"fingerprint":{"sha1":"42:2E:72:BC:F1:D1:F3:94:9F:5D:33:C1:3E:A8:25:57:F1:82:CB:20","sha256":"8E:1F:DA:15:BB:33:19:39:63:5F:4E:33:3A:EE:11:3C:0D:F5:6B:97:31:7F:D9:EF:30:5C:E7:C0:89:B4:56:6C"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: nibirufi-5mq.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nibirufi-5mq.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 10:09:27 GMT\r\ncontent-type: null\r\ncontent-length: 165662\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"528f86f5c0ce2316ba8dccae02f750fc\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Su7YOuG58%2B3KTyhNw%2FIX%2Bc%2F3YuXBDARE4%2FaPqDDgps1dSnzp8FqHQncTisCi84fMZw2skMzhDgcONQB0In%2FQZqKs5u9MQALVC7UbvSkVY0MqO%2FZGp5sENwRkprYQ4D5ZUlXtsyoNsVYz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a013bea4f88e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":165662,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -56x-56, 32 bits/pixel","md5":"efb168d8cf61d3b0dc457495692986da","sha1":"e947a7b8fc8fea90e7309877a5db667ef944b373","sha256":"744378d1a34639ca886d5ae9dfc97aebb636d2ce590ac2027b9cba7b324b1332","sha512":"cbef3c2cafc46011cd2abe58ba517e1463e278452dc6a0baa5f1e622846f50539e11f3a4f52d01e56107d1d9643ff7a7b216ac8c195cf7cabf414254ab896cba","ssdeep":"1536:DbebuRp6nlczlsNpNtcZVQic7R/XrFjAbHD7AYMyH9s3GIKulLT0:DSbuRpUczlsvN4dQRojTd00","tlshash":"e0f3622a69f5feb2d00451bed605e8603a1edc0eb6958f105bcae92734c6bf3dc2e415","first_seen":"2024-08-19T20:36:28.885986Z","last_seen":"2026-05-25T10:09:55.012618Z","times_seen":9,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/assets/dark-hero-5iEm_q5S.svg","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:26.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibirufi-5mq.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 23:20:57 GMT","end":"Fri, 14 Aug 2026 00:19:41 GMT"},"fingerprint":{"sha1":"42:2E:72:BC:F1:D1:F3:94:9F:5D:33:C1:3E:A8:25:57:F1:82:CB:20","sha256":"8E:1F:DA:15:BB:33:19:39:63:5F:4E:33:3A:EE:11:3C:0D:F5:6B:97:31:7F:D9:EF:30:5C:E7:C0:89:B4:56:6C"}}},"request":{"raw":"GET /assets/dark-hero-5iEm_q5S.svg HTTP/1.1\r\nHost: nibirufi-5mq.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nibirufi-5mq.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 10:09:26 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MHEWlVeQtqFd9tCAMHK7gTuTgO5gLsMPlsPF1g4yxtl7Q6o0zHY5vZ8%2BxvUrPo92ajR7KcozHo0xVyykPEIEZTw%2F0Gh9DWy2jsZqvvE9EMv%2B%2B%2FrnwVxBuuK8DqGZ5jVQnkAfBZxKVu8B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"bba8ea40a56c43112930f2e9a9a8640c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a013be9cefa256ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":48170,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"698fe337f305ea9dd52c56e71e1bfdff","sha1":"033b38b1bfe6a4eaff498259684115ba530f6b44","sha256":"456a17f1be8826d4cef3e4e2caa8f5a26724baf98e8632d872009d1becca73f7","sha512":"3d81d5b4b90475a545fac66ac4db0cb02a4807a1e6448da8111fb98b2ff8086ea8b7a478e68cd7e7cc530d0269e9dda985681b7b63fed613504b53a069a3c687","ssdeep":"768:L7kWV4zZvYV2nnLD3AYrQ+1PUG92XDzDS4Ogxhe9uR+el86Jhk50syLSj1cLcpeo:UWIYsn8zFXbOgx8YhkduLcpA/mf","tlshash":"8023b7dd3b6495f9fe888bdfdb025068286da8b37ac1c551c2589f0f846493c5c6bac3","first_seen":"2026-05-25T10:09:55.018818Z","last_seen":"2026-05-25T10:09:55.018818Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/assets/light-hero-1ns1YVh4.svg","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:26.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibirufi-5mq.