{"report_id":"3ecc6add-aa3b-4e62-92b5-758842548612","version":0,"status":"done","tags":[],"date":"2026-07-06T20:47:46Z","url":{"schema":"https","addr":"4rub.pages.dev","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"4rub.pages.dev/","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"title":"Get Robux","dom":{"size":5889,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (576)","md5":"36cd966ed78697e3e1373d419e1e3a6d","sha1":"b27a8f3d468df0d06cdc963d031a4b0abcafb9bb","sha256":"5055eeb9297a5abc2681f3dacdec8bd2864cd9de3961971d63f4d98c0ab580fd","sha512":"66f541cedd14eafe0c5f10997ee9a547274d53c4fe3130cd9665b5b994a9ec57817b036ce90308d9d057c6aa582054985c5973d853a5fe0c825a0af1e2964b40","ssdeep":"48:nrexz1g0+MESM1FaFA9mB148PIJYguJYggJYg8JYg58TQtAoq2wYnuhfbEn:n0Rk/gB148kF6FEFQF5AQtXq2nuY","tlshash":"e6c11d6648f5853711828080adb6ab0f6fa4f30bda2b8b5532ec4bd41fdbdcadd57148","dom_hash":"domhashda69c8e1d5c85737eeeb9b275b3debb7","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"4rub.pages.dev","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.185","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-10T20:47:46Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"4rub.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"de6jvomfbm0af.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":1,"received_data":126727,"sent_data":644,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"4rub.pages.dev","ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":7,"request_count":7,"received_data":243007,"sent_data":3420,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-05T22:30:27.189477Z","alert_count":0,"request_count":1,"received_data":284,"sent_data":477,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":2,"received_data":44426,"sent_data":1155,"comment":"","tags":null,"fingerprints":null},{"fqdn":"de6jvomfbm0af.cloudfront.net","ip":{"addr":"13.249.7.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2026-04-23T15:54:20.193331Z","last_seen":"2026-06-28T10:47:12.929905Z","alert_count":4,"request_count":4,"received_data":8928,"sent_data":2069,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}]},{"fqdn":"dfmpe7igjx4jo.cloudfront.net","ip":{"addr":"65.9.60.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-06-03T23:01:44.239135Z","last_seen":"2026-07-04T04:45:38.315577Z","alert_count":0,"request_count":1,"received_data":27797,"sent_data":483,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/external/check.php?it=4202699\u0026time=1783370845257","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-07-16T23:04:01.10241Z","times_seen":3220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/external/check.php?it=4202699\u0026time=1783370860620","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","size":72,"data":"","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-07-16T23:04:01.10241Z","times_seen":3220,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4rub.pages.dev/","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c9979028ecb89c129f254cce96254d96","sha1":"095b2f50dc4573aece43751e17afd38efb86fcc8","sha256":"3c7a77575d2ecf2d79b9c3ebe000403936e4d22efde05adbf9df1deba09598b2","sha512":"813b22612bdf785aa58af1793258449424f6f866d40e866daf06df00cbe875b54d74edf27b32fb71232db454b147974a5c4dc5acd2b5dab9fedc045cd08811f2","ssdeep":"","tlshash":"cfc02b8c211b5cb041eb2f010f7ff200f015321294d1da31380f33048f20d5bd754818","size":161,"data":"","first_seen":"2026-07-06T20:47:50.435306Z","last_seen":"2026-07-06T20:47:50.435306Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4rub.pages.dev/","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fb6801a1bd5f2c5a56fceab33a1b08a4","sha1":"0023a01f6122136de881823d90da572d461b2b85","sha256":"efd606009f68c593d01ead553efc462166b40d180831958978a7edd790cd76f0","sha512":"7191d66196939ee312da3c9e1d048f00562f65da5161fecceb7efc45071877976040d7f1a104e2448dfb97cab10168d491adc5bfa5e5f179804f780ee5e11dd5