{"report_id":"4550bc5d-3077-4b28-a7a5-54757df03390","version":6,"status":"done","tags":[],"date":"2026-04-21T23:51:22Z","url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"title":"Microsoft Sign-in Redirect","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T23:51:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":5}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T23:50:59Z","timestamp":1776815459,"ip_dst":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":41110,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-04-21T23:50:59.965082+0000\",\"flow_id\":759921673216205,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":41110,\"dest_ip\":\"104.18.54.45\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.54.45\",\"port\":443},\"target\":{\"ip\":\"172.18.0.5\",\"port\":41110},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":945,\"bytes_toclient\":1654,\"start\":\"2026-04-21T23:50:59.958669+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-04-20T00:21:55.268604Z","alert_count":0,"request_count":3,"received_data":2465802,"sent_data":1495,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-04-20T05:47:47.109581Z","alert_count":0,"request_count":2,"received_data":815989,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"logincdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":23083,"first_seen":"2019-04-23T01:13:28Z","last_seen":"2026-04-15T18:56:43.669406Z","alert_count":0,"request_count":1,"received_data":4352,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}]},{"fqdn":"assets5.lottiefiles.com","ip":{"addr":"172.64.149.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-03","domain_rank":1873573,"first_seen":"2020-11-16T17:45:01Z","last_seen":"2026-04-08T20:37:47.747987Z","alert_count":0,"request_count":2,"received_data":277470,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"prod.spline.design","ip":{"addr":"54.240.174.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-20","domain_rank":1418142,"first_seen":"2023-03-09T07:21:21Z","last_seen":"2026-04-16T08:58:04.968218Z","alert_count":0,"request_count":1,"received_data":531,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2025-03-31T19:03:20.016252Z","last_seen":"2026-04-05T10:30:57.078584Z","alert_count":10,"request_count":2,"received_data":45433,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-04-21T23:51:26.815655Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","size":383981,"data":"","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-04-22T03:04:59.719729Z","times_seen":3710,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f58ffd4fc3ad4fad71d90b5922109e7e","sha1":"a9209eefd9faf424012b06f9318e9111396a6cd2","sha256":"8b1ec21a36f7fc8946af1a6e6506d4beb021a9354851549deac984d44e4ce308","sha512":"55c18862e96854e947249681164af9fafe946ec9eebe98b92e3473cc1beeecd5190e0f44a1f1f5b502ba2b5d17650e572a8dee702921a6b880b0edd63dcc6af1","ssdeep":"","tlshash":"bd3136fc18f34517848711ae86cfa33a64a854e74d2bbcaa365d48898fc91cc12b4b79","size":1571,"data":"","first_seen":"2025-02-26T13:52:21.256576Z","last_seen":"2026-04-21T23:51:26.816633Z","times_seen":393,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-04-21T23:51:26.815655Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-04-21T23:51:26.815655Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-22T05:13:40.210486Z","times_seen":31009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d2a69f6efe5fc0e8273f46cd5fd0852c","sha1":"945037adfb01948c63216e500b4d7532cd178884","sha256":"2e522a86a1fa2d211e1433e75f15d1c1b59b2942ac1a681d45bf7d0ef5ea92b1","sha512":"c624db44b591ebefc8d31f94980f0268877c94d48fd4cfb186418f6aefc832e33108c9f565e4bc576e2ac3eef79060f35dd76a49f1ab569528956006cb2920b7","ssdeep":"192:E/whfnwl27SVTCYiKwuSX1AKih+E601IEhQxsswVBFIXtw2MqJy6xpCZCYG4ICkI:E/+P57gxy6ThQyswVBFIXtw2jdxl+","tlshash":"1f224d9d38e321715aa7713e570f610a3936414b340deda8bc9e93001f25f6adae3bd9","size":10816,"data":"","first_seen":"2025-03-31T19:03:20.944766Z","last_seen":"2026-04-21T23:51:26.817529Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6d5a090e3150aa9af94092bcfe9894","sha1":"1da725846f7c644e56eb1536607098d9173c9bfb","sha256":"45476948bbac9896ba3148290c27d68a4b8b6f45481099f5bac9b62fab75acf8","sha512":"776f90ca2e88196397dc012ce70348f70642a93269fd4ad9fdd57c62c0a6e03d3f76518ec425a985128541390b617580984e64a1cbfddd9a90d4c2440963aaba","ssdeep":"49152:gabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4tgJSs89CqqqeC:WaHKPsqPjTxX6","tlshash":"04757de433a57027879b919650760142b33ab4d61809842cbe2cdceb7ba5c4672fffb5","size":1695626,"data":"","first_seen":"2025-02-26T13:52:21.259294Z","last_seen":"2026-04-21T23:51:26.81873Z","times_seen":391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-04-21T23:51:26.815655Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-04-21T23:51:26.815655Z","times_seen":547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"assets5.lottiefiles.com/packages/lf20_zw0djhar.json","fqdn":"assets5.lottiefiles.com","domain":"lottiefiles.com","tld":"com"},"ip":{"addr":"172.64.149.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:01.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottiefiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 16:41:45 GMT","end":"Mon, 01 Jun 2026 17:41:42 GMT"},"fingerprint":{"sha1":"5F:07:4A:10:80:31:08:30:12:B7:4B:9F:44:21:AC:A5:F1:1D:57:4F","sha256":"53:4A:C5:EC:42:B8:00:BC:79:62:8F:C3:A4:F2:3F:16:40:27:95:E4:5D:0B:D3:7C:F4:C8:D1:1E:50:37:CE:88"}}},"request":{"raw":"GET /packages/lf20_zw0djhar.json HTTP/1.1\r\nHost: assets5.lottiefiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 23:51:02 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=VEmnNdq3Dp.9k8AsEQ5sI9KFf3A_DyPA6M_Vconyu6E-1776815461.9809396-1.0.1.1-fkx6L1tIg6AFuiVlnP8A.AMI_nCPC4faS80Y7rlctvHOKB.6FA4tt.tpMriBU8wYFEqTyHjl7juPFqpKMgqD4MK8VwUWCGvW5XQXAfPYpoFxmBRRLO4Zufw.hOQLM_6F; HttpOnly; Secure; Path=/; Domain=lottiefiles.com; Expires=Wed, 22 Apr 2026 00:21:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 1800\r\nlast-modified: Sat, 14 May 2022 08:16:32 GMT\r\ncontent-encoding: br\r\nx-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA\r\nserver: cloudflare\r\ncache-control: max-age=315360000\r\netag: W/\"c17f786d1eda65296df13ddcbbe8e0b1\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 de27d82c1c354527a5740acf5043eab4.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: UlfBCZUnBhs5Y1LgJQCCu1tjnO5fW-SPrSKObQ2vGvD0VJdLlqNHoA==\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f004b5d6f5d0883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137719,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c17f786d1eda65296df13ddcbbe8e0b1","sha1":"5bd36e290accc798209bf0c2d8897c4bded7c309","sha256":"fb0b9c5e9bd3e094e3cf947100f3b3440263e1b9351c60e6acdad7a74fb0628b","sha512":"82b4fd37712240d460994de8086e057eef75ced412755e625acbb109e4aa9bdc010c064f87b366c12776f37460bf923c92870b4a925b86b590a2d6906d7e185a","ssdeep":"3072:Pp/mlCVNRCyMvjln4fI9MTblS6A32UZTvIDXkGJOUezJR7RG1V:R/mYCyMvjln4fI9MTblS6A32UZTvIDXL","tlshash":"9bd3cdc9067102ecfb192994cb8335d8dfc488567fc645edeaba5c188ba5aad3301f17","first_seen":"2025-02-26T13:52:21.241536Z","last_seen":"2026-04-21T23:51:26.787421Z","times_seen":393,"resource_available":false,"data":null}},"time_used":637,"timings":{"blocked":52,"dns":36,"connect":1,"send":0,"wait":531,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets5.lottiefiles.com/packages/lf20_zw0djhar.json","fqdn":"assets5.lottiefiles.com","domain":"lottiefiles.com","tld":"com"},"ip":{"addr":"172.64.149.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:01.