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 23:20:57 GMT","end":"Fri, 14 Aug 2026 00:19:41 GMT"},"fingerprint":{"sha1":"42:2E:72:BC:F1:D1:F3:94:9F:5D:33:C1:3E:A8:25:57:F1:82:CB:20","sha256":"8E:1F:DA:15:BB:33:19:39:63:5F:4E:33:3A:EE:11:3C:0D:F5:6B:97:31:7F:D9:EF:30:5C:E7:C0:89:B4:56:6C"}}},"request":{"raw":"GET /assets/light-hero-1ns1YVh4.svg HTTP/1.1\r\nHost: nibirufi-5mq.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nibirufi-5mq.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 10:09:26 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Liv8sd%2FRKvokRWCiEDvA4ztsZKI7iy2kzqm35YxMT6%2FubLd4Opw%2FiQTrfsZBbs77V2eGNtzdWFKCueAOtsjSynuUT%2Fcas%2FJx%2F75gtrbtEYOKrgClW8nVGYPsTREa%2FMTADL0lup0AckYc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8c637e662b60d86cc47385a341673a73\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a013be9cefa456ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47896,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b9b3a5e2a7ea712671a9c502ebe7f22","sha1":"bd91e207f8b1b422f0899c9cbe49e9160a6c54b4","sha256":"2fefdd4ac79e845c6e8038d5ef5f0754510965f50fe0d03675026a1b731f69f6","sha512":"2e01d001af55aef3cb8a8f40cf6a33ed94bc0fe2c049ad6b09b6aa48825f2275784d23cd570040d158e0cf94029a37b2d2e0e35d4b59901b0efcf8e6c778368d","ssdeep":"768:LHfiV4zZvYVkn/LD3AYrq5mP33XUc+2XDzDS4OgxhB9uR+el86Jhk50syLSj1cLT:biIYenxE+XbOgxvYhkduLcpA/mO","tlshash":"6a23c8dd3b6495f9fe888bdfef0250682869a4b379c1c551c2589f0f846483d6c6bac3","first_seen":"2026-05-25T10:09:55.022593Z","last_seen":"2026-05-25T10:09:55.022593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:27.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nibirufi-5mq.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:52:24 GMT\r\nexpires: Sun, 23 May 2027 14:52:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155823\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-16T02:59:38.204501Z","times_seen":33762,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":119,"dns":1,"connect":7,"send":0,"wait":11,"receive":52,"ssl":114},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:27.034Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nibirufi-5mq.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:52:24 GMT\r\nexpires: Sun, 23 May 2027 14:52:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155823\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-16T02:59:38.204501Z","times_seen":33762,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":60,"dns":0,"connect":8,"send":0,"wait":9,"receive":8,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"172.217.19.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:27.039Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:53:07 GMT","end":"Thu, 30 Jul 2026 15:53:06 GMT"},"fingerprint":{"sha1":"71:33:19:F6:6D:02:E4:65:D5:EB:19:E4:3B:93:00:75:12:EB:BA:E0","sha256":"7A:E1:E3:B3:B6:85:B0:38:E5:62:97:1A:D2:7E:AC:A6:EE:72:1D:20:88:68:87:D3:90:F1:3A:C7:49:7D:22:55"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://nibirufi-5mq.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 23 May 2026 14:52:24 GMT\r\nexpires: Sun, 23 May 2027 14:52:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 155823\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-16T02:59:38.204501Z","times_seen":33762,"resource_available":false,"data":null}},"time_used":316,"timings":{"blocked":126,"dns":1,"connect":7,"send":0,"wait":61,"receive":2,"ssl":115},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-25T10:09:26.084Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibirufi-5mq.