","ssdeep":"","tlshash":"b79002281062453895185518a804a0639a4176224924cc1494d5491189e40d68a0701a","size":50,"data":"","first_seen":"2026-07-06T20:47:50.436178Z","last_seen":"2026-07-06T20:47:50.436178Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfmpe7igjx4jo.cloudfront.net/6242747.js","fqdn":"dfmpe7igjx4jo.cloudfront.net","domain":"dfmpe7igjx4jo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ea59f4a53936cd48199eace769df6246","sha1":"e70c6fad5aee18dcaecf1e61c847f6049d45ca79","sha256":"2abdec1db4f68bb8fffeb80279dd09f15db9ab88248b219d157b74c3bcd3cd4e","sha512":"f172bcd3f25e1064ed6b55dc2445a3350a5d8f15f620926bdb13bbb80418e0963412dcfac09a3fe831411f690a13b000b5e8033537e93df36b5dfca47aa5e209","ssdeep":"768:n5f26236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:U3Z7OZ1h2ayQgM","tlshash":"7ec2535aab6a1809867763badf1f5208f575032f1512c119bc7c88d85fb0d3442aaffc","size":27325,"data":"","first_seen":"2026-04-23T22:58:31.149268Z","last_seen":"2026-07-17T09:25:23.514531Z","times_seen":404,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4rub.pages.dev/js/app.js","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa1190a3725e3ecbeb64a80998b769fb","sha1":"bf14ca328d44bdc0c4115de3a2551754eed5aeb8","sha256":"e0536e1c21c1a22221551bfab2717a0ee63b542a119c58a60c71be503ecec15b","sha512":"562028c666629e984a26c604222cd78a1c3055a64ee0dec0750a58f70dddedea6994288e5f2b404c94ff8287bb6b61db861859da107a9aae108490f7d33b27d6","ssdeep":"","tlshash":"2321887912920574c23ac3bf55705b8bbfb0443e3381876a3d2851853abbc5025d2cf6","size":1319,"data":"","first_seen":"2024-07-12T14:54:16Z","last_seen":"2026-07-06T20:47:50.427101Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/hem4fUSFlWaE.4202699.0e508.0.js","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4be2101fd6b1568e2b58a3b040cf5a32","sha1":"5bca9c25bedc04c1468b2116dd7fa5fe0fb3f373","sha256":"7fc70b769618c17012fb3a91dd1058a59bf10720e63e3a0e9b809b60ba4689e0","sha512":"76d10fd20d7e971cb71ab342b05384d797ffc54c5b787fcb90d339c9db9004b57c8c6caf55e64ab553bfab566029c932e382edfb9a36f880705b7128075163dd","ssdeep":"192:M2eO9oMH29WkIrh56VmmV+UcfoNbAb8MqIJ04vcswaw3wmhwewXwu:M2t9rH2UvWVxvcQEUIJ04vcswaw3wmhU","tlshash":"1f02d78379024917631a4fedabeb930fd7945122c3d6b900f5cc917987d5d4883aa3ee","size":8689,"data":"","first_seen":"2026-07-06T20:47:50.437159Z","last_seen":"2026-07-06T20:47:50.437159Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"4rub.pages.dev/css/styles.css","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.475Z","timestamp":1783370842475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4rub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 10:07:50 GMT","end":"Sun, 06 Sep 2026 11:06:34 GMT"},"fingerprint":{"sha1":"58:27:00:38:1D:3D:3A:E0:41:C0:61:AB:A0:91:74:90:1A:28:CB:54","sha256":"DA:7D:72:93:F0:92:97:D5:F2:90:B1:8B:77:E2:BC:DB:5D:48:15:7D:68:6C:5A:37:CD:7D:38:3A:3A:43:AC:FA"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: 4rub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 06 Jul 2026 20:47:22 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2F8q57ySXYpp%2Fv%2Fkhnv%2BPtpbQiVNhfTRF%2B58lWjyzkjG0Esr3BHZB6VHr6Z4Mu%2FhesBatMn61VcRzoGLVJOvoS44Bvre29ycgo33noFXFBZapW58EWOm4J0rBOohPmBJQQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ab78232f5481211b480b7942a04d74ca\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a17176d57c6a5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5119,"size_decoded":2296,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"f407e76b327148885b1121776809a4ca","sha1":"2bf5544e23d6c12cc97ea4d30e8cd7d8644fe29e","sha256":"5170f0c43e862f42fb1cc43ca7b775b43674283d42c1c3c600d9e3155759bfaf","sha512":"0f71381c046970be99a284081ecbc7dc7d4a8ae50c821705e1b84faf0a545ce9650831f6640f2cb2dd5188b5928fd84f3bdd54e63e5e566ae2d94aca71a60248","ssdeep":"96:DG+YZN2r8Ct30zEkqt+TDfr/N/xn/GwDw5wBJUeYSp0i:y+YZWtwqt+rdx/GY68Ge3p0i","tlshash":"58b12299d90400496337ef707bb24b69b66a4463af4603ba7ff0208d97c926d5235fcd","first_seen":"2026-07-06T20:47:50.425465Z","last_seen":"2026-07-06T20:47:50.425465Z","times_seen":1,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"4rub.