{"report_id":"4a1d20f2-be80-40d0-b6c5-4e3bb7516d53","version":0,"status":"done","tags":[],"date":"2026-08-13T19:03:14Z","url":{"schema":"http","addr":"growtok.us.cc/register","fqdn":"growtok.us.cc","domain":"growtok.us.cc","tld":"us.cc"},"ip":{"addr":"95.217.200.147","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"growtok.us.cc/register","fqdn":"growtok.us.cc","domain":"growtok.us.cc","tld":"us.cc"},"title":"Goose Farm | Register","dom":{"size":5945,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c2ca4551dd41afec993832774a5821dd","sha1":"46c931ff4ce7bc45e22bce9763747c32e939d4b4","sha256":"b7c4813e561cb588c39030cb9b794fa760b87de94b69ae94053a5edbffe2f420","sha512":"c716ff9fd05df5e1d5327e819edbaeff2aee1e04bd688c9016eddfca99c91885c3dafe2bda3879136164950ed5d86c6ef7d4937c92bbbbe863145b39a23999c8","ssdeep":"96:nsv9mrLiycXaybVk0xHKBZ9E3f5f+klV8zJD/cPAyqQZdcscz:sv9m3iycXaybVbFKT9E3BWayD/cIyPZw","tlshash":"07c174a166b30c22b407c96c3be2cb1a355d9403c50bc5363b9c97894f9b6a5c732f9c","dom_hash":"domhasha1e92ee56126c95dda7b0fe0ec9a4fce","first_seen":"2026-08-13T19:03:15.934806Z","last_seen":"2026-08-13T19:03:15.934806Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"growtok.us.cc/register","fqdn":"growtok.us.cc","domain":"growtok.us.cc","tld":"us.cc"},"ip":{"addr":"95.217.200.147","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-17T19:03:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"growtok.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-13","alert":"Phishing Block","trigger":"growtok.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-09T22:23:43.881052Z","alert_count":0,"request_count":1,"received_data":4064,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"growtok.us.cc","ip":{"addr":"95.217.200.147","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"2006-04-07","domain_rank":0,"first_seen":"2026-08-13T00:27:24.854781Z","last_seen":"2026-08-13T00:27:24.854781Z","alert_count":6,"request_count":3,"received_data":34336,"sent_data":2994,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-09T22:20:44.514027Z","alert_count":0,"request_count":4,"received_data":114260,"sent_data":2216,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-08-09T22:45:53.985835Z","alert_count":0,"request_count":2,"received_data":254142,"sent_data":1135,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"growtok.us.cc/register","fqdn":"growtok.us.cc","domain":"growtok.us.cc","tld":"us.cc"},"ip":{"addr":"95.217.200.147","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":true,"md5":"071c9b7316a9bf24797601830fd3f453","sha1":"a3c9b060f38768a4af0ddf1a1ff905f20aeaa390","sha256":"92190012a03a43fbe8da623f0a7f36aaa260c750a7f1f3ec23c259b1d4f51915","sha512":"456903e112ea59d6cef8d3e8b57dcde6d04409417a3369dc2c719b051b4916c3485a2f53137e3c347a50746bb6cba4f37dd5afa2a8c133d3091d7324ae1d46f4","ssdeep":"","tlshash":"b8e026a3300188268ab7928ad66849a63110804a150346723228c71d1fa7cb206519fb","size":303,"data":"","first_seen":"2026-08-13T00:27:27.852593Z","last_seen":"2026-08-13T19:03:15.957797Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Urbanist:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growtok.us.cc/register","date":"2026-08-13T19:02:47.977Z","timestamp":1786647767977,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:43 GMT","end":"Mon, 12 Oct 2026 18:07:42 GMT"},"fingerprint":{"sha1":"3C:2E:4A:58:D0:DB:8D:00:50:7D:0E:E6:87:DE:CA:95:B3:BA:1B:89","sha256":"C2:4F:05:DF:4B:24:E4:A9:E4:2A:30:66:F4:78:E7:75:AC:AE:71:43:E7:DA:3E:24:4B:A3:AA:9A:39:4E:E2:E1"}}},"request":{"raw":"GET /css2?family=Urbanist:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growtok.us.