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 23:20:57 GMT","end":"Fri, 14 Aug 2026 00:19:41 GMT"},"fingerprint":{"sha1":"42:2E:72:BC:F1:D1:F3:94:9F:5D:33:C1:3E:A8:25:57:F1:82:CB:20","sha256":"8E:1F:DA:15:BB:33:19:39:63:5F:4E:33:3A:EE:11:3C:0D:F5:6B:97:31:7F:D9:EF:30:5C:E7:C0:89:B4:56:6C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: nibirufi-5mq.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 10:09:26 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RiZp8odl48ZmTkdmYkYxVaJ%2B5hkG5VuIAOnGrauy580zUz5CijeUnmpRP41Z3t%2FK8hJibFG8B3atWbSSSNKeK3XPHJy%2BCGsJaySNLjgSqlNR%2B7ILUlWAu%2FO5cE8SGEEWAQifrlYppqMy\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a013be9a4eeb1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Tag Manager","description":"Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.","website":"https://www.google.com/tagmanager","common_platform_enumeration":"","icon":"Google Tag Manager.svg","categories":["Tag managers"]}],"data":{"size":45291,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14035)","md5":"6c92796ad148c839b9ecf9e6cbbb13f0","sha1":"4de0c7e565b0be69b1e9f70c47fcce5924871d92","sha256":"bba235944fef9c4108395b95263823316b761a5fdd3c7c044ffaa7085e083b76","sha512":"16e67804d41a9e8e6731582a1c189caa4eada805c86d7e595df1410a465b6c4950d8d605e0a894fb10fb8238cf3d6ededce2ef6673bd40c200b86cbd321c99bc","ssdeep":"768:Jdec6T5ZrzvSsQkOingBvl6HA8jxGClBcU+LA+eLz6V/uxVu6uHuSu9uvuCu1uVU:JdsClSRr9L25uL29XpmQCla8nlF","tlshash":"8113a6bc518225ead13bca9760223b1cf0b6136bef7bc941f6eda2549ba6c140ce5534","first_seen":"2026-05-25T10:09:55.025252Z","last_seen":"2026-05-25T10:09:55.025252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":44,"dns":23,"connect":1,"send":0,"wait":181,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/assets/index-cx-O6EmU.js","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:26.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibirufi-5mq.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 23:20:57 GMT","end":"Fri, 14 Aug 2026 00:19:41 GMT"},"fingerprint":{"sha1":"42:2E:72:BC:F1:D1:F3:94:9F:5D:33:C1:3E:A8:25:57:F1:82:CB:20","sha256":"8E:1F:DA:15:BB:33:19:39:63:5F:4E:33:3A:EE:11:3C:0D:F5:6B:97:31:7F:D9:EF:30:5C:E7:C0:89:B4:56:6C"}}},"request":{"raw":"GET /assets/index-cx-O6EmU.js HTTP/1.1\r\nHost: nibirufi-5mq.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nibirufi-5mq.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 10:09:26 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Tjyks%2Fj7fCQMWBVd6ULa3gqkg48Mls6z%2BGV2oHsOSETOaDcQTa%2FTx6%2BVnZLzbWv5Mk1s3xpm8XyMvgxL%2BiKEDznVWbG8HaOJ5fVzMPWQozepG30JCAhP3BWWK3a40c75GXkZW5a9HOL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"dc6ca1f84db2e33a330aecb6f38f7469\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a013be9cdf8e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6514154,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (30785)","md5":"bfc200090021e0ada83e60233cbed49a","sha1":"675e11d68686e0535e671ecebbac0797ba624b60","sha256":"7d945efb401f3fdf5281d60eb81dca1c6c0eaa16dd5d37fc2a18da3e94cad207","sha512":"8a6f5ec4558d260ea8298ace0805af44a40ac428605dbb9ddd8184691d891aacba723492c20aff3ab5b29ea4cb80d09bbb16d0b3160848d6280002e59de98b6a","ssdeep":"12288:wcqHlidIOuvR7ofGJfrMKjEDQE9DJa2ISvK3mCPBPkuVYcNRkweMA:wctIOuvR7+D1xbCPBlScNRPeMA","tlshash":"b8254bc471d6bcb303ca9df090772407f278b954640c9098f259dbe4aa76aca512ffb9","first_seen":"2026-05-25T10:09:55.027071Z","last_seen":"2026-05-25T10:09:55.027071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":375,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/assets/index-_aN6VE9m.css","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:26.