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-97WVE3556B","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.477Z","timestamp":1783370842477,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /gtag/js?id=G-97WVE3556B HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncross-origin-resource-policy: cross-origin\r\ndate: Mon, 06 Jul 2026 20:47:22 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: Google Tag Manager\r\ncontent-length: 1584\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T14:40:26.336623Z","times_seen":17316417,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4rub.pages.dev/js/app.js","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.483Z","timestamp":1783370842483,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4rub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 10:07:50 GMT","end":"Sun, 06 Sep 2026 11:06:34 GMT"},"fingerprint":{"sha1":"58:27:00:38:1D:3D:3A:E0:41:C0:61:AB:A0:91:74:90:1A:28:CB:54","sha256":"DA:7D:72:93:F0:92:97:D5:F2:90:B1:8B:77:E2:BC:DB:5D:48:15:7D:68:6C:5A:37:CD:7D:38:3A:3A:43:AC:FA"}}},"request":{"raw":"GET /js/app.js HTTP/1.1\r\nHost: 4rub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 06 Jul 2026 20:47:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ha6J7XJ%2F5457LjjYac5rkdylccye%2Fe8RynNbYezUgWLQPKLZ6YvzfxjDG4icpxuTtItmG6dWqi%2BIg9Q5Bs6w30NYWUSmQphvBcJepEkbozqZGz%2BLZpQBSQvdm2uuFeogug%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ee93fd5fa39571d3a1e2a19012a187f7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a17176d58ca05ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1319,"size_decoded":1174,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"fa1190a3725e3ecbeb64a80998b769fb","sha1":"bf14ca328d44bdc0c4115de3a2551754eed5aeb8","sha256":"e0536e1c21c1a22221551bfab2717a0ee63b542a119c58a60c71be503ecec15b","sha512":"562028c666629e984a26c604222cd78a1c3055a64ee0dec0750a58f70dddedea6994288e5f2b404c94ff8287bb6b61db861859da107a9aae108490f7d33b27d6","ssdeep":"","tlshash":"2321887912920574c23ac3bf55705b8bbfb0443e3381876a3d2851853abbc5025d2cf6","first_seen":"2024-07-12T14:54:16Z","last_seen":"2026-07-06T20:47:50.427101Z","times_seen":74,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"4rub.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShNPVo0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.794Z","timestamp":1783370842794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShNPVo0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://4rub.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 29424\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 04 Jul 2026 02:26:39 GMT\r\nexpires: Sun, 04 Jul 2027 02:26:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 238843\r\nlast-modified: Mon, 15 Sep 2025 16:31:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":29424,"size_decoded":30257,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 29424, version 1.0","md5":"62fc60979b530feaf3c27c45fbfd9d57","sha1":"c384a32c7643e137d25b0a43175ab6ba0ba36e94","sha256":"d253244d475e8b0d5c521b1742f1ae3ec29280c113a6f29dad54bc4f320311d1","sha512":"ed0be079d2d163d9c4e251a68798f3f6b1f39d7cf19a8a50547f833f7bad35cd2a59f043fd00b7d8ea9f5bbe323d5172c07b9b2ec262e2e83bcd6370e86404d6","ssdeep":"384:K39gcKf3N9TvweI98vfZG5Y0JaJXNemXLxWL4nEbsq9mog90xNbSIO0VrQKL5RJl:069dwey8pH0ghVLxWL4nMx9Bb+IOudl","tlshash":"92d2f2c8f7f83c00868db63956dccf60110d387765a4de069ef46978a67163bdc8a9a4","first_seen":"2025-06-03T08:53:08.201346Z","last_seen":"2026-07-17T11:01:07.968388Z","times_seen":2703,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":100,"dns":0,"connect":16,"send":0,"wait":17,"receive":16,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4rub.pages.dev/img/bp.jpg","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.805Z","timestamp":1783370842805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4rub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 