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottiefiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 16:41:45 GMT","end":"Mon, 01 Jun 2026 17:41:42 GMT"},"fingerprint":{"sha1":"5F:07:4A:10:80:31:08:30:12:B7:4B:9F:44:21:AC:A5:F1:1D:57:4F","sha256":"53:4A:C5:EC:42:B8:00:BC:79:62:8F:C3:A4:F2:3F:16:40:27:95:E4:5D:0B:D3:7C:F4:C8:D1:1E:50:37:CE:88"}}},"request":{"raw":"GET /packages/lf20_zw0djhar.json HTTP/1.1\r\nHost: assets5.lottiefiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/\r\nOrigin: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 23:51:02 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=OiIc3bfJwR7j8iytAcsciiCo7d7VBMKVzVZDRTl7zac-1776815461.981726-1.0.1.1-QCx5ApBF0DYowooUT8.FkXwAvKrFNoe0tcnxwxYB138k_YmNSva7Cb_.aTRsM4ZXKG8Qr4JsXkTYyvuRurQm.n2EblISEsAbhYGcW5YAKds8hxvd1Q3zqQj7I2TP46Ow; HttpOnly; Secure; Path=/; Domain=lottiefiles.com; Expires=Wed, 22 Apr 2026 00:21:02 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 1800\r\nlast-modified: Sat, 14 May 2022 08:16:32 GMT\r\ncontent-encoding: br\r\nx-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA\r\nserver: cloudflare\r\ncache-control: max-age=315360000\r\netag: W/\"c17f786d1eda65296df13ddcbbe8e0b1\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 08b84720fd9415ecb290dcdb71c8b776.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Bnotr3YMwgCt1TpxeazXhryjiFRVnv3qAy1ySgydz7iHMg6POVUsjA==\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9f004b5d6f600883-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":137719,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c17f786d1eda65296df13ddcbbe8e0b1","sha1":"5bd36e290accc798209bf0c2d8897c4bded7c309","sha256":"fb0b9c5e9bd3e094e3cf947100f3b3440263e1b9351c60e6acdad7a74fb0628b","sha512":"82b4fd37712240d460994de8086e057eef75ced412755e625acbb109e4aa9bdc010c064f87b366c12776f37460bf923c92870b4a925b86b590a2d6906d7e185a","ssdeep":"3072:Pp/mlCVNRCyMvjln4fI9MTblS6A32UZTvIDXkGJOUezJR7RG1V:R/mYCyMvjln4fI9MTblS6A32UZTvIDXL","tlshash":"9bd3cdc9067102ecfb192994cb8335d8dfc488567fc645edeaba5c188ba5aad3301f17","first_seen":"2025-02-26T13:52:21.241536Z","last_seen":"2026-04-21T23:51:26.787421Z","times_seen":393,"resource_available":false,"data":null}},"time_used":633,"timings":{"blocked":51,"dns":34,"connect":1,"send":0,"wait":529,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode","fqdn":"prod.spline.design","domain":"spline.design","tld":"design"},"ip":{"addr":"54.240.174.99","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:02.211Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spline.design","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 04 Aug 2025 00:00:00 GMT","end":"Wed, 02 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EB:8F:BC:30:7F:E6:20:54:82:40:AE:8A:6C:E2:35:85:23:4D:C3:D7","sha256":"55:5F:A5:8E:EB:74:A9:74:C5:A3:FF:00:8A:7C:E9:07:F9:0E:37:9F:01:DC:2D:E1:E7:3F:C4:34:A2:07:76:6D"}}},"request":{"raw":"GET /mAXoIkgd8xZRsO2j/scene.splinecode HTTP/1.1\r\nHost: prod.spline.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/\r\nOrigin: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/xml\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, HEAD\r\nserver: AmazonS3\r\ndate: Tue, 21 Apr 2026 23:51:02 GMT\r\nx-cache: Error from cloudfront\r\nvia: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: cebnwQpMB6klECs3Vsz6s22J92eSGSEg57jpehd1Hrxj726lTEm4kw==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"b6c792c0f58fa3ec92173c074885221f","sha1":"0dde8fd9111d807e202b2fb37f8bcc4052fd861e","sha256":"a824bc7739e226e1b40ea0f8c4e4f4c6f796fc3b4abfa6e9abe3bd119a30d938","sha512":"83c8b765edcc44f6aaf19445881c315239095b4ac90e9bb85716084db9b9ec75f74876b49340cbaf5ae8d173e517af9eaf82e628d1d32090cd0b4ac8a5d08875","ssdeep":"","tlshash":"51b09201b208a82a19514e3a373cf110e310593102c426a8aa96a88317828914d08325","first_seen":"2025-01-13T10:02:12.3839Z","last_seen":"2026-04-22T03:00:18.272284Z","times_seen":5068,"resource_available":true,"data":null}},"time_used":520,"timings":{"blocked":89,"dns":84,"connect":1,"send":0,"wait":337,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T23:50:59.