{"report_id":"4881e51b-3470-49ab-86b1-94c24063c9ba","version":6,"status":"done","tags":[],"date":"2025-08-14T22:34:55Z","url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"title":"Resaco"},"submit":{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.64.1","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-18T22:34:55Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.resacoua.com","ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-17","domain_rank":0,"first_seen":"2025-08-14T22:34:56.062891Z","last_seen":"2025-08-14T22:34:56.062891Z","alert_count":18,"request_count":18,"received_data":2765145,"sent_data":8154,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b7487b7235ded6f4e00ca791a6507f1b","sha1":"5b6afa1d76fd8448a645ed2de81e0c1e2921f065","sha256":"d1faa4bc27156bd7954ac2d5a24f2e35fcff5f567fd8eb20a0da9cbe02546e64","sha512":"c0a981d6fb39ca97f616f833835aec6b946b0b2e2b2700906263f9c234f00bc6ebfe21049911ecc48cd9e71929f61dccaaa4d5ca7d3743f1c980626bce818529","ssdeep":"","tlshash":"39c08cc8b0c32d002602646050af34e49024402770481b02dc98ec492e220b08233ee8","size":142,"data":"","first_seen":"2024-04-10T19:50:48Z","last_seen":"2025-11-20T09:19:58.204511Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/index-b5388292.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c12fa030739565bbcc0f55ca5b019273","sha1":"dc417768556e7e77eebbd7c2cd333b95b02be51b","sha256":"72b6701516c8a34aab0e56a04ba9aa99ac334f69b1279bf5fc95fd2f2ea984fe","sha512":"3030699d64929ed9b8ea060a53a9649d7c35ac71d3477df28aae1674edc7d601943e7e57c48158fdae73b7720d380feb34e5d8b3d9c464bc58e008979cf5c1d1","ssdeep":"","tlshash":"a241a41cf43a8eb9e176539854420000615d1eefc160ee2af6bd1e382f7af809b7a309","size":2238,"data":"","first_seen":"2025-08-14T22:34:58.972134Z","last_seen":"2025-08-14T22:34:58.972134Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/bg-323109f7.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"51ab69b11921e148ad407a0e1e3f6cbd","sha1":"d821b9d132aaee4368b3f779857750c715cac3d7","sha256":"c7d2aeaeacc312c9b7a325878fe5e0b5caefc1389eca3e9d6c147ebe1aa6acc0","sha512":"c6a2a4609df16ce1a95f5faeed18471f0f05e0fb5818c21bc9ba918fcdd47d41767e432a8b3534b0b9730012d52bd3693c12bcad25e70c67b08a7900ca50643c","ssdeep":"","tlshash":"3290040304501cf1371c7dc4d733c5541450015571154375c4145f07f5d74c0554fc31","size":50,"data":"","first_seen":"2025-07-15T00:10:27.165967Z","last_seen":"2025-08-14T22:34:58.961477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b4a632459a011f9cf34cc3f6a449d24e","sha1":"23c6bb20ee82a11a54bfd4764e76b9fd86cf57fd","sha256":"ebb303d9df1321004f0694d1b1872542665a684d1f7cc90df2a8e3a0f286cbf0","sha512":"121db1d01b5f5ca50ae592bd141d36a7e2f650220c081e8a7c6d49f8d692b2ff12e36cd6bfcd1be3691d436eaef2fcefd1d5f36dde0a91089407d466bbf6d743","ssdeep":"","tlshash":"c6c08cc5a0d22d502606681016af25e490244036748c5b028c98d85c3e220b48333ea8","size":140,"data":"","first_seen":"2023-06-08T15:13:23Z","last_seen":"2026-08-05T12:56:31.847948Z","times_seen":1021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"43a144a646cd1c3aa47c6e97b8997f16","sha1":"751520d68e01030d76aaa27829bee42de57b33ae","sha256":"7400aff6408f23b72deadda0905ff4dc8eb4af368f7e8026063918149826a7d6","sha512":"85eff0527e8a86cde19b0e67070c8f71528670484865bafb4b88ee54f83b48f575275ed10cf343f0c84d4c0a425f6632b5b1bdfdfbfd75c6702ee856d28f512f","ssdeep":"","tlshash":"14c08cc8a0c22d101a02681414af24e49028442774481b068cd4e8882e230b08233ea8","size":141,"data":"","first_seen":"2023-04-13T00:16:19Z","last_seen":"2026-08-06T04:38:20.220845Z","times_seen":4475,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0c2495205eedd5b75dfc529910936b02","sha1":"2cebf94fcad1d8eaa401e0cc6d95a2201e22b597","sha256":"61f0f44651788343199ecc2aca3a73e27b020e462cefe2cabe12338a5a615bb9","sha512":"6ff7a3c97a0d8c982f8fbfb626aa81ffa1e4abd4249ddeed0d9379ebe1ad099ad071f6aca0eeb2a0a680851775b112544cac93632f64a8b4719d9872e0b7e1b7","ssdeep":"","tlshash":"4ec08cc4b0c62d002602645051af24e49068802a70481b02acd4dc882f220b08237edc","size":146,"data":"","first_seen":"2024-04-10T19:50:48Z","last_seen":"2025-10-19T14:19:39.001226Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2788c57cfcb06b77d521e69811ce24ce","sha1":"05323ae72d274d69d8bc7007af390a6c8bbb15a2","sha256":"c1ee75593c2ebcdf65a4bb49073568f235c89cd263362c36804bb3e6a5a3e664","sha512":"ba71b7443ac9f926cf776831e8ac884ad5ba22921c406e0fcf50c829289f029687a9e908a68fb771b98ddaacf3fb29f0cd4d7884eeeb593bdf6ad5ac1093dbe9","ssdeep":"","tlshash":"c4c08cc8b0c62d006602a55151af38f4a028842770881b028ce4ec483e230f08237f98","size":146,"data":"","first_seen":"2024-04-10T19:50:49Z","last_seen":"2025-10-19T14:19:39.010344Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"287a9120c4e538d53f08a9461e32c69b","sha1":"38265c6318f79de165c3494ac6b9a9cbf227f2af","sha256":"b48f642e24274d932d7719487562be9632f1596740a2fb46c58d9836d0b0256b","sha512":"b1f5f644a541cf1fc560c662d6e4df66bcb84f627df991d0fc0c051f314761baa806c0a9307137e091a9ecc2bcd4f386efbb3bb2d4269c36254b97a584b4b1f2","ssdeep":"","tlshash":"53c08cc8a0c22d002602a65060af39e4b028842b70885b128ce4ec883e630f58233e98","size":147,"data":"","first_seen":"2023-06-18T17:51:32Z","last_seen":"2026-07-18T13:45:29.838321Z","times_seen":103,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7746993e8adb9277ba5afa2584910974","sha1":"8e7e6d562fd56f594b40b6657156d483d7426e40","sha256":"833dc15f120cad89d5c0680edae217dbad02010e42af351959607df4170074ee","sha512":"10ee66e22fa45386057f1385e179955ad4fd4d53363c0aebe68aa9ba0547bf409a286e53ab6e678e5d0c3485d6cabcdd359f359c5258160b50a0a5a5496d6e6d","ssdeep":"","tlshash":"39c08cc5a0c22e101646641010bf28e49024402674481b028c98d8482e220b08233e9c","size":140,"data":"","first_seen":"2023-04-13T07:32:13Z","last_seen":"2026-08-06T02:37:05.646133Z","times_seen":4429,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/langConfig.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec486d13eda244041992c32979c503c0","sha1":"003b90269401961a831c1c0fda84dbec289e299a","sha256":"886cc0ef7173f3e81c13959c2af3f9c749bc1d2a6edbb63c424f33ad14ef6245","sha512":"51ac7edb7275d86f064c570074f217b7748fe6e244a4fd1c051bcd6e2a0e39d514ee8c9bece3685443e1f3f4a8ad08c23ea682d16a4f822b6220a734152e7606","ssdeep":"","tlshash":"3711fdc5f8608104986233640e932911dfbd03dbcaf974bdf37f1c812b0c80d68a9e18","size":1078,"data":"","first_seen":"2025-07-15T00:10:27.161179Z","last_seen":"2025-08-21T23:15:33.709835Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/index-8667521e.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4732e825ce37a710356973375f79f8dc","sha1":"86791ca0ecaeba5e7592763372f772b7456ee30e","sha256":"830ce6ff011d5e27574523831046e81de8adcf6b65475f334368c0b209fd7393","sha512":"fb1094ca88e0483517577d32b05dfc66dc5ee0d039953f147a15ac1c380b8b50863431cf77118938c9a1c2d6a91ae53a935927f8997cb061b32377fa135a5658","ssdeep":"49152:WfqUTEFKMfj8+WHoxzv7/VjI0Aye7AAKfx3dGztNnVAbzDGgWlgQDmu88UIcvLz:6IjRAPM","tlshash":"a9956bd87195b03583f764e5503f0205b23e5a59b408c1a8f1addee92db9d08a27bfbc","size":2048225,"data":"","first_seen":"2025-08-14T22:34:58.986911Z","last_seen":"2025-08-14T22:34:58.986911Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"www.resacoua.com/assets/logo-9feb0a2c.png","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:37.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/logo-9feb0a2c.png HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/assets/index-457fb363.