{"report_id":"429cf6ef-1d6c-4800-897a-87fab3253df0","version":6,"status":"done","tags":[],"date":"2026-05-01T15:12:36Z","url":{"schema":"https","addr":"aveforge.xyz/","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"172.67.159.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aveforge.xyz/","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"title":"Ave Forge","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aveforge.xyz/","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"172.67.159.4","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-05T15:12:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"aveforge.xyz","ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-26","domain_rank":0,"first_seen":"2026-05-01T15:02:55.19594Z","last_seen":"2026-05-01T15:02:55.19594Z","alert_count":13,"request_count":13,"received_data":8271072,"sent_data":5725,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"webtrack.sale","ip":{"addr":"104.21.62.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-05T23:26:42.853157Z","last_seen":"2026-05-01T13:56:23.423831Z","alert_count":0,"request_count":1,"received_data":931,"sent_data":431,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aveforge.xyz/9cf456584347d1ca.css","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /9cf456584347d1ca.css HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYYsRSO%2Fqv8rnOsWRLyIM4cGL%2FFCkNu%2FvjOA9FbArhWN5UxuSibtyqAjM1Dsud97I4khcw3iD4glwLkl5r%2B9unzdrp4Tl1A%2BMxkydM%2Fk3YKMPYJoHM913KotJL50Vgk%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 582\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"c2a37d5e48affff735fb2e83463d6b06\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f4fb90da8011ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81265,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c2a37d5e48affff735fb2e83463d6b06","sha1":"0d439808f4d58385016bf11b3d11c82bd3e43a97","sha256":"76fb6911565cb80550ef1aaeed6c31c19339e634e389dcd9cc62781540c648fb","sha512":"34d00dc79bae456a30abd57e340c0c836ce585e408b1fec5893c7d4268410c59d3637277204871e082342112866931b7cfbeb561112c8c9e60f5a86e79898443","ssdeep":"1536:Dp6qRmkRXJs83iI8udsVynSuqn7PEL988R9881A:F6qckRXJs8r8esVyfqz1","tlshash":"e783c764a22aed7fec2354b6537cfc1c5118b184ee2117eafa1325225ec27f21d7a760","first_seen":"2026-05-01T13:56:26.383508Z","last_seen":"2026-05-01T15:12:37.735859Z","times_seen":5,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/css2.css","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/9cf456584347d1ca.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\nage: 581\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"c1b51d08cc92392478a8d9cec8bc09a7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bH7XRR1M3T0fBRfsUL0MDfxjzM0ASlRWsbeuKz1%2BeJya8JZcXhi%2FpzoSVlh%2FhjUepbCfumUYSlkfN1Y1WRGYzKRq5jYQskOB1dy51DfdjTDyD5Ptrc1kVHUuOohhBQ%3D\"}]}\r\ncf-ray: 9f4fb90dc8061ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c1b51d08cc92392478a8d9cec8bc09a7","sha1":"9dd5fc970703998d8420f95cf23f6871c0de4c5f","sha256":"1620c5b4942fa1bc7dd7c789725f6202ccf5b4c01ee147b3d767c80bb14ccb01","sha512":"48e26787dd23947f2d00e3777046e71220a0c134f0f5de1711c9276855365abdbe7cbdd2614db2244f9406810496e0902d6a2da73ae763ccfe11643bb9283c9a","ssdeep":"","tlshash":"27e0c0400c266a04d7b31cc052cd3e3ade0fa15024419e286fff00d4bd82d566397b1c","first_seen":"2026-05-01T13:56:26.37926Z","last_seen":"2026-05-01T15:12:37.738973Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/button_green.png","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /button_green.png HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"d7ddc782d9d1e45b88e5e1ff1e6de83d\"\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\ncontent-length: 