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 13 Aug 2026 19:02:48 GMT\r\ndate: Thu, 13 Aug 2026 19:02:48 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3380,"size_decoded":1111,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ad646a97d3097b287608b61b10322158","sha1":"3af7b3902651eab496cd602f52571bfe45002baf","sha256":"c314a277b7df29f6712bb36fb2736aaf6ddfd4a8eeca1c700684a5014ba39ed3","sha512":"6f85d3727ac0e58cecf9badcec4ab91cf9f02cb45483dd578372981d420d89fc8dd94668bfcfd72ccab4e61abf71cdca7708f3a1226efac566c892bc253064dc","ssdeep":"","tlshash":"b961ed90096b9440dbc30dc222d97e33ee0f6250a444dd34bbfe28c8acaac26539171c","first_seen":"2025-10-01T12:21:47.334825Z","last_seen":"2026-08-13T19:03:15.940939Z","times_seen":132,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":32,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growtok.us.cc/agro/Dancing-Goose-Farm-Logo_pink_flower_web.png","fqdn":"growtok.us.cc","domain":"growtok.us.cc","tld":"us.cc"},"ip":{"addr":"95.217.200.147","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growtok.us.cc/register","date":"2026-08-13T19:02:47.985Z","timestamp":1786647767985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.growtok.us.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 06:42:59 GMT","end":"Thu, 22 Oct 2026 06:42:58 GMT"},"fingerprint":{"sha1":"A8:45:72:09:4A:CB:18:D0:B3:F7:F3:D2:CF:1A:19:01:94:27:77:92","sha256":"8A:29:1E:31:44:AD:88:27:29:AA:29:1D:A7:2D:8D:74:69:F4:7C:CD:97:45:FE:3E:24:36:38:B4:FC:C2:E1:1E"}}},"request":{"raw":"GET /agro/Dancing-Goose-Farm-Logo_pink_flower_web.png HTTP/1.1\r\nHost: growtok.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growtok.us.cc/register\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNuMjFGVTE5dHVpd050T2w0bWNsU3c9PSIsInZhbHVlIjoiVmV6blEzN1F2RzF5cVlWVXMyajZKb0xKNDJra0hIZDFTMWIyMHRNc0YrWFB6S2ViZkJ2b1diR3JFZTRzbTRINVZLNnRRTzBRY2kwQ1BYTTlXUzluYzY2OUpOL2d0dXZ0ZllhbUNNeFhaSlpIRCthcDJsV3ZNTDdud3BnSTFxaSsiLCJtYWMiOiIyNDQwNDY5YWFhMTdkNmNjOTNiMzk5ODc5NmNlMDBiMDExNGJiODA3ZmIzYTBlZDE4MGMxYmQ2MjUyZjAwZGRmIiwidGFnIjoiIn0%3D; nimbus_session=eyJpdiI6ImpLUlZYQnlHL1RBbXoyaGthVW9vWVE9PSIsInZhbHVlIjoiQ0hzVTNBMk53RWFGd3RuT0psaDNBbDdtdnZDMXhmOU9tbWdtbWpvMTF0ZTZyYjRUNTBxRklaV2wrbndRUjJ0eSt6Q3hOdy9obndKUFl4Y1U1SW1XbXl3bEJ0dzlMS3Q4VDNtRnEwRzF1M2hob091KzQ3cGxQQzdoaC9vai9qUnUiLCJtYWMiOiJlMGUyNTVmYjk4MjllOThmNTAxMjJlMTc1Y2VkNGNmMWZmODljOWRjNjRhOWE4NWRmYjZjMDI0YTQ5YmNmZjdlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 20 Aug 2026 19:02:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 25 Dec 2025 07:56:05 GMT\r\naccept-ranges: bytes\r\ncontent-length: 24729\r\ndate: Thu, 13 Aug 2026 19:02:47 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":24729,"size_decoded":25173,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit colormap, non-interlaced","md5":"6b75328c3e74ea84b112136a3721defa","sha1":"ed3b1147fe185e3b485c60c11eded86f5331cc3a","sha256":"ec9e7b05a45c6636b7c9f0fd688b141e260516aff0cb149e5177ee5eb4ae180e","sha512":"a4e22e4812223438647f2ea6c67a8cc43c2b20e923e3ee953d0f73b9d22b1a4701fa451c5a1bd3767d9f23067953e33d3b21fd8aafb2ac76203606192fe804c7","ssdeep":"384:YibQZWe1pwT0h+no1jHa4pRsv3vqh6r62vGENcahiHyGL9M/6e2IHTFFtffKxZJB:Yi0ZWe1COd736p3iasT9MCMhKxLpsMca","tlshash":"60b2e198b6e11e13a89c8e2859b780c2f81b0e246d9e7c11405cf8d3dff869cd1369a7","first_seen":"2026-08-13T00:27:27.849735Z","last_seen":"2026-08-13T19:03:15.945043Z","times_seen":3,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"growtok.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-13","alert":"Phishing Block","trigger":"growtok.