{"report_id":"412d1ce3-152b-419d-acde-66133dda65ab","version":6,"status":"done","tags":["suspicious"],"date":"2026-02-14T18:05:41Z","url":{"schema":"https","addr":"zumauaetables.com/","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zumauaetables.com/","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"title":"Zuma Restaurant","dom":{"size":29226,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14199)","md5":"9c851d8559afca94bf39f89908693920","sha1":"c5517400d9fa6c0c58e014d5c52af907ee01a42b","sha256":"d38d4e1b0f52f20fa5259496f06c1f9f377a19dcf70c77a70404aeaca82537bc","sha512":"e8b690330cea594ccd7342a2e6d4fbe274d162b9b20dad4f6002e343ea5f9f4a9568171755f896dd097b00c826f227260d2a6601b34c3439b5c87331dc649890","ssdeep":"192:4Q1fGtTTQBsDofbjK9mvSyLlqu5GyCxExmgphfY7AUr2mJrjqGuFGUUT4V47IuLu:1CTQzbeURquMWmrAI2mhOGucP4y0uLOR","tlshash":"e6d27150a4201e7a1d636ea2a2ecdf2cd16bd1c6c8eb999d7fee004a07c6fd50f61345","dom_hash":"domhasha955ebd398158c1a1f129ee4bd76201d","first_seen":"2026-02-14T17:39:30.663158Z","last_seen":"2026-02-14T18:05:43.582292Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zumauaetables.com/","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T18:05:41Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"zumauaetables.com/static/js/main.336b86b8.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"zumauaetables.com","ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-11","domain_rank":0,"first_seen":"2026-02-14T17:39:26.715997Z","last_seen":"2026-02-14T17:39:26.715997Z","alert_count":17,"request_count":15,"received_data":3158007,"sent_data":6670,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"adcbtemka.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-08-30","domain_rank":0,"first_seen":"2025-10-10T09:38:26.740784Z","last_seen":"2026-02-12T21:27:49.564879Z","alert_count":0,"request_count":1,"received_data":597,"sent_data":553,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"zumauaetables.com/","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c7f003a7f9c9c838ef65d98e5ea7378","sha1":"16f5984cdc3cfb2ae3dbca57512395a256c1a107","sha256":"68f2e73bd1794550593b0da00017f6e34767220010b9f263c1ef6eef8958741e","sha512":"600d6777d38b96d631ec843c9f7abd75d35dce80d7d3082add0352f140f58114b2a72d9ddcd3b008f69832dce209a364a97bf7fcbf85a94f1f9ff46bcfd90a73","ssdeep":"","tlshash":"49d02e0a28e2a82063a900caa2bbcf65368210048901c89028c8c8afba28e83008a0cd","size":249,"data":"","first_seen":"2026-02-14T17:39:30.673276Z","last_seen":"2026-02-14T18:05:43.592934Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/static/js/main.336b86b8.js","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"478e9f80de85162d0f0e94e37e94cb49","sha1":"766ff289f528ef2da1023c3d27a9b71d65013b25","sha256":"08c6be20feaf0ce90394f3fcd549e9db043dc20f29d044d829e2738df3ac4761","sha512":"4b08790e627331ac975ff048d25e262b2c018e355e5bf9c8e75e9781647a047b2d67bee20aa0ded090335f6faabcdd4e77fa33152c4e78bea6807c4b6ed2335d","ssdeep":"6144:E9dssWFXNe9EFKRYFrVwc5nJt76FJSSCSI7AoltHf6XQiGo97b5UB7POw1oP90HB:TDN4SwI7BN6XQRoMdbPHlKQnNI4iw","tlshash":"ffd44bc97281f5a5abf301a1407f450ab33e590eb80dc864b279fcce786454aa277f79","size":601306,"data":"","first_seen":"2026-02-14T17:39:30.664124Z","last_seen":"2026-02-14T18:05:43.588835Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"zumauaetables.com/static/js/main.336b86b8.