2482\r\nage: 581\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtTd74NqjwWKSnX2xZVfBZWAO8FSKbizIapEnidCv76CdeFEaHU3%2B7uqj1Su62EV40RnpuADO3tCpg%2FOZHGPQz8O3qu2Bnt8MqG1wxqOBo9VFF6K7I03pTw%2FSP1biuc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4fb90e18081ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 505 x 100, 8-bit/color RGBA, non-interlaced","md5":"d7ddc782d9d1e45b88e5e1ff1e6de83d","sha1":"ca6fbfd2c182f709d955302cc9e45b764112dccc","sha256":"481655af5992727d4ebce531626b97861ccd8d11e03fee64cb18e72d8618aca8","sha512":"aaa7ec8ea5b13a49a97bd047fb54f877119766a3ba9e265f118d279180032ee0c338d202dc48a97208b46b177ab93aa8476f5578d0c7747592b04806995d0bf0","ssdeep":"","tlshash":"ea51d5aa184fe97eb606e38001e982a87af3104c7e605d71f555df2bcbe4a170607d9e","first_seen":"2026-05-01T13:56:26.380867Z","last_seen":"2026-05-01T15:12:37.740855Z","times_seen":5,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/bg_hor.png","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /bg_hor.png HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/9cf456584347d1ca.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"dde262d7517a2dcb248cbfa4cd70703c\"\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 581\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A3vd4DNLISxML0ah1hDJ64vS4t3hnADKinmzokeuNNh0oLinBa%2F%2F0IDx%2B7JWv%2FsqksOY6UBuCbIX3EXMzqnBTvVIsiNG0wDydnoyfOKBv%2FpYnAvWtOOayZKYocYhZy8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4fb90df8071ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006383,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"dde262d7517a2dcb248cbfa4cd70703c","sha1":"c00cb5e44ee83772afa8aba90f951fd1070a73bf","sha256":"f4648cba7cfb3106bd03ade08467f9011be20911054c30d0a775ab7f421da7ae","sha512":"f0434924d7361d985ed839dcf46c4062ed9f5c397d53a2e8138952f2b40cd2a08bb49c44dac2614f6fcef018cc7f8aed7693469bdabadba2dd373e37ff176a63","ssdeep":"12288:vN7ZG2m/8u/eBU03l3JI7tdMAB6rZ5SKuzOlXmPn+j9EEgBc1jQqhw+z9/+lhCuv:vEd/Ab8bGZ54ipEBW+xQ+vCpvy6zpXa","tlshash":"7025238fdc8e0a20df8ac073915361c98b8d66ff2bbdceb62c78756f4e15c65058a191","first_seen":"2026-05-01T13:56:26.350714Z","last_seen":"2026-05-01T15:12:37.742821Z","times_seen":5,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/bun-1.png","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /bun-1.png HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"1d278de0eda7ae2a28a5fc77890e3191\"\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\ncontent-length: 1724\r\nage: 581\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=onws0ZId9TrmgEhnHhWRryfe8HKr2ops63FEV%2FSJkMbMEra8yL%2FCHoVOmmyDrOgSsIADf6ETCiIpIMLrJk0kn2uOaLfnk9DEc9r36NBIVcB8MAOOjZ7HH0UcUYswiVo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4fb90e680e1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"1d278de0eda7ae2a28a5fc77890e3191","sha1":"6bc3d83dc32d37a49d12a53b152657cf290c0fe2","sha256":"83d6e8ffc419a46dca8dfdf58e6926f12fb29432ddf416edf44d212a710c1258","sha512":"ff6d78a88f7e17a67ac72a10382d48d93ed5feadc129792d084663570475d01b12cc945c4082253da957d3691d8d43e7c9b0f04ae27227e47de70af129bcd71b","ssdeep":"","tlshash":"f931fd3f665211de37b3556ed1377b519e1700f81eac0956b337cc6018a816dec63b84","first_seen":"2026-05-01T13:56:26.363071Z","last_seen":"2026-05-01T15:12:37.744653Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/favicon.ico","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:10.775Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FAN5%2Ff%2B88HfwU30iTy%2BqShhQVUxuSR12E13YAXqs%2Bu30p%2FmkaJDc3wIFUFy7zzUTimbAMALr1X3WUxEJ1Z1Hi4PNhA1OrkD5t3G5VnA1PpokOBItE%2FciCGwYxOjWXSI%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:10 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 