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c6-1423\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f4ZXyrO1AnSvRNUQli48k5GHQLSpuUeSGDWKgh%2Bk6VL7yV1jgan6LpK5u%2BXenqylujXHTqJdGZ3snXgxGdIUvQi5mM7SkTnP4lj9scIV\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3ebae584a56c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5155,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 372 x 80, 8-bit/color RGBA, non-interlaced","md5":"c7d960a418020feee948e9f2fb5a8485","sha1":"86fff4ec75750b08e4d6c7aa45d4aa8b988c8c2b","sha256":"9feb0a2c99fd753fef441b1540de018fba2d2bfd59615ffabc5bad4641b1a6dc","sha512":"31a238c3f67a293e062b99831ce745012b2e80fa358dcd910b54b87cff80a1561c0960e652cfed63b50e3529f826622103b717c49c9c522ceab93a8c1b8e8018","ssdeep":"96:fl/wKlV49N8A33wCq7ssKQEuU0mkdSKo5J1n+3i4MlfJe849dwqKxHg1:dI+VeBHwCmBEuNfdSKo5v+3i4Mlgp9oi","tlshash":"34b16d4c5e07a04e168995b13fc3979aeda2ce87238062f3ad2244991beb41b01932e1","first_seen":"2025-08-14T22:34:58.952641Z","last_seen":"2025-08-14T22:34:58.952641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":820,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/api/realtime","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:37.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"POST /api/realtime HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.resacoua.com/\r\nContent-Type: application/json\r\nContent-Length: 82\r\nOrigin: https://www.resacoua.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:38 GMT\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=srQXwXSvRUp21vEe%2BU8aahaWeZr6cuspp46p%2BDd7MahQiftrTAKHX1zRUxGV296U4RjyoNMZdMe9sf82%2BsZBj5%2BwL5m1q8bPHafJqwnk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3ebb3786b56c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T17:49:27.506193Z","times_seen":17746910,"resource_available":true,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/index-8667521e.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:33.770Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/index-8667521e.js HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 Aug 2025 22:34:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c6-1f40e1\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WQPrLzEPQMdcN7h8CH2Rbd71g48dV3KPrkrUzsLnXGxNF7bMrn9H5EaxbgtmanTbmK8AN1Wix5rH3oJjjS%2F7ylW13UrVOOL0IaCm2m8%2F\"}]}\r\ncf-ray: 96f3eb9908fd5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2048225,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (23582)","md5":"348b01e95aef5e03fb2b2c67397cbb47","sha1":"b522fc24a59dc7780aeb0dd1601894908a5741a4","sha256":"9a145b67413f94327c60ebffe96250b2b4649dce0609dc7aad8918684eac3a0c","sha512":"1ba40f731485a5329481e7ac5e3d93c6547425f9ca1aebd6c79a4fe9b627b0817d61c8da57d5f2d516267b8e74d4cf8965e95af10c3190b43bb79ffee6d33702","ssdeep":"24576:WfqUTEFKMfj8+WH7kxzv7/VjI0Aye78/h6KfA5rf83aB8Gz+:WfqUTEFKMfj8+WHoxzv7/VjI0Aye7AAw","tlshash":"8d355cd47599b03283bb58d5906b0501b22d1b5cf40895e0f1fdcd6a3abac14a2bbfbd","first_seen":"2025-08-14T22:34:58.958533Z","last_seen":"2025-08-14T22:34:58.958533Z","times_seen":1,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":809,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/bg-323109f7.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:36.232Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/bg-323109f7.js HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.resacoua.