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibirufi-5mq.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 23:20:57 GMT","end":"Fri, 14 Aug 2026 00:19:41 GMT"},"fingerprint":{"sha1":"42:2E:72:BC:F1:D1:F3:94:9F:5D:33:C1:3E:A8:25:57:F1:82:CB:20","sha256":"8E:1F:DA:15:BB:33:19:39:63:5F:4E:33:3A:EE:11:3C:0D:F5:6B:97:31:7F:D9:EF:30:5C:E7:C0:89:B4:56:6C"}}},"request":{"raw":"GET /assets/index-_aN6VE9m.css HTTP/1.1\r\nHost: nibirufi-5mq.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nibirufi-5mq.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 10:09:26 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L53oEgfwmWxqntZWTApVbSlIvvtHe6iTYD6jwzPnbVQ%2BRtYIT8huD2P1zJP8teZ3yAzADfPXFJ4hbqn5GFbuyZV%2BaZlN00vVLpHTybg3b%2BpK8SiHanKnZ%2B0GnAzuSMOHErYg6qNIGXsK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a14acdf2c3237286cabebe7d394f8c7a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a013be9cef9a56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":295353,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"357b7e499e58993fa44900d2a020f696","sha1":"dd4890729f4001e3f9318604c30327e4a26887bf","sha256":"74b708cc35286a8221ee42cf7c8014f13ff9f80a83bc873930928c15df1053f6","sha512":"499014afa4efa35677dae0efcb3d3e5070e99bc1a1b3a8649823bc9fd26eb2b3557292b186c7cd4225a49783bc33999939548506b3ada7e613aabee365888ab9","ssdeep":"1536:g4bnvyND0e7h3VoEKl5gXA5rUutf4ksnaT4T3Td/Lg7nmTSSeg:g4bQD0e9loz50ARUuvT4T3Td/kNSeg","tlshash":"715439f9b713a2f86c6f664fbb583cac41ccb0a05fe985b1f615548a45c2bb11a3113e","first_seen":"2026-05-25T10:09:55.034464Z","last_seen":"2026-05-25T10:09:55.034464Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":89,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/1abe2e4f3b1baa7-349d95.js","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:26.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibirufi-5mq.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 23:20:57 GMT","end":"Fri, 14 Aug 2026 00:19:41 GMT"},"fingerprint":{"sha1":"42:2E:72:BC:F1:D1:F3:94:9F:5D:33:C1:3E:A8:25:57:F1:82:CB:20","sha256":"8E:1F:DA:15:BB:33:19:39:63:5F:4E:33:3A:EE:11:3C:0D:F5:6B:97:31:7F:D9:EF:30:5C:E7:C0:89:B4:56:6C"}}},"request":{"raw":"GET /1abe2e4f3b1baa7-349d95.js HTTP/1.1\r\nHost: nibirufi-5mq.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nibirufi-5mq.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 10:09:26 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbc05oLXVLFq8CN0ibLsfGl3yF%2B92DyPlSU3JfZw%2FYoOUVzujjk2HQUsz4W3dBmrydSE%2BpafiVqolB%2BOdz27zjRkMOlHA4azMa%2BxGunBKYOoHh4VbymKaudXZNTcDY6ocx6ZQoZapJmG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ef47492346d24a60efdd3a0efdb05521\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a013be9cef9e56ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1408505,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (63705)","md5":"a90f69c0fd1328a9faf8c65c6abba637","sha1":"78a7dffc5dac28ca33e016474b3e5c0536b9e7b1","sha256":"c96fc1884383145bbf42045df2f2f835bf25e893350d3d8d19ca82743400dcd4","sha512":"f153780d304855d0790393f297dff0c14a4c535e83211c2b0bd7068e933a291ae8390238fc01723c2c5e800d354d7ea1636ed072dc96b24b132f50a7c3741aaa","ssdeep":"24576:5lXZ9jPJXpg1IzP2abvwuQVD0gnY7KQs+HPlthoF4evCJJARbg:TjBXpyI6yQo7ebCNt9Yg","tlshash":"2d253334eb032fbecb9cd27ae28f0b0e3d640d539899d8edd96860d7c05ae4145dac54","first_seen":"2026-05-25T10:09:55.037944Z","last_seen":"2026-05-25T10:09:55.037944Z","times_seen":1,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-MTZCQ3SH\u0026l=dataLayer","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:26.570Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"GET /gtm.js?id=GTM-MTZCQ3SH\u0026l=dataLayer HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nibirufi-5mq.