581\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"c2e8808feeb05b7fddd9e507d64b4f7b\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f4fb91358581ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"c2e8808feeb05b7fddd9e507d64b4f7b","sha1":"1c8c3d7ef7f90bfdae5468bff7f6f9b49fd67e5e","sha256":"1a7ffa80882fe440fb3d521ba4067eb30c2993cd3561be345aa3d674b622e2b3","sha512":"397e19ae4580ee6b8f2eb8f844ff7be33a8359462c6b6c67a7b0f3e9be41b3891bb3c9e473aa9d14c4922e669d5ecf571e65ffbe0dead1e295312da0f9694013","ssdeep":"96:k11tjbbBGCRIT1NGHWmT6fVn2i+Z9kqC2QWy:i3jbbJaHdAgEi+PHNQf","tlshash":"8c910a343ee3810ae55146f1e9e2c7b353a4526d0235ef5e4285c0ec76592e87ba36dc","first_seen":"2026-05-01T13:56:26.388584Z","last_seen":"2026-05-01T15:12:37.746486Z","times_seen":5,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T15:12:09.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BCzgIteaOgcShX0mqhaSljeIjuhX1c551MW1OXBbyOichW8tA0mwG8pNF1bYYL4d9AMBh7Y8E%2BWAIMJWBHK9LjfSZJkGMPwfJNIs7fHPm6WpDhIGOJY3Q0AFqXMJybY%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f4fb90b8a3ac759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8662,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"58a837d3d0a3f083873cece73250fec9","sha1":"005b144eda48196974aea94e1313dfd71e4396ae","sha256":"a61133dd4950cfd6518230695ce7055c37cd1c991f0c06676734a487f1773809","sha512":"0176af8cd01a16ff29aaa187a27b5dd1579ae224dd7d44d65656401ccb7ef350026219027912ae8be464885628f9ae17b4ec6ad627aa32d2fa0d70902dc7210e","ssdeep":"96:5rEn8LMJzNwijolpXEJ6PCh3DIJBbR4b84tR6DPqcW1EaQaWkbpkbHJPSKarkb8:9EniIZwioXaRh3DqdmxtIDSkcpcMc8","tlshash":"a3026782d9e208c6223fc06eb9e3e9064671d507c649e90f76ed11e56f8edd8c4e325e","first_seen":"2026-05-01T15:02:58.567591Z","last_seen":"2026-05-01T15:12:37.748212Z","times_seen":3,"resource_available":true,"data":null}},"time_used":369,"timings":{"blocked":91,"dns":88,"connect":3,"send":0,"wait":166,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/assets/eleven.js","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.864Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XlXY3euAd4x%2B5lEIkiYw84tKWHiflwLLFLBx1YsRuz6mr5GS6l5hbQWfT2IT1pwo%2FUfopwYzQANoWMpZOl8sDT8AglV%2B8h%2FJOn6ytKxJefLrlbLIAMMSvJGC6BZUbRM%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 02:20:44 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 582\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"e28c89f8964236aec24f22a889ed5efb\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f4fb90da8021ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7113933,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62851808d35a19a388e28322acb50c32","sha1":"9246ecbbf04b8321f24277696e6da8e50e453c3b","sha256":"1dcc048947d4b37eb39849e83a5a99a6e5d5448d0871e1a2f1265c0c2b956ad5","sha512":"d1a55d3b22d1ee3091f90b55fa323ab28cea8348c4f9b8fcfd9dba59bb8174720004b5fd0ae42d72bbd2f648be559898aefbade4ba6478c6d2267bd8c8dddf84","ssdeep":"24576:apfRyhK29Fcq5jIDfgVoOVta8ZIWAcFBra+y:aK4MO","tlshash":"c42507cf27d9b5551212307b3d1a2093e4aecc99b98ccd94f797ac2ef84c72ca1b5624","first_seen":"2026-04-24T15:23:09.416345Z","last_seen":"2026-05-01T15:12:37.749708Z","times_seen":51,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":247,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrack.sale/p/62gzAzvto","fqdn":"webtrack.sale","domain":"webtrack.sale","tld":"sale"},"ip":{"addr":"104.21.62.57","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webtrack.sale","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 19:52:55 GMT","end":"Sat, 27 Jun 2026 20:50:17 GMT"},"fingerprint":{"sha1":"96:26:37:92:72:27:EC:AD:98:B7:DA:A8:7E:44:8E:44:29:9E:F9:1A","sha256":"61:C0:9B:77:A8:C1:0A:C4:C4:5D:1D:C2:65:8C:38:FE:BC:3A:F8:CE:13:8C:57:0B:41:A1:50:81:38:BA:7E:DE"}}},"request":{"raw":"GET /p/62gzAzvto HTTP/1.1\r\nHost: webtrack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 15:12:10 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-dns-prefetch-control: on\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3x0T14XyK6X6VJxcwGFQgRJdUTjjbyFx9cf877AuVMEHCroNarWy%2Fh621I4qeWbqlmQCKk497nfXRJq%2F9T6lNzFRxEqlrd%2Fh3Gc0%2B5UNZ09Dmvdl0r9d0NDnxpYegRj%2F\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f4fb90dfad9b4f4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-05-01T18:44:09.819018Z","times_seen":81309,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":46,"dns":23,"connect":1,"send":0,"wait":97,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/9a4ee768fed045da-s.p.woff2","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /9a4ee768fed045da-s.p.woff2 HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/9cf456584347d1ca.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\netag: \"51eee31e9cbbffe82e6d01f1c5f876a1\"\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\ncontent-length: 11768\r\nage: 581\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fwnnyvl8NnOx%2FooBdelTMC5idQLiyEnvivW7EIqxvPqr%2Fczhwp9Pki5AwHo5m%2Fp2tCGHnTMP2ZXACfCpdP%2FZNjd9pG%2FXcJlTEvCO0OeXxhBnnmSTOqJzWSmE4jlJbJU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4fb90e18091ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11768, version 1.0","md5":"51eee31e9cbbffe82e6d01f1c5f876a1","sha1":"b522c4d9146d75cc5c142f89a2dd433cf1fc297f","sha256":"967b3909a7d6a5cc6365e9947775060fca15efdb62bc70099aef2e7d86e10205","sha512":"dca4f8c8e31eec966e85c434de6334a81b3f6560ee972c0d5abbf63b9799dd0649df0ac72948936893717a9668a327e42a755e157e3dbf412971497da7e35fa3","ssdeep":"192:9AOQ7tH9Jxj331qYf1WBzfyoweJOHctj/9HiO7q+cAtTiK2qf0TT:yjtdJbqYfCzxwoO8tjoa1ZiKDsTT","tlshash":"5732b08836dba325e434a9983d703d5b040a467f75ca8bc3458c347602bd58aca978ff","first_seen":"2025-06-21T10:13:16.173817Z","last_seen":"2026-05-01T15:12:37.75142Z","times_seen":434,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/dis-1.png","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /dis-1.png HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"5b0134481ed450f4a1add179b4423971\"\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\ncontent-length: 907\r\nage: 581\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvRk5zm06NtRnEgVvshijrcbaGP3HIB1Upp7f8hVosMO0HzSv6PdTGAaPa10zjo%2F7OBsMnKFgW19PkqqqaN47SZadKByzSDJ7NNsVtbvSuLOH4tvn%2B1OPmJYEYm82hs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4fb90e680f1ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5b0134481ed450f4a1add179b4423971","sha1":"bbcd35e3842a2326741fc4efa0f017de09b64799","sha256":"6d3212b411ce982c27040461f665c2216b7d9bb46266edc5afeb51e273eab8f2","sha512":"3db7570475ac155d0926105c2de99c5bf64e231f342d39720fa3b2218165e01fe7481ad5781ac148f88d29bee44c6bb58c6403aa859d030a3bcfead1e4b3d8ee","ssdeep":"","tlshash":"441163faf6206592d67808fc121004680caa535a6496cf08ab69d3af6e1de50d69ec8a","first_seen":"2026-05-01T13:56:26.385286Z","last_seen":"2026-05-01T15:12:37.752355Z","times_seen":5,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/x-1.png","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.988Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /x-1.png HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"53e4e8e950162052722efec214a28abb\"\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\ncontent-length: 1014\r\nage: 