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growtok.us.cc/register","date":"2026-08-13T19:02:48.118Z","timestamp":1786647768118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growtok.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27752\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Aug 2026 23:37:40 GMT\r\nexpires: Wed, 11 Aug 2027 23:37:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 156308\r\nlast-modified: Tue, 16 Sep 2025 03:41:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27752,"size_decoded":28565,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27752, version 1.0","md5":"aa575f0b65515787deb8a9e80b9abb1a","sha1":"96bc39c48e3b97118eca8b57b319292aebbfb451","sha256":"7981ef90c246352c7c217081b8d9337b9c95e9d17ae126bf56b0d3753d1e5ffb","sha512":"876dda2c000bb8ae53e95076c721de8dc65146b8a626e11c1c8f093d507c2cccea52b97a08aba90b6e76a076e1eee055244a821dbca4b86c5159cdfdb7f92bbf","ssdeep":"768:88zCdKmnhwvjlhxwVhY6aOQfyz6qIzK+F5T/Lj8KB+yEh:mdKwGlsYeQTv+eVE","tlshash":"20c2f2d72ad6f5818948b9fed8e65f0f7344e80b3e78274390055ed3aa048b87ad01e7","first_seen":"2025-05-30T12:51:46.048531Z","last_seen":"2026-08-13T21:06:40.0808Z","times_seen":4603,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":29,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growtok.us.cc/register","date":"2026-08-13T19:02:48.122Z","timestamp":1786647768122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growtok.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:02:48 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\ncontent-length: 150124\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pbcF2ZCa%2Fc1VORNnRo%2BEpfzbGjqcSV2fYKjM%2BS%2FpmY%2B6h2XYWjTPaIwUVSrc4loLsWjzbcrTPZa2nQcdncRpRfY%2FKbo%2B30OxAiIXyXHSTxM3EtFVpbVZfWU5KxwCPJGkmZNS9USb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=5,i=?0\r\nserver: cloudflare\r\ncf-ray: a2a9f9e6c9bd712a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":150124,"size_decoded":151118,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 150124, version 772.256","md5":"c64278386c2bbb5e293e11b94ca2f6d1","sha1":"6b99aa650bd12a36caa14e0127435d8f4cd3ba73","sha256":"7152a6933ee3d690ec2af3d09da9d701723d16aa3410a6d80f28ff8866f3b880","sha512":"0ccdc1515510d902c0b4a48b863c48bad86e1f766b1f9c890a64e28d91ee7c6d488241c531fc094d15b29c211da71e092587a987e24ee8e67ef8ea99c284e821","ssdeep":"3072:7sCbk7w0ZXdkN6iMjif3Lr7x7wAtf+D7gDk1feXDLnurWHqrNIuv5n0:7sCbkFZXdC7MaLr9w2mIY1feXXurWyNW","tlshash":"28e3123cf2c6d486735f5aeadb79636894fd0a2e74ecc67d26b982112048f828174d1d","first_seen":"2023-04-09T20:30:06Z","last_seen":"2026-08-13T21:36:44.791749Z","times_seen":45223,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":-1,"dns":0,"connect":8,"send":0,"wait":59,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growtok.us.cc/register","date":"2026-08-13T19:02:48.124Z","timestamp":1786647768124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growtok.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27752\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Aug 2026 23:37:40 GMT\r\nexpires: Wed, 11 Aug 2027 23:37:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 156308\r\nlast-modified: Tue, 16 Sep 2025 03:41:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27752,"size_decoded":28565,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27752, version 