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 25 May 2026 10:09:26 GMT\r\nexpires: Mon, 25 May 2026 10:09:26 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 25 May 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 127915\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":388063,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5838)","md5":"a5de2f4bcc186ea32c260c5b30840b9d","sha1":"90319ef22c32d11f45984a7fc80a69ec1a172e12","sha256":"82042774fde00587af5d6e4c2dc7cebe607566d4c0aa0ce1a91f61cf0303b1ac","sha512":"4efe96eab1a98262fde05a5207f16e2df2c96242d25e731217c0bf2834dea971a24082249d387bab675c5827b567af701b89b56f71c77ca99bade25562b9e37b","ssdeep":"6144:gTpDlqfVfuCeAnCa5qjxndXRFqGFCWNYbLTb:gAVfuCeAd5aXYDb","tlshash":"3e8408cdb3d674629392a478903f028ba57a78e2f44cc899f189ccd42e7065a4277f7d","first_seen":"2026-05-25T10:09:55.042745Z","last_seen":"2026-05-25T10:09:55.042745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":81,"dns":12,"connect":8,"send":0,"wait":32,"receive":26,"ssl":69},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nibirufi-5mq.pages.dev/assets/logo-avzj9srA.svg","fqdn":"nibirufi-5mq.pages.dev","domain":"nibirufi-5mq.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://nibirufi-5mq.pages.dev/","date":"2026-05-25T10:09:26.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nibirufi-5mq.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 15 May 2026 23:20:57 GMT","end":"Fri, 14 Aug 2026 00:19:41 GMT"},"fingerprint":{"sha1":"42:2E:72:BC:F1:D1:F3:94:9F:5D:33:C1:3E:A8:25:57:F1:82:CB:20","sha256":"8E:1F:DA:15:BB:33:19:39:63:5F:4E:33:3A:EE:11:3C:0D:F5:6B:97:31:7F:D9:EF:30:5C:E7:C0:89:B4:56:6C"}}},"request":{"raw":"GET /assets/logo-avzj9srA.svg HTTP/1.1\r\nHost: nibirufi-5mq.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://nibirufi-5mq.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 25 May 2026 10:09:26 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kZnlb9m3DtXgBpAuuSYZEzab77OmrfPhlgxNnpCLFA0SA44g1%2FBSRYeWON%2FS4cf%2BQv6Iqb%2BVT7%2F4JkHzM2hZB6MypRymT3r%2FyFYSYBIq7iLePmxJ%2BP%2BsVWxGqdG0Qk81vDC6O%2FsjQLC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"eee8fb9652311828e83ad4744ac5f867\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a013be9cefa056ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4308,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9da17d35803356c9e7634f277ab71e7f","sha1":"962fe496ae3d288bb8e44a137383363a63998865","sha256":"c30e76bccf1ea55f120c97ca21b5a56fd9ab05ee04577cd4e6a2104be4172a03","sha512":"586a7f6d82f1ba0797c5e23a0cdadd2b8e2746c95c935bf9fe514e9d810e7d7b55ab79e7e3d1b32308259ae3045ff7a5feeb1d98f015fecae6c1f2f7ca3d131a","ssdeep":"96:Lrh8uFtskOS06UQy3bqx4KZBbFpwD33g5BsmPMtbv0db/szP9:q4tskxy3bHcBbU3gv1PgbvMkJ","tlshash":"709134d9dbf573b9d2c4d3e4e402142d3a1e28e37aa1ce50f3ec5e8d6b5858e484a580","first_seen":"2026-05-25T10:09:55.044593Z","last_seen":"2026-05-25T10:09:55.044593Z","times_seen":1,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"nibirufi-5mq.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}