10:07:50 GMT","end":"Sun, 06 Sep 2026 11:06:34 GMT"},"fingerprint":{"sha1":"58:27:00:38:1D:3D:3A:E0:41:C0:61:AB:A0:91:74:90:1A:28:CB:54","sha256":"DA:7D:72:93:F0:92:97:D5:F2:90:B1:8B:77:E2:BC:DB:5D:48:15:7D:68:6C:5A:37:CD:7D:38:3A:3A:43:AC:FA"}}},"request":{"raw":"GET /img/bp.jpg HTTP/1.1\r\nHost: 4rub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/css/styles.css\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 06 Jul 2026 20:47:22 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 196910\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"1085add8e88d96d53895a62b248f772a\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vNlR2MxYfvDxJXpkzmZYHcve6sj20NSFlAcPTv7RLK20wSfJfO6X9f0QCSE2L%2BSAzYybkpu75EChp4Vj2ot35r5fZ%2BBG496A6jBGaZninjA31cOJL1aAlgaeo2bV0VOMoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nserver: cloudflare\r\ncf-ray: a17176d78cf85ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196910,"size_decoded":197665,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1028x694, components 3","md5":"9a75b1267d260322206e98bd256138d4","sha1":"913333116d6acc8ff7bdb4c15e778e03ca1c0845","sha256":"42380c6d81c177779c40e4438358ed6ccf3921da53b3924dc582bec67f55947e","sha512":"a7ac9ddce8777278bcbaaa3e61f3e616a49b02eba3ab769dae6b495a2fb8ef72b3c561a69559c0c0a7ed803c29883be2f938401ea39374fbdd733eb13f2815da","ssdeep":"3072:UlSmf8LmepNpJI7SdF1W6npUn3gw7C19OLzFh87z60wJAUKKFK03zt:UlSPLp3pe2P1tpcgAKsxh/0sKKFJ","tlshash":"9e14132997942acbdece68818c0dd647e2d8d0d847c8e7832f47b8b4645c9e6cb6f005","first_seen":"2024-06-30T06:50:15Z","last_seen":"2026-07-12T03:39:50.680457Z","times_seen":259,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"4rub.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/external/check.php?it=4202699\u0026time=1783370860620","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:40.622Z","timestamp":1783370860622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/external/check.php?it=4202699\u0026time=1783370860620 HTTP/1.1\r\nHost: de6jvomfbm0af.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 72\r\ndate: Mon, 06 Jul 2026 20:47:40 GMT\r\nx-powered-by: PHP/7.4.11\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 020995a9de07e6c1689726f8f3e99de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: w2EbXE1-z6NTrLrFXVYp4KG_7mC6WCEgc2SbdSyCq7dNkNZ-VtG2EQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":72,"size_decoded":482,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-07-16T23:04:01.10241Z","times_seen":3220,"resource_available":true,"data":null}},"time_used":183,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"de6jvomfbm0af.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dfmpe7igjx4jo.cloudfront.net/6242747.js","fqdn":"dfmpe7igjx4jo.cloudfront.net","domain":"dfmpe7igjx4jo.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"65.9.60.230","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.481Z","timestamp":1783370842481,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /6242747.js HTTP/1.1\r\nHost: dfmpe7igjx4jo.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\nlast-modified: Thu, 23 Apr 2026 13:57:28 GMT\r\ncontent-encoding: br\r\nserver: AmazonS3\r\ndate: Mon, 06 Jul 2026 20:39:35 GMT\r\netag: W/\"ea59f4a53936cd48199eace769df6246\"\r\nvary: Accept-Encoding\r\nx-cache: Error from cloudfront\r\nvia: 1.1 6e6e790b457b3550da2b42352d46be18.