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zumauaetables.com/2.webp","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.880Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /2.webp HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 198754\r\nlast-modified: Wed, 11 Feb 2026 14:21:57 GMT\r\npriority: u=4,i=?0\r\netag: \"698c9085-30862\"\r\naccept-ranges: bytes\r\nage: 1575\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e32twjBhpoTjJvwz0%2F8pIBqOkUaZomI%2Bg59U91KWKin8qH%2BdBCSvr2HDZdd3UfLcvTkVhF0LJzZCgNscQqkBRUW2LNsoWQ0%2B5i26pNkbjp%2Fa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7e310e8d0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":198754,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b2049d51bf9ee41cd3e926f01e28b54f","sha1":"cde02f3325f12d1ffcee15858edae1a817c6240f","sha256":"aa737b3cc6f6bc8b2793a9b43854984fef515786c09144be9f2d1b44644d47db","sha512":"a290add742db8433667fcccc2040e1fec16e00cb2fc0d261d9f00ccfbfaac59a14676b39820dd0e5bbf6de9be85c003cccb85ec9ea879c1243c717fff481a0f6","ssdeep":"3072:qQJdTmEnWTbR+unKLYTGVcQE0u3F/nVHAuO4geLl2t1itE8x2oFPKYjq0MX3fc:qQJdf0R/nKDVcpR3F/VKeRx9q1U","tlshash":"a1142217b2414edb8f3c7c2a47149e061790413b2e5830407da732bf95bffeba60559a","first_seen":"2026-02-14T17:37:29.136348Z","last_seen":"2026-02-14T18:05:43.583738Z","times_seen":4,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/main.webp","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /main.webp HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 545614\r\nlast-modified: Wed, 11 Feb 2026 14:22:01 GMT\r\npriority: u=4,i=?0\r\netag: \"698c9089-8534e\"\r\naccept-ranges: bytes\r\nage: 1575\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tgkm9CBxe5NSpXLtp6ONBC3A%2Bf%2BROsMZhID5Das0Zsqp6rEd2bMV%2FPHgwqNdmDes7%2BzlawHp56APnxlRk62F8QrZeOGRp%2B1Gcy1Bdo1p2%2Bm9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7e311e900d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":545614,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x878, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"86761217b32616f1573a79a77cd430ec","sha1":"0ab77d381b7e26577592b5c072ce984dc12fcb0c","sha256":"8f963ed4960e04f6f0111e9609de50eb4c2418b05cd7722de8bb404f856ae0c4","sha512":"f404a011a18fd8f88f7bc25934145ac9e7025d41e1e96879eb2c1c1e26316fa0acda7be20d3c38bb9bdb75c15fddcfce0fb8073429d4f6ddafe74e600a3185a8","ssdeep":"12288:wKOUjJg1b5sO6n2JAO0MaQ7zOMzWZAStKTjWrOmkMCwTLB8qqJ4wP4:HOUjJg1Nj6n2OjMB7QNKTjWrkMCwTL/t","tlshash":"90c423cba69b14d55ef0f5b2bc2b804bb903b9294886f056d11e38f4ca19f186ff4e45","first_seen":"2026-02-14T17:39:30.6664Z","last_seen":"2026-02-14T18:05:43.584613Z","times_seen":2,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/fonts/Moderat-Medium.woff2","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /fonts/Moderat-Medium.woff2 HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 53820\r\nlast-modified: Wed, 11 Feb 2026 14:22:02 GMT\r\npriority: u=4,i=?0\r\netag: \"698c908a-d23c\"\r\naccept-ranges: bytes\r\nage: 1575\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L1ijLYDL8AyHiaeWe7BPGRxtTW3OHbespw4P5QwMH7GGQa1yMn5ypxyWBkVqOqiP37o%2FE2e1NEWMqt2hk%2FdVhYGRDHMytMOyMkj2OJCnrcor\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7e312e970d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53820,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 53820, version 