581\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ULMZnBoeM2fH1RkwIxqJ9j0oTXiFxzHQWk0STErpivsrwPaA1Uv0XKU%2FAgyA%2BUGLl8hURZzB10CQWYRO6I1MZV8YhXbYlJEBlOpJ8QSy%2F6Vs5ofJ%2BDFNpsb99XofThU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4fb90e68101ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"53e4e8e950162052722efec214a28abb","sha1":"15874079713fd08f85bbc66ad62de89ff57e35e7","sha256":"441a0cb359359152e126d55b9e9aa9bbf58e0b38097328007a6c2c5d36c4b7af","sha512":"39466d1c7fcfdf51fedf9b335bede24b5a9194cf3cae52ccc0a816d188d44c224524a4cde4fa599c439576a4487d975b2037b6cb4464ca8a088b54509d9d01cb","ssdeep":"","tlshash":"0011d88b1106521f9e74c3f005c45dd16fe92eb6d2b09e02fc64ff0416758006a48719","first_seen":"2026-05-01T13:56:26.372085Z","last_seen":"2026-05-01T15:12:37.753915Z","times_seen":5,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/git-1.png","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /git-1.png HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"02d85219683e608e89da55cbd4962672\"\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\ncontent-length: 1059\r\nage: 581\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nijTJqkoaXAAUgWaqrSHRNu427wTkfmTnmvyGoeDAWhp4vuKvE30hwYYepKdOZQK18GkZxDTZxrbf9RNDxNuVdlaIQUAi%2Bo3JCvFgTr0Wbxu%2FQDipZ%2Bal2JFQJQ5gHc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4fb90e68121ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"02d85219683e608e89da55cbd4962672","sha1":"14322d1b3f97b0b145b7f2198f1fa164d0c61665","sha256":"d4197984ba95a8c390a02dbd06e57980a1a3066179bfb59b8b00aedd9adeb3b6","sha512":"ab1b5fadebf3de7a4dd28491d416cf1e7e2464c5952d7dba1f8412710b05264a46b23cb074ba2a4013d38320613e4d514aabfc0b576cc03023d9eec96a737eab","ssdeep":"","tlshash":"4211d8e3f5257d9edbd781b012617c7de02567b3b801c95f7531f642621ad08353906e","first_seen":"2026-05-01T13:56:26.36799Z","last_seen":"2026-05-01T15:12:37.754752Z","times_seen":5,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.xyz/9722456a4ad99fe0.css","fqdn":"aveforge.xyz","domain":"aveforge.xyz","tld":"xyz"},"ip":{"addr":"104.21.58.105","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aveforge.xyz/","date":"2026-05-01T15:12:09.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.xyz","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sun, 26 Apr 2026 01:46:06 GMT","end":"Sat, 25 Jul 2026 01:46:05 GMT"},"fingerprint":{"sha1":"D2:95:FD:01:E0:F9:38:FD:51:2F:2A:CD:22:59:E6:AB:C1:93:15:EE","sha256":"78:05:DD:20:2F:CA:8E:03:2D:88:D1:3F:2D:77:77:FF:BF:80:7B:B1:64:7C:B1:43:27:18:16:71:B4:BA:22:65"}}},"request":{"raw":"GET /9722456a4ad99fe0.css HTTP/1.1\r\nHost: aveforge.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPGuUtckhB7QOdwZsfZ0npT9Z9hQSRYy%2B8aZd190QhuECOfZPdODAyDH7CY7sgwepZmg1%2F%2BN4xjUbkh7pq0ksDY2Vv4i%2FthcjplKU0fwituzhrTM3ZWM89h5qqdCFR4%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 02:20:42 GMT\r\ndate: Fri, 01 May 2026 15:12:09 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\nage: 582\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"b06c08500e32c56b15dab50d887b0311\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f4fb90d98001ae6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28062,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28062), with no line terminators","md5":"b06c08500e32c56b15dab50d887b0311","sha1":"e131304fec1b297c8e717e0c7928fe467ea45c45","sha256":"ac50ff87190bea4ef8fba0e895c90a5c177efedef0ceeca4ffaa898129fced01","sha512":"fe09764f0f31f55c043a9395f2c79d6cdfbdf35ada449f097433569aa8d7089139496a6317d0c4acd242bd50346926428f5f168d48b6a73eb6d94d29a3659aea","ssdeep":"384:TpSed283ZcW23qWF7O36AgzyAIfPo8PFEIN4:TpSUJoAgzyAco8PFEw4","tlshash":"bac2c9097e2d3f38ba13a32440c0849c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-06-18T00:26:14.391201Z","last_seen":"2026-05-01T15:12:37.756751Z","times_seen":123,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}