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN52-P1\r\nx-amz-cf-id: agNDIz8XvHPDSAXgJihhyamSuxvJo0lBedMheQ_v4Lm3owDNg2wgGQ==\r\nage: 1052\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":27325,"size_decoded":7856,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1637), with CRLF line terminators","md5":"ea59f4a53936cd48199eace769df6246","sha1":"e70c6fad5aee18dcaecf1e61c847f6049d45ca79","sha256":"2abdec1db4f68bb8fffeb80279dd09f15db9ab88248b219d157b74c3bcd3cd4e","sha512":"f172bcd3f25e1064ed6b55dc2445a3350a5d8f15f620926bdb13bbb80418e0963412dcfac09a3fe831411f690a13b000b5e8033537e93df36b5dfca47aa5e209","ssdeep":"768:n5f26236wBXroljZ1/peRXMiH54aGz1WCyQgmip4L/4aLv0NO:U3Z7OZ1h2ayQgM","tlshash":"7ec2535aab6a1809867763badf1f5208f575032f1512c119bc7c88d85fb0d3442aaffc","first_seen":"2026-04-23T22:58:31.149268Z","last_seen":"2026-07-17T09:25:23.514531Z","times_seen":404,"resource_available":true,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":21,"connect":11,"send":0,"wait":229,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"4rub.pages.dev/img/download.png","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.489Z","timestamp":1783370842489,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4rub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 10:07:50 GMT","end":"Sun, 06 Sep 2026 11:06:34 GMT"},"fingerprint":{"sha1":"58:27:00:38:1D:3D:3A:E0:41:C0:61:AB:A0:91:74:90:1A:28:CB:54","sha256":"DA:7D:72:93:F0:92:97:D5:F2:90:B1:8B:77:E2:BC:DB:5D:48:15:7D:68:6C:5A:37:CD:7D:38:3A:3A:43:AC:FA"}}},"request":{"raw":"GET /img/download.png HTTP/1.1\r\nHost: 4rub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 06 Jul 2026 20:47:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 1182\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"eddfc7ab79dbdda786b0f619a1665211\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KJYR8fd0doaQdrkWKCy2trrLrsscw5tZc6f41QCHJWv2U6kXiZyIpMzkSaLaqoR07GmTA3TcwPB9Xp1sfEQK9EPmhIRKJwVztdmCWAqxH%2BzWopIow7q77DCeEGrwWh0upg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a17176d59cc75ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1182,"size_decoded":1932,"mime_type":"image/png","magic":"PNG image data, 56 x 56, 8-bit colormap, non-interlaced","md5":"d8df800e5778b1964e60c7fd21bf6094","sha1":"1e0198791a917f9e94f839d872713f59d3588ac9","sha256":"a5e354c23196eb6df59de39910be6ddf8d39c15f9eb345a25b35f1a204f0018d","sha512":"42dc491fa5da69598f9565527fd0edd24f8670e28ca34d5b2e004af5cff640d03f17d1fcae9e09aac3ae625124dd7f4c20140b0b0e83993764f9c8fc9cada6d5","ssdeep":"","tlshash":"c02175691d19ec3bd6f93df3665f0a8a8a0b31015295852d54380bddd41cbd76dcb40f","first_seen":"2024-07-12T14:54:17Z","last_seen":"2026-07-11T20:49:17.540087Z","times_seen":106,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"4rub.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4rub.pages.dev/img/robux-removebg-preview.png","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.491Z","timestamp":1783370842491,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4rub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 10:07:50 GMT","end":"Sun, 06 Sep 2026 11:06:34 GMT"},"fingerprint":{"sha1":"58:27:00:38:1D:3D:3A:E0:41:C0:61:AB:A0:91:74:90:1A:28:CB:54","sha256":"DA:7D:72:93:F0:92:97:D5:F2:90:B1:8B:77:E2:BC:DB:5D:48:15:7D:68:6C:5A:37:CD:7D:38:3A:3A:43:AC:FA"}}},"request":{"raw":"GET /img/robux-removebg-preview.png HTTP/1.1\r\nHost: 4rub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 06 Jul 2026 20:47:22 GMT\r\ncontent-type: image/png\r\ncontent-length: 23649\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"3a36710abe566794b2de078acbd1b24d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G7GRhTz46yT%2BE4P8tSSOnIL1w4q3NizFV%2BRbJsBlrlMdhh0neEtqtHEw5JPayRAVThY9hvDqi%2BccBBWZPvWyuTOkBtOySCcbFFdR3fy%2BMdnA19JD37ZYqqnxZzxo405jeg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-ray: a17176d59cdd5ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23649,"size_decoded":24406,"mime_type":"image/png","magic":"PNG image data, 237 x 259, 8-bit/color RGBA, non-interlaced","md5":"9b14ec704d1116bc502d0e67bfd5e31b","sha1":"99f6869cb69d036bf4ca43a02001c826b21f5b92","sha256":"753ea619f4ca02128ecdca16fd365a2022d3b0cd5a2c94fd6574a0a5d3b963b4","sha512":"a33a1d5c7bd83f06155969f77a83d26ca9ee89d7644d000a27c7f523fbd0987fbb1e1e517f9e28ded1097b437c403c9b921bc982ac1409f7f7930b90f31a97ff","ssdeep":"384:LlbhiKPLut/XhuXhER98u8aMogn/D8cTboOfnBYgUQkgGQaddJ4:p4KKt/x6U8u8aMogn/LTlu5QDGJ4","tlshash":"d7b2e192c4398c46e85f77c0a75addb375b905ee2a0fa635fbe055420e680c6492acc3","first_seen":"2024-06-30T06:50:15Z","last_seen":"2026-07-11T20:49:17.510937Z","times_seen":287,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"4rub.