3.0","md5":"7e410815615b294be3b009bd720d565f","sha1":"525454c05af2380f8d32eefaf801b8da83f23403","sha256":"1e97f77cf7a48645114a3700a079500e1fea23203ed70e3439d2533558979328","sha512":"72cbc079557755d419731f61c6d0988e1c66ea7d9dad6f11b992885dcc62de4032dc385333ed3d77d4aa6ca744f44554dd3fac635191d5bebf483ea30359896e","ssdeep":"768:eClrM1Z7UuvPh4K0WNyX7s1z55aIDB7FnBfpI6o0b7pxNTPpSaauwRA67y:7yZIuvPpNss1zHJ97FnBfCq39pSaavuT","tlshash":"eb33028430fdc220466e72764d270023dc61649b85ee5eeee397e3af773a35a1805d6b","first_seen":"2023-05-10T14:48:25Z","last_seen":"2026-08-03T17:32:28.863889Z","times_seen":214,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/1.webp","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /1.webp HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 211690\r\nlast-modified: Wed, 11 Feb 2026 14:21:57 GMT\r\npriority: u=4,i=?0\r\netag: \"698c9085-33aea\"\r\naccept-ranges: bytes\r\nage: 1575\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xUEaUiF578Uu92369LT0wRl4uhy9mGTKKKj31N2e7Qq7XS6Px0H4NeHKZaC2uEomqkOgLuLcIIti86hZG2UJHnTO%2FeEG9mZbcCZGn0XhRCnX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7e310e8b0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211690,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e23cfa270a04a8d5f17491e3e27f34cf","sha1":"6ea24dff8ad78e1646ed51e15e5cc028dabe1730","sha256":"1a7a691af3a820ad3f0ef08afad89a33d1441447963f20c978fe216ecff34b4e","sha512":"f38d6829d93b86032aef48de6444a4481d26d51eb3ebf96398160c9cb0f6ea000bde91f772746adcef452b3e08b382531a350dd76bd19a3e3dc57d232eca96f1","ssdeep":"6144:9j+zBiBvELdfg3nPcUTtPEvDqoUOWBmgHtyfE9ND4:H8dfgdTtJOrgNyfR","tlshash":"9f24239261c8f637f4c3475b5308d5dbf3baa121e9bd7b9860013c972f334d6aa66428","first_seen":"2026-02-14T17:39:30.665464Z","last_seen":"2026-02-14T18:05:43.586301Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/3.webp","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /3.webp HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: image/webp\r\ncontent-length: 528106\r\nlast-modified: Wed, 11 Feb 2026 14:21:57 GMT\r\npriority: u=4,i=?0\r\netag: \"698c9085-80eea\"\r\naccept-ranges: bytes\r\nage: 1575\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2PNn7ZY3Zij30v3jEDTARW2BPTG8aMp0up%2BLU6Is4Y3HIRkmfEMovoUj2YnReItHF3tUnbul6r0AHzbAXX3ORBb1p3y5Ku9Fs5zbQY3rE%2BHY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cde7e310e8e0d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":528106,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x800, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9e2c9ea16f02c592f197ddbd69d42898","sha1":"6e27a2926cb6746fd88b40a858185a225ac7fee4","sha256":"83ab5c29f08e65449cff575094fccf0326f88b639682380da8d6b75b0c87823d","sha512":"98d9d3c0f09d51b4023d0e94b69573206d23c25a580fba176fa3cf1e758346e9f7506100964fa886f34fcddade68235c91b6c505a8f2828d9f9b9369dd7b8a71","ssdeep":"12288:Daf0T72ix5xcUC4skOyOgGBbBU2vsm/AvtgxdUl87xi9+DlyRZn3r5qc:Dafe72mXxmgGnUFax57xpDl8n3F","tlshash":"5eb423c50bbe6658e816df04af590e66100684d9e5c6118d8c468cbb0df7b39ce3ebb7","first_seen":"2026-02-14T17:37:29.150811Z","last_seen":"2026-02-14T18:05:43.587004Z","times_seen":4,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/logo192.png","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.996Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 14:22:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698c9088-14e3\"\r\nexpires: Sun, 15 Mar 2026 16:03:37 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 93701\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XooP9XrjueouBBQQFxV1JpDPjM%2F2xKZACQixSJcgMIDGy2%2BKZ%2FzWYdFpLOWJqwR2ONN16o2h%2B%2B5eeRon%2Fl7xeUZrIQIIsYuTZW5ZepjDoWYH\"}]}\r\ncf-ray: 9cde7e31cec30d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-08-11T21:03:38.623693Z","times_seen":14016,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T18:05:18.314Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 