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:41:58 GMT","end":"Fri, 12 Jun 2026 07:41:57 GMT"},"fingerprint":{"sha1":"C0:16:76:CB:73:59:54:FD:EE:F5:98:D9:1E:84:2C:64:5E:69:4A:C1","sha256":"EB:7F:C6:00:94:82:C3:E3:51:75:19:72:94:30:B8:60:5D:EE:9D:90:4D:0A:8E:6F:2C:9A:F7:84:10:1D:65:C5"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Tue, 21 Apr 2026 23:51:00 GMT\r\nContent-Type: text/html\r\nContent-Length: 17764\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"3d4bfd34d7a5ca5bf74c22a3865e0cc8\"\r\nLast-Modified: Mon, 31 Mar 2025 15:18:33 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9f004b50d98c0afe-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17764,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"3d4bfd34d7a5ca5bf74c22a3865e0cc8","sha1":"9891e3fc9b1e78db86e48a4e569d6e4c32f37253","sha256":"ffe8217916d933e70115cb3c77e1c7e06d59580ffba5b3ccbc9d054a0159be7a","sha512":"e661b436998e2dc374db5d1c9e534804d851c72be51d12cb8bef3dab93b5c00806cd5c640a77fd77a9d65dc5fe126f86b5711c725835afa743ae824e59c8e8bc","ssdeep":"384:kiSsY1ON59FX/+P57gxy6ThQyswVBFIXtw2jdxln:kiXY1ONhX/+hUzThQyswvFIdwcn","tlshash":"ba82b59e38f310325593a17ea39b660a3d768507a50edd68bc9d43401f82fadc9d37e4","first_seen":"2025-03-31T19:03:20.936218Z","last_seen":"2026-04-21T23:51:26.794209Z","times_seen":23,"resource_available":true,"data":null}},"time_used":624,"timings":{"blocked":43,"dns":33,"connect":1,"send":0,"wait":533,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:00.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 21 Apr 2026 23:51:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 71\r\nlocation: /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9f004b559ae956b5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T05:09:04.594815Z","times_seen":14046463,"resource_available":true,"data":null}},"time_used":790,"timings":{"blocked":14,"dns":1,"connect":1,"send":0,"wait":757,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:01.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 23:51:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9f004b5a6d1356b5-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01K7QQMF8N1G3GB9FWMCHE11KT-fra\r\naccess-control-allow-origin: *\r\nage: 40449\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 21 Apr 2027 23:51:01 GMT\r\nlast-modified: Fri, 17 Oct 2025 00:03:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27447)","md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-04-22T03:04:59.719729Z","times_seen":3710,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/favicon.ico","fqdn":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","domain":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:02.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:41:58 GMT","end":"Fri, 12 Jun 2026 07:41:57 GMT"},"fingerprint":{"sha1":"C0:16:76:CB:73:59:54:FD:EE:F5:98:D9:1E:84:2C:64:5E:69:4A:C1","sha256":"EB:7F:C6:00:94:82:C3:E3:51:75:19:72:94:30:B8:60:5D:EE:9D:90:4D:0A:8E:6F:2C:9A:F7:84:10:1D:65:C5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Tue, 21 Apr 2026 23:51:02 GMT\r\nContent-Type: text/html\r\nContent-Length: 27150\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9f004b60ae680afe-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (611)","md5":"46dd133ee00dc1bae5e4eeba7b88432f","sha1":"8af86a4ac91ce48c062216fb94a6e1d57618a19b","sha256":"9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66","sha512":"cb49f9e3812e2c262af374e79bd8905cb508a45bf2c2d6af62eed85af43770872486a55e9425882feda9fb3a57a317a3c18be1e286adaf0c76be7f1b0dfa8474","ssdeep":"384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3","tlshash":"e3c291dc7be968e4e5de43aaef2831a8320ba0fb17425904f51d12142f0655cec6f6ed","first_seen":"2024-07-03T19:18:11Z","last_seen":"2026-04-22T05:37:28.827845Z","times_seen":30715,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":141,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-21","alert":"Phishing Block","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:00.