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j%2BQap9JVTglyWvEHJU0%2F7t0VsY3KJ6pRmRhEMSTx70L1US4RgVigAd5pk2WaTKBI8x8i2MHmggH0H%2BU%2F7fKk7Bqvu5lWrokZYkpRV0ko\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncontent-encoding: br\r\netag: W/\"685d45c6-32\"\r\ncf-ray: 96f3eba87ffa56c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"51ab69b11921e148ad407a0e1e3f6cbd","sha1":"d821b9d132aaee4368b3f779857750c715cac3d7","sha256":"c7d2aeaeacc312c9b7a325878fe5e0b5caefc1389eca3e9d6c147ebe1aa6acc0","sha512":"c6a2a4609df16ce1a95f5faeed18471f0f05e0fb5818c21bc9ba918fcdd47d41767e432a8b3534b0b9730012d52bd3693c12bcad25e70c67b08a7900ca50643c","ssdeep":"","tlshash":"3290040304501cf1371c7dc4d733c5541450015571154375c4145f07f5d74c0554fc31","first_seen":"2025-07-15T00:10:27.165967Z","last_seen":"2025-08-14T22:34:58.961477Z","times_seen":2,"resource_available":true,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/logo_small.png","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:36.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /logo_small.png HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 888\r\nlast-modified: Thu, 26 Jun 2025 13:06:11 GMT\r\netag: \"685d45c3-378\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfIgb3dH8z%2FDlHFSvpooUQpZ2ckUmoLISAqToPfLeQt0yu9XgSNHFBaiX5lHQGaPHolRhxpd8WqoOsDHSkUqeVe4rcxBXvYFjqPDWVg1\"}]}\r\nvary: accept-encoding\r\ncf-ray: 96f3ebab082556c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":888,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 69 x 69, 8-bit/color RGBA, non-interlaced","md5":"73ea7aac028c630f58bf241a4464003d","sha1":"f329859a81a2fdc035263d6a81031a97510d7763","sha256":"f8e41c2162d2aff259877fecc4b9943eabafdb0a58ca0336919cc1b6ef25ea38","sha512":"d8ee5505851ce1aa30a01790a54335f3b1c39e81b03deda75f3bbcb8cda7ff41eb11027ea3cb0432d99a0483edee798d2dfa23a18c4e19ae5ac5ccce0035a1c7","ssdeep":"","tlshash":"651196e97764330db65e417bb60bb240c75113dd142660682e25381dcb2450d52a3c33","first_seen":"2025-08-14T22:34:58.963332Z","last_seen":"2025-08-14T22:34:58.963332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/bg-323109f7.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:37.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/bg-323109f7.js HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/assets/index-b5388292.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FmDWgzdUUW0s64PRMCZX4mA1%2FiMKLccs1xrd2tp7bula7ffOuN5NESpvA7%2BOydvMJfViE49Ya3HkA7ikqOJGpxfhe%2FdkHMoFabk46wP6\"}]}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\netag: W/\"685d45c6-32\"\r\ncf-ray: 96f3ebadc83f56c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":50,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"51ab69b11921e148ad407a0e1e3f6cbd","sha1":"d821b9d132aaee4368b3f779857750c715cac3d7","sha256":"c7d2aeaeacc312c9b7a325878fe5e0b5caefc1389eca3e9d6c147ebe1aa6acc0","sha512":"c6a2a4609df16ce1a95f5faeed18471f0f05e0fb5818c21bc9ba918fcdd47d41767e432a8b3534b0b9730012d52bd3693c12bcad25e70c67b08a7900ca50643c","ssdeep":"","tlshash":"3290040304501cf1371c7dc4d733c5541450015571154375c4145f07f5d74c0554fc31","first_seen":"2025-07-15T00:10:27.165967Z","last_seen":"2025-08-14T22:34:58.961477Z","times_seen":2,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/bg-b0f57466.png","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:37.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/bg-b0f57466.png HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c6-3018d\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xf7Ot1nn6Y%2BVc66EdEwdiLNfq5RsV4IcVHFNjRvMRttCTEsgcEwM3%2FSjSapJovlNe197cIYKx1A%2FCy39vvnROkZlLkR3heB3Z0BUJ40J\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3ebae184456c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197005,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 750 x 1624, 8-bit colormap, non-interlaced","md5":"b4bbb9d1105ca7b74903631c9514450c","sha1":"ea2aa6936f0c75230635d3f95a987e4a76c0d397","sha256":"b0f5746632baafccd366b3005a095e370468d3ff6b540140b2b641807376a7e6","sha512":"15b9bf789e6ec543a431890fa2f4e6afac662d0ac2f9f46c82be2870e4bf803cbfa01203eb752b8f7e59a92a4ec01a6f176577db9c40483635a99d9407f43453","ssdeep":"6144:WbuAmQH0KmbrPNGvsZyn4NLaiIPxGo8TsTPM:WNbUZTNGEZyn4NLwGkTU","tlshash":"1c1422e1329d0f0cd0a7aa57302568cc355365f9799d422368a78fe583e97ebca704ec","first_seen":"2025-07-15T00:10:27.152705Z","last_seen":"2025-08-14T22:34:58.966281Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1596,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":794,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/langConfig.