11 Feb 2026 14:21:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eUQB9VFe5JkPClFWecDbLOBRGEZXillC5f3jzDrBGqP%2BeXdZkPdV62zzXEY51s3SYR%2BeTmP4A1TUIPmijPVpSCd8HyNXxDFUmMEp6YFL0ssH\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cde7e2deeb3958c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (1041), with no line terminators","md5":"84512622675ab9cc0309057c5d83c730","sha1":"9035364b5af62ec79fc9b9201bff2657fa810e69","sha256":"bfdb37e40d7260ae4050a8233b7cd090fa324affdf0d4cbdf6b4af15af42608f","sha512":"da24383715fadffb2c3d34552cd51632f5d8076e3debfd3ef9f16e5c60a4a76e911625f7be3207113b219b8d083550fcf81d068021195805ea915a8912351b77","ssdeep":"","tlshash":"e511ef154c22844c973041afb9e7fe2ce54a7008ae51ec10bcee18afade4fd34985b59","first_seen":"2026-02-14T17:39:30.667226Z","last_seen":"2026-02-14T18:05:43.588221Z","times_seen":2,"resource_available":false,"data":null}},"time_used":228,"timings":{"blocked":65,"dns":30,"connect":8,"send":0,"wait":94,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/static/js/main.336b86b8.js","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /static/js/main.336b86b8.js HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 11 Feb 2026 14:22:05 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: Accept-Encoding\r\netag: \"698c908d-92cda\"\r\nexpires: Sun, 15 Feb 2026 03:44:36 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 8442\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DeZz6%2FbHJ5sQp8oxwwZwLf5qO1aUrmRiQJmVwu%2Fla3eDO5XyaQvYaY8HKeS5mXevI%2B2oJ2QM6llsZOhKFgY380soShQYqIzoe2Uj%2FMU51dPA\"}]}\r\ncf-ray: 9cde7e2fbe520d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":601306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"478e9f80de85162d0f0e94e37e94cb49","sha1":"766ff289f528ef2da1023c3d27a9b71d65013b25","sha256":"08c6be20feaf0ce90394f3fcd549e9db043dc20f29d044d829e2738df3ac4761","sha512":"4b08790e627331ac975ff048d25e262b2c018e355e5bf9c8e75e9781647a047b2d67bee20aa0ded090335f6faabcdd4e77fa33152c4e78bea6807c4b6ed2335d","ssdeep":"6144:E9dssWFXNe9EFKRYFrVwc5nJt76FJSSCSI7AoltHf6XQiGo97b5UB7POw1oP90HB:TDN4SwI7BN6XQRoMdbPHlKQnNI4iw","tlshash":"ffd44bc97281f5a5abf301a1407f450ab33e590eb80dc864b279fcce786454aa277f79","first_seen":"2026-02-14T17:39:30.664124Z","last_seen":"2026-02-14T18:05:43.588835Z","times_seen":2,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-14","alert":"Detects file containing Telegram Bot API","trigger":"zumauaetables.com/static/js/main.336b86b8.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"zumauaetables.com/static/css/main.9fa43a8e.css","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /static/css/main.9fa43a8e.css HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 11 Feb 2026 14:22:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: \"698c908b-16c29\"\r\nexpires: Sun, 15 Feb 2026 05:39:02 GMT\r\ncache-control: max-age=43200\r\ncontent-encoding: gzip\r\nage: 1575\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QTDiR3dtRrncVpztlDMARkTQuP7ksybVZPVR%2F933Y37vfiBdBrnEEaR11HqY%2Fs0gTacRQ1X4lmkb5Hl5GJBjvBOspmO9U%2F%2FoYsZf6XtY23kp\"}]}\r\ncf-ray: 