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/external/css_frontXF.css","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.789Z","timestamp":1783370842789,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/external/css_frontXF.css HTTP/1.1\r\nHost: de6jvomfbm0af.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 6134\r\ndate: Mon, 06 Jul 2026 20:47:23 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:23:51 GMT\r\netag: \"17f6-60315f0f18c9f\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 020995a9de07e6c1689726f8f3e99de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: 6Zupt5c9HIOyKXN9dDb8G-x9f2QL0gptrt9l0VNoexrGWmwSSMRO5Q==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":6134,"size_decoded":6602,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8cf8da7dc6b5d43ae6872b4fe5564c38","sha1":"cc3c14ce8bccf427b4a777449876eb722381cb18","sha256":"60a0f85900cf8e56c1607c8c120f68064a4f8d22a40637b224774cb611e93c2f","sha512":"e719aa872285169d609b29810cf8b4d748bae32bb08ceb4122ea4cd08345f7fb1f688eb03f55c10ad145e414920de88ffdc02f6b77be46e2d9106d80438f7826","ssdeep":"96:XtPngNH2uJbg6iLiTX9KFORdtHGMl3JYYD9PzhZ:XtPgRpViLiTX1dtHGMlm29PzhZ","tlshash":"eac1e16c6d21254581368a15e3db861ad87ca12319317efdb381235b4f316fc13abfba","first_seen":"2023-08-18T00:45:26Z","last_seen":"2026-07-17T09:25:23.509259Z","times_seen":3083,"resource_available":false,"data":null}},"time_used":398,"timings":{"blocked":0,"dns":25,"connect":9,"send":0,"wait":350,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"de6jvomfbm0af.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4rub.pages.dev/icon.ico","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:23.050Z","timestamp":1783370843050,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4rub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 10:07:50 GMT","end":"Sun, 06 Sep 2026 11:06:34 GMT"},"fingerprint":{"sha1":"58:27:00:38:1D:3D:3A:E0:41:C0:61:AB:A0:91:74:90:1A:28:CB:54","sha256":"DA:7D:72:93:F0:92:97:D5:F2:90:B1:8B:77:E2:BC:DB:5D:48:15:7D:68:6C:5A:37:CD:7D:38:3A:3A:43:AC:FA"}}},"request":{"raw":"GET /icon.ico HTTP/1.1\r\nHost: 4rub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 06 Jul 2026 20:47:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FETzLXDNAJv5h29nHquDdu9ganMgkzeLLsyUuIO83gxwMRkXN5vIm0h2tJnJ2BJriDpY4D8LPRYW%2FgCxqb2l8Kij65urIrFevuant5ni%2FJ9GgdiFznRtiOPu1Vf82vSCkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a17176d91a295ebd-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":4787,"size_decoded":2158,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"54c8da6c2a00a6bd2461ea09f90a21be","sha1":"0c5bd2310242ddcb2092c10d8a4c602a445f4be5","sha256":"246a608f81e0c657268df9ecc160cf95348b2539436e97e339d289952f202d64","sha512":"13b7de269eb4d587164bbfb6ee0f69b7824b054e6dfa4682534f258a12aed3d274efd86dd7887852c907264c9dc2c3b3f92e78954d86ac997e660cf98571336e","ssdeep":"48:tSbDarwHK97tvvB1uMqqw8ZgfZgFZgnZg3fdOtA2q2xnN0K:q2pB1dPGasy3AtVq8nNL","tlshash":"55a1967549c5543a02b380908e75ab4efea4924bca1bc65632ecabd72ff7d45cd83440","first_seen":"2026-07-06T20:47:50.432153Z","last_seen":"2026-07-06T20:47:50.432153Z","times_seen":1,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"4rub.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"4rub.pages.dev/","fqdn":"4rub.pages.dev","domain":"4rub.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.71","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-06T20:47:21.702Z","timestamp":1783370841702,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"4rub.