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:33.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /langConfig.js HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 Aug 2025 22:34:34 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Jun 2025 13:06:11 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c3-436\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q%2F1twelJPg5vZz7fNsCqBSoeykZAY8t6gQzfUvNvWrHDJCJYv6yLvP5SXIGY6DnoxIhHU6zJn3rm%2Fw8KcVLQx1EKvFjvt93IHB4VzXYX\"}]}\r\ncf-ray: 96f3eb9908fb5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1078,"size_decoded":0,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text","md5":"ec486d13eda244041992c32979c503c0","sha1":"003b90269401961a831c1c0fda84dbec289e299a","sha256":"886cc0ef7173f3e81c13959c2af3f9c749bc1d2a6edbb63c424f33ad14ef6245","sha512":"51ac7edb7275d86f064c570074f217b7748fe6e244a4fd1c051bcd6e2a0e39d514ee8c9bece3685443e1f3f4a8ad08c23ea682d16a4f822b6220a734152e7606","ssdeep":"","tlshash":"3711fdc5f8608104986233640e932911dfbd03dbcaf974bdf37f1c812b0c80d68a9e18","first_seen":"2025-07-15T00:10:27.161179Z","last_seen":"2025-08-21T23:15:33.709835Z","times_seen":4,"resource_available":true,"data":null}},"time_used":802,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":802,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/index-341018e3.css","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:36.227Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/index-341018e3.css HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c6-2002\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mYIahuvS1v61uv5%2Bcf5Ay6EPX76GQNEh5PwtK7CpoufXnt0DLhR0gS7iPzQoSPDis3BDVzH6MUt4SHtW%2BbwZEY1X9LjiKcIGuKUJmwi\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3eba86ff856c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8194,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8193)","md5":"f62cd51de278a694cd9eacac0ac0a280","sha1":"681ebd451973233b86eca935121819dafa611d98","sha256":"341018e350a032b3e23970b3fdfd887054743c81a4da52dce81b0c921867da30","sha512":"ff12a77a6f1a36bda742f1d598d67495f8511c7b871a7da71832e90160ed114a2affc3180a3993d05704487e8db0b643eb6c1bf0f4d2f16116f22a4eafc6fd80","ssdeep":"96:DTdcCpwZq2ULPIQ4MbBtq/jp2APG9yweSoe5cMJMkJMXp/MRI:esF2/twes59TG","tlshash":"9bf16a8eaad8a575ef4d79e9b746d1e8b27ca730cd02c3a2f30055990bc3af61612135","first_seen":"2025-04-11T19:46:24.3642Z","last_seen":"2025-10-19T14:19:38.973708Z","times_seen":10,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":818,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/index-b5388292.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:36.230Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/index-b5388292.js HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.resacoua.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c6-8be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F0clF1OElryrvR5%2Bn5y1pfvhho7zXOycdGlBL1LxSqVNlsuAFZo8R%2BoQ6vB60v9Mjxq1mWuEzBfZcnjKYznqUX0rQ%2FwmSrUkM2DHaxpB\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3eba86ff956c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2238,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2213)","md5":"c12fa030739565bbcc0f55ca5b019273","sha1":"dc417768556e7e77eebbd7c2cd333b95b02be51b","sha256":"72b6701516c8a34aab0e56a04ba9aa99ac334f69b1279bf5fc95fd2f2ea984fe","sha512":"3030699d64929ed9b8ea060a53a9649d7c35ac71d3477df28aae1674edc7d601943e7e57c48158fdae73b7720d380feb34e5d8b3d9c464bc58e008979cf5c1d1","ssdeep":"","tlshash":"a241a41cf43a8eb9e176539854420000615d1eefc160ee2af6bd1e382f7af809b7a309","first_seen":"2025-08-14T22:34:58.972134Z","last_seen":"2025-08-14T22:34:58.972134Z","times_seen":1,"resource_available":true,"data":null}},"time_used":821,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":821,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/default-d63d5cc4.png","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:37.178Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/default-d63d5cc4.png HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c6-3e81\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eCmtjMNAYOIK%2FzfJGZO73Wi2FTaCTxhK3Nzs5W1s32NH6x8l%2FtmSV7cRbf3lKxzJWHLruWKz8QFAkb55donjYjixt87cUV%2F1fLXrnLKj\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3ebae584956c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16001,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1125 x 2436, 8-bit/color RGBA, non-interlaced","md5":"134825452882926b6738f012555f9b4f","sha1":"e919a5ff68222f00e0decb740872fa92fec3c656","sha256":"d63d5cc4f2bb9e10af06cdb2a89f070d48bbfb64b3370c2e513b2ffcf3ee4e2c","sha512":"0e527366ef91fbec044337e32ffd76bc98e611089f6a61cc626ffaee3a736962f336645c6af051143b920a58f748ebaab55ad4a2acd2fe9d563dffc62664e9cf","ssdeep":"12:6v/7zR/0fjl+yGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGGG8:sm7lGJz","tlshash":"ae72094342298cc5d266f1b8859b483a793b4073874ac38fc5107306bdb21aafef3b60","first_seen":"2024-04-10T19:50:49Z","last_seen":"2025-10-19T14:19:38.991791Z","times_seen":14,"resource_available":false,"data":null}},"time_used":804,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":804,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/api/realtime","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:38.295Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"POST /api/realtime HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.resacoua.com/\r\nContent-Type: application/json\r\nContent-Length: 90\r\nOrigin: https://www.resacoua.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:38 GMT\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LGhxkW9GiKcY%2BRnNg8UKwQRVLhLXxYmcyjkarfSFMzq6Lcq5pfJxH10sT2QpLepjQQ6nv5ykKALfmSwBwwsYzcW9dzvKd%2F8I9IBhbFCa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3ebb5587656c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-06T17:49:27.506193Z","times_seen":17746910,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/index-b5388292.js","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:37.069Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/index-b5388292.js HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/assets/index-8667521e.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c6-8be\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nage: 0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Tw26F7kNj6lnjEjrBj0MEZsOU6YI7AJzVrETj6vv4Q56VROpNYC8h1TEmgjTfSq4qInFvpAof%2Bbj9OM61xhVfuULU%2Fz0O2VLxEFeQLrf\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3ebadb83e56c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2238,"size_decoded":0,"mime_type":"application/javascript","magic":"Java source, Unicode text, UTF-8 text, with very long lines (2213)","md5":"c12fa030739565bbcc0f55ca5b019273","sha1":"dc417768556e7e77eebbd7c2cd333b95b02be51b","sha256":"72b6701516c8a34aab0e56a04ba9aa99ac334f69b1279bf5fc95fd2f2ea984fe","sha512":"3030699d64929ed9b8ea060a53a9649d7c35ac71d3477df28aae1674edc7d601943e7e57c48158fdae73b7720d380feb34e5d8b3d9c464bc58e008979cf5c1d1","ssdeep":"","tlshash":"a241a41cf43a8eb9e176539854420000615d1eefc160ee2af6bd1e382f7af809b7a309","first_seen":"2025-08-14T22:34:58.972134Z","last_seen":"2025-08-14T22:34:58.972134Z","times_seen":1,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/api/collections/customer_service/records?page=1\u0026perPage=200","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:37.