9cde7e2fbe530d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":93225,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65472)","md5":"58f29ea648d33ae14fc9fa4a83ecd591","sha1":"7f50272e25d20a6c35b00f5f7d69266cc409fbda","sha256":"7d38717b9cad47b45207e3a73a9213bd0943bad9302ee7a56b34dc4d8f91a51f","sha512":"6dacda95cbc7e325e706b51f5f98527ac3ca8989c5cc354d5d6d2e14c3a3c35d71a970d247c130b7841ceda1dda9a2de21666235455eddf4434fcc2fa9ee63c8","ssdeep":"768:VFbDpGNN01MwhwV6ZYVDrE2drkjGyXibfL3bH19TSowv7FONGBwApyS+tJOrY7rm:VFb126Zy02Fkj74LbH19TSoGT5YS+tfm","tlshash":"f893e90847c4107abc13d8f2d1dc6b98e12eb1c4dd6a1bfd7c8a754a92c27ea0b67e51","first_seen":"2026-02-14T17:39:30.668035Z","last_seen":"2026-02-14T18:05:43.589409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/1.webp","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.867Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /1.webp HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T21:57:33.47713Z","times_seen":17844365,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"wss","addr":"adcbtemka.cc/","fqdn":"adcbtemka.cc","domain":"adcbtemka.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.948Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"adcbtemka.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 10:11:58 GMT","end":"Thu, 26 Mar 2026 11:09:37 GMT"},"fingerprint":{"sha1":"22:89:8E:82:94:C9:5C:4F:5B:DA:64:5C:CB:8B:B0:4A:4A:A1:C2:4A","sha256":"97:82:B9:0F:11:4A:28:9B:F7:A5:17:E7:FD:BA:5F:4F:DD:2D:B9:C5:B6:1F:F1:47:41:EA:65:FD:CC:DB:AA:B5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: adcbtemka.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zumauaetables.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: vIie2JpOQLkZ2Hx37W+cMA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sat, 14 Feb 2026 18:05:19 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 0AqWzy5PA97WPMc5fPm7fM1PoNk=\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=1%2B8h225MSZakTFdfV9rR4cPvMY3EkPWv8Rj4F9ovhhumXYPRUdBKdm83rGpwCPKsOve00m7Fv2Wd%2BjWSbZwhiurGjk%2BQvMjD1f%2BfqOCXgG6pI%2FJJLX0rG4VCYhcSkbY%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9cde7e322b5ca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T21:57:33.47713Z","times_seen":17844365,"resource_available":true,"data":null}},"time_used":253,"timings":{"blocked":0,"dns":69,"connect":76,"send":0,"wait":79,"receive":0,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/favicon.png","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.998Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:19 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 14:21:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698c9087-1090\"\r\nexpires: Sun, 15 Mar 2026 14:55:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 97800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2NPW3k06gjbS%2BAg0jaoDEqXNlJiV1FwwgrRmnPgja7schpRPlnynah1Zb8vEQTpcmDcqJ3u7o%2FupWOrc%2F8vU6WQRf3thu4lh%2Byc6KgJV%2F9h0\"}]}\r\ncf-ray: 9cde7e31cec20d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4240,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, interlaced","md5":"640f9afd2ca965e9ab7786018a8b8ce9","sha1":"30b90722cadacb546ef639d4792f871842f2c153","sha256":"1a2fc42c96610dafa4bb93c76de7412420126114b16376fb04f40e0d8fc31da0","sha512":"0626b11d6a63be572554198ec11131ae6c58a9442b703807d63969c92fa171f694d7aa7e758c4521ae418d35646a24ba56fbfc6709d6e0ba04fd282e1619b272","ssdeep":"96:hllcHitlIxv9vk7C1+I4wWHLihk/xTP2sxicRkSdlO:CIIHUCD4waVtOSdw","tlshash":"e1915d49e941c502114d978524ff9907463b5980d294ad6c69efc14f8a20db17c3e7df","first_seen":"2026-02-14T17:37:29.146582Z","last_seen":"2026-06-28T11:41:26.986424Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/logo.svg","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /logo.svg HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qItWj7Soq0sK7MmhTyU6ADNpgyHhXYLri2Gc4pu4zDrHVdrIpu02VjGI%2FU8IAPbDVQYuUIeszCdDEs2W%2BClshVy0ug7lsUkls5x57ztnzvwY\"}]}\r\nlast-modified: Wed, 11 Feb 2026 14:21:59 GMT\r\npriority: u=4,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nage: 1575\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"698c9087-3f7\"\r\ncf-ray: 9cde7e30ee830d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1015,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"78a845c9a6949ed786d48882a9c4a587","sha1":"9c251357ae22023d411345d8a6fc1b8afb1bfe91","sha256":"3dc9b94037e3fa8e8f9f834561c27884cb7d7c580e60a7073414fa37dbd6b12f","sha512":"95e0f9aaf1e1b74077bcb3c4ffd6002a35068fc291b502a9aaf13d4dc1d3509a5ecf35faacc159aef2e172b23d2b34f545f52783d6baab7ff6478cc2acf8b579","ssdeep":"","tlshash":"24110ee833acc274ab0cfbad853c2436452aa5f73c74900de7e6e21614bc69f4c28645","first_seen":"2026-02-14T17:37:29.141001Z","last_seen":"2026-06-28T11:41:26.97877Z","times_seen":5,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/2.webp","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /2.webp HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T21:57:33.47713Z","times_seen":17844365,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/3.webp","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /3.webp HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T21:57:33.47713Z","times_seen":17844365,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zumauaetables.com/award.png","fqdn":"zumauaetables.com","domain":"zumauaetables.com","tld":"com"},"ip":{"addr":"172.67.157.230","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zumauaetables.com/","date":"2026-02-14T18:05:18.888Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zumauaetables.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Feb 2026 13:19:36 GMT","end":"Tue, 12 May 2026 14:17:14 GMT"},"fingerprint":{"sha1":"03:CF:46:9D:06:49:10:CA:F8:AD:8B:85:C4:65:06:D1:E4:96:EC:3F","sha256":"A3:AC:6D:F3:2A:1B:26:BA:04:BC:5C:8E:A7:61:E5:D3:F1:F1:40:50:94:9C:BA:D7:DC:5E:D6:79:07:04:78:5E"}}},"request":{"raw":"GET /award.png HTTP/1.1\r\nHost: zumauaetables.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zumauaetables.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 18:05:18 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 11 Feb 2026 14:21:58 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698c9086-dd14d\"\r\nexpires: Sun, 15 Mar 2026 14:55:18 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 97800\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ly7a0jGwXEjLvMkQWIAcphPdem%2B4SBaiUbMivQbSrs4BbQ%2F3bc3P2XvS7xCVPEAwoWxBsgeHkxFPPt%2BITmF3Iw9Hyay59HuW0qBMdCK%2BeXvz\"}]}\r\ncf-ray: 9cde7e311e910d2b-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":905549,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 867, 8-bit/color RGBA, non-interlaced","md5":"927631e7fbea17b0884ebbf6f0a32399","sha1":"cb6a268bb14b014a6d7959e6eeabbb71d4093df5","sha256":"60a5343ad09212e342e8fd8bf3bd62e5d526749a1e39655120169b3f5a1aca76","sha512":"c95bfedaf36d86de50eae61d94b82daf111fbb5cb698970aacd2c68c824d4be457c0c34a0e80391210f3331e10c90844768c5e9018dbd4bfd97a442266da2778","ssdeep":"24576:RciEuUML5ci+hy/7NnISe60SMl3wGxOUSJrr:RcixUML5P4yTKrSQxOZv","tlshash":"811533a9979f8bdf2a352c7333e6121cf39ba542e4652f915c22d0d98af0c1d4837d52","first_seen":"2026-02-14T17:37:29.12762Z","last_seen":"2026-06-28T11:41:26.984619Z","times_seen":5,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zumauaetables.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}