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 10:07:50 GMT","end":"Sun, 06 Sep 2026 11:06:34 GMT"},"fingerprint":{"sha1":"58:27:00:38:1D:3D:3A:E0:41:C0:61:AB:A0:91:74:90:1A:28:CB:54","sha256":"DA:7D:72:93:F0:92:97:D5:F2:90:B1:8B:77:E2:BC:DB:5D:48:15:7D:68:6C:5A:37:CD:7D:38:3A:3A:43:AC:FA"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: 4rub.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 06 Jul 2026 20:47:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PQPQTkfI4ucw6TLQBN5WToMAlFbA9DhNDcf0LkKFH4ibzgR6UHsaLfebhGvl2c%2BpPL0zlgpTJ1S1fECZu3LzBtDz4sumOEjLdJDQTVZVHpUaAmjYZLHh8vFeH41EmrNINA%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a17176d0dadcb1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4787,"size_decoded":2129,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"54c8da6c2a00a6bd2461ea09f90a21be","sha1":"0c5bd2310242ddcb2092c10d8a4c602a445f4be5","sha256":"246a608f81e0c657268df9ecc160cf95348b2539436e97e339d289952f202d64","sha512":"13b7de269eb4d587164bbfb6ee0f69b7824b054e6dfa4682534f258a12aed3d274efd86dd7887852c907264c9dc2c3b3f92e78954d86ac997e660cf98571336e","ssdeep":"48:tSbDarwHK97tvvB1uMqqw8ZgfZgFZgnZg3fdOtA2q2xnN0K:q2pB1dPGasy3AtVq8nNL","tlshash":"55a1967549c5543a02b380908e75ab4efea4924bca1bc65632ecabd72ff7d45cd83440","first_seen":"2026-07-06T20:47:50.432153Z","last_seen":"2026-07-06T20:47:50.432153Z","times_seen":1,"resource_available":true,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":9,"connect":1,"send":0,"wait":245,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"4rub.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Kumbh+Sans:wght@520\u0026family=Mochiy+Pop+One\u0026family=Nunito:wght@200\u0026family=Poppins:wght@400;600;700;900\u0026family=REM:wght@300\u0026family=Varela+Round\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.544Z","timestamp":1783370842544,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Kumbh+Sans:wght@520\u0026family=Mochiy+Pop+One\u0026family=Nunito:wght@200\u0026family=Poppins:wght@400;600;700;900\u0026family=REM:wght@300\u0026family=Varela+Round\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 06 Jul 2026 20:47:22 GMT\r\ndate: Mon, 06 Jul 2026 20:47:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126043,"size_decoded":32786,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1981)","md5":"ac6e2adf2326221a12544d78d680cab4","sha1":"642bd1246bd10db63ea24456ee2b62da2a0710f4","sha256":"a06048b02ccb57246d176b006449526c27d3df0d915fbd0696f05c662abf3bb9","sha512":"602138ab48f2eade3ac7d036530ba958173aace25a873097361935b59871ed57cd45cb92c5b1f5ce68addb79586816ff89fa49706bff4ed33975f7d689511409","ssdeep":"1536:AOVwFSC+780fGE9pJ3QHsX/8FrwsX5eg67iWhmRu5J+wAOR:AVO7xbGRxLcn5O6","tlshash":"77c354a1490745cefea31ca356dfd924bead687cf881883d53fa08c2ac1a459d1c7b4d","first_seen":"2025-09-18T13:19:01.188132Z","last_seen":"2026-07-14T11:31:03.480597Z","times_seen":266,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":42,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShMhVo0iPw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:22.812Z","timestamp":1783370842812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/kumbhsans/v27/c4mw1n92AsfhuCq6tVsaoIx1LQICk0boNoq0ShMhVo0iPw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://4rub.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 13336\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 03 Jul 2026 23:16:39 GMT\r\nexpires: Sat, 03 Jul 2027 23:16:39 GMT\r\ncache-control: public, max-age=31536000\r\nage: 250243\r\nlast-modified: Mon, 15 Sep 2025 16:31:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":13336,"size_decoded":14169,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13336, version 