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /api/collections/customer_service/records?page=1\u0026perPage=200 HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.resacoua.com/\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZDvqwibPE8d%2BF9TRQ3rXc3cths1VuT%2FzG3Ba8Ww%2BjM%2Fr6UhHjUgPKlatNpS%2Ff6f30gfMO%2FvC1kpOGLVNQ5blfMzYovcNI0EUnBzI4SSK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3ebae584756c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1427,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"5f5978997935e828abe90fa86c23476c","sha1":"c4d6367c803835520012618b3dd7e10874fc0756","sha256":"815e49c7ea48b760cebea1fd155db8bbb6c64fecb24a0df2645e1565757a835d","sha512":"d701d02f24b1fd0e3717e4138f5f6eb114c56b971856b2ed82a66aee2b1e05a60fe068062c4e23e1a470cf53f874fe2dfb5fe9aec252451a08f4e75bc570c336","ssdeep":"","tlshash":"58216c79ebf4be3442e9144222af31dad496a032d5f288a8b4798e04c4e5d74280a61f","first_seen":"2025-08-14T22:34:58.974687Z","last_seen":"2025-08-14T22:34:58.974687Z","times_seen":1,"resource_available":false,"data":null}},"time_used":820,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":820,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/#/login","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-14T22:34:32.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 Aug 2025 22:34:33 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x1RHfMpxryJ0Ufn42m9MIMqtwKC%2FJzbZYjf3FpWVGJXa1986JCVrFuSG2kFbZPvx7i%2FnTXoJLBggRDVI6otK9Fxk1cedlWi%2FzfePkESY\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 96f3eb92dc215684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10739,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (9944)","md5":"28427ee12e27ad064e6d99f1b138553f","sha1":"ad5ed1bfd4006cb59f1b54c0755c1a6ced8a00dc","sha256":"d28a05014b4b795ea5b6284ffd61a54b1dc8595c454308288390c8d28621a934","sha512":"44c3b45177da39d73b3315b56e681737f65b822c0d5c9ea875bd145551dc41068a90c8429c0491c51781310dfc871289b2247676c2e984724bac5d76340c4d3e","ssdeep":"96:euK0TA4U8YMflWFuxfGx7/GLTurkvkxmBqv5yrowIq5BfvGE7/6L2yCh5QyE23x2:w0fAmxImBWyr4q5B3nqyEwcUHnu","tlshash":"8b22efe993080d7cb9234b34f729b671902e12772b8caec8d87605b51b5025ee97fdc5","first_seen":"2025-08-14T22:34:58.976091Z","last_seen":"2025-08-14T22:34:58.976091Z","times_seen":1,"resource_available":false,"data":null}},"time_used":967,"timings":{"blocked":59,"dns":42,"connect":1,"send":0,"wait":845,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/index-313b6a08.css","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:33.772Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/index-313b6a08.css HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 14 Aug 2025 22:34:34 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c6-6f122\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qkp%2BwFK0H2%2BkmXvl41jceU%2BtQuXpUyjn5QImJOMN1w%2FMB8%2FxA4E0DM6CJCS%2BgIjuUUPSrFWzi3CWvxuC0Wd5rBcs%2BBy190ajYKw40qHb\"}]}\r\ncf-ray: 96f3eb9918fe5684-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":454946,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"bbc748e7617b4b84eeacf802fa86b409","sha1":"13f968b79391f7972e756c7bdf634d4c62a444eb","sha256":"313b6a0848235c6380968e6120a4f1dfa179da5962c1229d2f2554341ca430b7","sha512":"07939fdd0528a2eba717be25dc910e34d596492ab5a07ed171ed091c9bf074aa42f055cfaac1615f5c8ae93c25f938f1a1432635ac39f1b5a2df3294854cc64b","ssdeep":"6144:UebtitXT+XK4PurEpSe4WuwK04MuobXSNA/8fJ9SpVjdajum3NJ6wwQrVDDjpze5:crEGfJdq","tlshash":"1da4f950f713557f191be63dbec0ea986f14ee91cd128ba5f640a50889c7ae102a3d3f","first_seen":"2025-08-14T22:34:58.977521Z","last_seen":"2025-08-14T22:34:58.977521Z","times_seen":1,"resource_available":false,"data":null}},"time_used":828,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":828,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/assets/index-457fb363.css","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:36.