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 21 Apr 2026 23:51:00 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::vfphl-1776815454652-e30973fa59ae\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 5\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uQTsdjezA7N3g3Mv2amnK79WBSgE4xaib5cLss6ZJMajmzUmNfQIRz%2BtotAJaPi4ztswH79BOXgurE2Oj1Mc73MhiOwhz442DRoZCgKLasBRG%2FuCANtuBrms%2B0DlvLFs1ssJXsY%3D\"}]}\r\ncf-ray: 9f004b55ba83b4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-22T05:09:04.594815Z","times_seen":14046463,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":33,"dns":21,"connect":1,"send":0,"wait":5,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:00.727Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft TLS G2 RSA CA OCSP 10","organization":"Microsoft Corporation"},"validity":{"start":"Wed, 08 Apr 2026 23:01:16 GMT","end":"Mon, 05 Oct 2026 23:01:16 GMT"},"fingerprint":{"sha1":"9A:65:0B:AE:1E:F0:90:D4:5C:35:23:B3:14:58:6B:A0:A8:50:0C:27","sha256":"09:ED:1C:90:23:D8:B0:E2:0A:24:A5:16:AD:4C:D7:DB:57:09:A7:9C:C4:09:46:CB:DB:88:5A:04:DF:B7:C4:04"}}},"request":{"raw":"GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 23:51:00 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1435\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 01 Nov 2024 20:25:02 GMT\r\netag: \"0x8DCFAB34403395C\"\r\nx-ms-request-id: 179a163f-701e-0000-3a85-cbfcfb000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260421T235100Z-1779f7fb55cwd6qchC1SVGvs300000001710000000000pzf\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]}],"data":{"size":3651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee5c8d9fb6248c938fd0dc19370e90bd","sha1":"d01a22720918b781338b5bbf9202b241a5f99ee4","sha256":"04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a","sha512":"c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58","ssdeep":"","tlshash":"6371117b132887dae9d4a78c2e997b8d377095c4b1b24290874328a5bc086f7f038d60","first_seen":"2023-04-06T08:44:24Z","last_seen":"2026-04-22T05:02:07.519491Z","times_seen":124306,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":252,"dns":235,"connect":7,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:00.725Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /@splinetool/viewer@0.9.414/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 23:51:01 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9f004b559e9356c0-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\nexpires: Wed, 21 Apr 2027 23:51:01 GMT\r\nlast-modified: Tue, 21 Apr 2026 23:51:01 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:RUdpSLusmJa6MUgpDCfWikuLb0VIEJn1usm2L6t1rPg=:\r\nfly-request-id: 01KKJKGSMVKDHEQBRAZ04TYA5G-arn\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":1695626,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c06deae1e67461e65c7e7dc07f296fec","sha1":"3052613f5387e3c73f852c67e7c5d35e907bf8a0","sha256":"64a21852082e98f3adc3b136c328b46ae9d5c54edbb435ee9d3dbfa448ff9f7f","sha512":"3ab2cb7694010c3cf25810974349a8847ed989541de386307ce347b8fbb329a0c61ce99797abb0e4dade8df069b8070b9e963b5a857d303560a169ea6a50575f","ssdeep":"24576:f7EXabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4t:gabrhOqG4k9e6AhWTaHDt3MPsq9FjTxe","tlshash":"b5256ce473a57027875ba096147a0446f33db8e61c08442cbd2c98e77ba4859b2fbff5","first_seen":"2025-08-02T03:37:30.982446Z","last_seen":"2026-04-21T23:51:26.810935Z","times_seen":159,"resource_available":false,"data":null}},"time_used":1015,"timings":{"blocked":14,"dns":1,"connect":3,"send":0,"wait":981,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/index.html","date":"2026-04-21T23:51:00.769Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-e66b4b88b1d24aeeaf754f0ecee122c7.r2.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 23:51:00 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::md8nh-1775101186152-d45e2b42ab64\r\nlast-modified: Thu, 02 Apr 2026 03:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 1714274\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0Sp8CWtc31S31ltHbF3JaTaGPfv%2F7xtuyO19IdbDIU7iRBUCXdV5iqcWpF7H8P56PXi%2BVmv5ozsTSr%2FttHiz8QDpVuiak%2FxM7O8eFYq%2BoQCx1s120GoHw9hbXEoNEea4hcGjw0%3D\"}]}\r\ncf-ray: 9f004b55ca8cb4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-04-22T05:13:40.210486Z","times_seen":31009,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}