1.0","md5":"0d8be37b5302f048939e778614ae257f","sha1":"ee418b76411412b8467564adb668b667caa4d0de","sha256":"9026a021afff0af0c99fbad3668cf0402b497cc580c46e94bd685a2e8065c9da","sha512":"cf4457a0759ddc75546bf3beb3fd86c68880a7359da39a134efc9a2383578e44ff9601627102953a194135c63872ff2a1271c845a329bd497a974920bbd70256","ssdeep":"384:Kk0D3rqH6q4XF/hhz6e+OjW1CyR+sOAwYkLkUpzoa:4bqH61/SOj5LkUpp","tlshash":"d952d0784cd4854ffe83e2f8ac1cd90d2d6aeeb9bc0841265d1a4e471f83e379b89590","first_seen":"2025-06-03T08:53:08.197786Z","last_seen":"2026-07-14T11:31:03.473998Z","times_seen":1129,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":97,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/clockers/CustomButton/cssXF.css","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:23.244Z","timestamp":1783370843244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/clockers/CustomButton/cssXF.css HTTP/1.1\r\nHost: de6jvomfbm0af.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css\r\ncontent-length: 896\r\ndate: Mon, 06 Jul 2026 20:47:23 GMT\r\naccept-ranges: bytes\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nlast-modified: Thu, 17 Aug 2023 03:34:52 GMT\r\netag: \"380-603161857bc5e\"\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 020995a9de07e6c1689726f8f3e99de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: pkdE2YLEPXyLjI9PoXhT724iUVG4fMy8OubAI5Bzxoy_JGIo3EZCmw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":896,"size_decoded":1362,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4c31e2e879fda3248e38f318494d6676","sha1":"9f74294ca7491752f72ea705e6fc992549e1ade9","sha256":"01054ae4581776870b0514bfb9607e8764927456f14d8eb6de6ba84f12f9c3d6","sha512":"a45f2c608b170ef62c2fc9f403daedd85d40a668e9d34583cce514d0a62cbb5ba92692ce0a523da42e8eaf94ba1e3dd139b92a39c5b0cb1c08970a9495d9e2cc","ssdeep":"","tlshash":"a411483eae72594f41b9861126e7d21ba5bc514f0a20af7d7a20360a1f261bd6073fd8","first_seen":"2023-08-19T12:00:54Z","last_seen":"2026-07-12T19:30:09.886339Z","times_seen":615,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":349,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"de6jvomfbm0af.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"de6jvomfbm0af.cloudfront.net/public/external/check.php?it=4202699\u0026time=1783370845257","fqdn":"de6jvomfbm0af.cloudfront.net","domain":"de6jvomfbm0af.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"13.249.7.8","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://4rub.pages.dev/","date":"2026-07-06T20:47:25.260Z","timestamp":1783370845260,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /public/external/check.php?it=4202699\u0026time=1783370845257 HTTP/1.1\r\nHost: de6jvomfbm0af.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://4rub.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript\r\ncontent-length: 72\r\ndate: Mon, 06 Jul 2026 20:47:25 GMT\r\nx-powered-by: PHP/7.4.11\r\nserver: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 020995a9de07e6c1689726f8f3e99de2.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P3\r\nx-amz-cf-id: qg_q0WI0xk2ZQtrPjgImsq5dO38SRuzrHHl-g8c6BdCcp4-394CPNw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server:2.4.51","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"OpenSSL:1.0.2k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"PHP:7.4.11","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":72,"size_decoded":482,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"69d77690ed201acd0627e99dd35c96eb","sha1":"05ffc794be6dae3836ee5df72d82d917323b2941","sha256":"577d248638c57941b7e35d9a19ef4b5d88d52482f6e59254142d4266c57bad38","sha512":"06aaf36275b0c4de82580319878333d973d3cd464f4c09df4281551f4381940dc792eb28c2c84b3a94196b53edf41751b01976ad77c5e393c0b62574c4b214bf","ssdeep":"","tlshash":"32a0220c0c02220f033230b080bbc8280030e3320bc0c3a8282aca8a2e03c3b2a0208e","first_seen":"2023-08-12T16:35:44Z","last_seen":"2026-07-16T23:04:01.10241Z","times_seen":3220,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-06","alert":"Sinkholed","trigger":"de6jvomfbm0af.cloudfront.net","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}