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /assets/index-457fb363.css HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.resacoua.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 26 Jun 2025 13:06:14 GMT\r\nvary: Accept-Encoding\r\netag: W/\"685d45c6-1098\"\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-encoding: gzip\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LwH3%2BdXYx39twBoFqrdi7RxSVt48sy7gzPnX%2FBDh65xB8NoTCFuhvipLQcwwPTBbdkShCKce8yKoT12tX%2FhoVFaTIr%2FhpwGzZFPAaw1x\"}]}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3eba86ff756c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4248,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4247)","md5":"b3df7355ef883e7e735746924b1a0c1b","sha1":"e17e167e98e4d548d2452ad805c98669e4eea3e1","sha256":"457fb363678f51b06c4c604e7fed22de70bce5243f122493e498c10404830383","sha512":"b029dd5bf09a07ca1933d0def3e42da9e2467947b83f560f0b6a370da60f0bc60ea6baca58ff2df614bcc376e685f3f063aa37b1bd1d18e584b7a88ffcc2fa5b","ssdeep":"24:g4kopyYJ+XLQSKkMezw7ScSV2iO9wsWEWNnh9hcWP3IiWCZy+q3/9e+qiurKurXo:gwRuESK9e6S1nstunHh905/9cqOm2E","tlshash":"cc919c153d5d2820bc7f8a89b089669535ada22385830f2fe73338bacec70773771694","first_seen":"2025-08-14T22:34:58.979071Z","last_seen":"2025-08-14T22:34:58.979071Z","times_seen":1,"resource_available":false,"data":null}},"time_used":843,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":843,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.resacoua.com/api/config","fqdn":"www.resacoua.com","domain":"resacoua.com","tld":"com"},"ip":{"addr":"104.21.112.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.resacoua.com/#/login","date":"2025-08-14T22:34:37.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"resacoua.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Jun 2025 20:51:47 GMT","end":"Mon, 15 Sep 2025 21:50:37 GMT"},"fingerprint":{"sha1":"FD:B3:19:70:7D:0F:BE:76:E0:A0:F6:E7:24:43:86:EA:2E:94:72:B7","sha256":"4F:25:76:F9:C8:33:74:77:1B:62:C9:8F:CB:DE:33:ED:88:6B:13:18:8E:8E:93:68:8D:77:92:81:7E:31:62:2A"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: www.resacoua.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.resacoua.com/\r\nContent-Type: application/json\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 14 Aug 2025 22:34:37 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TGNlu1YeiCagQLC0UySvGGyC4Ok9x5EvG3tbOjGMzloWuZ0ZFKO6A89770gQF%2BTA6T3HRJVB9gHODI5mPLz5mjJ3BFXgb7iSh4la%2FSz2\"}]}\r\nvary: Origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 96f3ebae584856c9-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":518,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"6ad11812a359ad740d0c77e173e3b9e8","sha1":"6be964a69ed12755aa575f2ce2e52db4d1908e3c","sha256":"4c9849727667ec2f10b0488ad82e6018c294810dee1c8e128490c851d9a1d2a7","sha512":"206722b1a36753d9d1d8a13275159d611c3ea667ecf598705a14d76d167474fe6369767d1f41305b25acc21fb4e9d461a0e2425e1af7f10caffa729fe32dce41","ssdeep":"","tlshash":"aaf0508e53d209f70e5563d57bad75943da9234090c48e2da18bed1d17e7c44374412a","first_seen":"2025-07-15T00:10:27.175417Z","last_seen":"2025-08-14T22:34:58.980417Z","times_seen":2,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":814,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-08-14","alert":"Sinkholed","trigger":"www.resacoua.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}