1.0","md5":"aa575f0b65515787deb8a9e80b9abb1a","sha1":"96bc39c48e3b97118eca8b57b319292aebbfb451","sha256":"7981ef90c246352c7c217081b8d9337b9c95e9d17ae126bf56b0d3753d1e5ffb","sha512":"876dda2c000bb8ae53e95076c721de8dc65146b8a626e11c1c8f093d507c2cccea52b97a08aba90b6e76a076e1eee055244a821dbca4b86c5159cdfdb7f92bbf","ssdeep":"768:88zCdKmnhwvjlhxwVhY6aOQfyz6qIzK+F5T/Lj8KB+yEh:mdKwGlsYeQTv+eVE","tlshash":"20c2f2d72ad6f5818948b9fed8e65f0f7344e80b3e78274390055ed3aa048b87ad01e7","first_seen":"2025-05-30T12:51:46.048531Z","last_seen":"2026-08-13T21:06:40.0808Z","times_seen":4603,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":35,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"growtok.us.cc/favicon.ico","fqdn":"growtok.us.cc","domain":"growtok.us.cc","tld":"us.cc"},"ip":{"addr":"95.217.200.147","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://growtok.us.cc/register","date":"2026-08-13T19:02:48.258Z","timestamp":1786647768258,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.growtok.us.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 06:42:59 GMT","end":"Thu, 22 Oct 2026 06:42:58 GMT"},"fingerprint":{"sha1":"A8:45:72:09:4A:CB:18:D0:B3:F7:F3:D2:CF:1A:19:01:94:27:77:92","sha256":"8A:29:1E:31:44:AD:88:27:29:AA:29:1D:A7:2D:8D:74:69:F4:7C:CD:97:45:FE:3E:24:36:38:B4:FC:C2:E1:1E"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: growtok.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growtok.us.cc/register\r\nCookie: XSRF-TOKEN=eyJpdiI6IjNuMjFGVTE5dHVpd050T2w0bWNsU3c9PSIsInZhbHVlIjoiVmV6blEzN1F2RzF5cVlWVXMyajZKb0xKNDJra0hIZDFTMWIyMHRNc0YrWFB6S2ViZkJ2b1diR3JFZTRzbTRINVZLNnRRTzBRY2kwQ1BYTTlXUzluYzY2OUpOL2d0dXZ0ZllhbUNNeFhaSlpIRCthcDJsV3ZNTDdud3BnSTFxaSsiLCJtYWMiOiIyNDQwNDY5YWFhMTdkNmNjOTNiMzk5ODc5NmNlMDBiMDExNGJiODA3ZmIzYTBlZDE4MGMxYmQ2MjUyZjAwZGRmIiwidGFnIjoiIn0%3D; nimbus_session=eyJpdiI6ImpLUlZYQnlHL1RBbXoyaGthVW9vWVE9PSIsInZhbHVlIjoiQ0hzVTNBMk53RWFGd3RuT0psaDNBbDdtdnZDMXhmOU9tbWdtbWpvMTF0ZTZyYjRUNTBxRklaV2wrbndRUjJ0eSt6Q3hOdy9obndKUFl4Y1U1SW1XbXl3bEJ0dzlMS3Q4VDNtRnEwRzF1M2hob091KzQ3cGxQQzdoaC9vai9qUnUiLCJtYWMiOiJlMGUyNTVmYjk4MjllOThmNTAxMjJlMTc1Y2VkNGNmMWZmODljOWRjNjRhOWE4NWRmYjZjMDI0YTQ5YmNmZjdlIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Thu, 13 Aug 2026 19:02:48 GMT\r\nserver: LiteSpeed\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1459,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-08-13T21:35:40.063224Z","times_seen":149426,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-13","alert":"Phishing Block","trigger":"growtok.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"growtok.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"growtok.us.cc/register","fqdn":"growtok.us.cc","domain":"growtok.us.cc","tld":"us.cc"},"ip":{"addr":"95.217.200.147","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-13T19:02:46.953Z","timestamp":1786647766953,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.growtok.us.cc","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 24 Jul 2026 06:42:59 GMT","end":"Thu, 22 Oct 2026 06:42:58 GMT"},"fingerprint":{"sha1":"A8:45:72:09:4A:CB:18:D0:B3:F7:F3:D2:CF:1A:19:01:94:27:77:92","sha256":"8A:29:1E:31:44:AD:88:27:29:AA:29:1D:A7:2D:8D:74:69:F4:7C:CD:97:45:FE:3E:24:36:38:B4:FC:C2:E1:1E"}}},"request":{"raw":"GET /register HTTP/1.1\r\nHost: growtok.us.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: no-cache, private\r\naccess-control-allow-methods: *, GET,POST,PUT,PATCH,DELETE,OPTIONS\r\naccess-control-allow-headers: *, Accept,Content-Type,Authorizations\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IjNuMjFGVTE5dHVpd050T2w0bWNsU3c9PSIsInZhbHVlIjoiVmV6blEzN1F2RzF5cVlWVXMyajZKb0xKNDJra0hIZDFTMWIyMHRNc0YrWFB6S2ViZkJ2b1diR3JFZTRzbTRINVZLNnRRTzBRY2kwQ1BYTTlXUzluYzY2OUpOL2d0dXZ0ZllhbUNNeFhaSlpIRCthcDJsV3ZNTDdud3BnSTFxaSsiLCJtYWMiOiIyNDQwNDY5YWFhMTdkNmNjOTNiMzk5ODc5NmNlMDBiMDExNGJiODA3ZmIzYTBlZDE4MGMxYmQ2MjUyZjAwZGRmIiwidGFnIjoiIn0%3D; expires=Thu, 13-Aug-2026 21:02:47 GMT; Max-Age=7200; path=/; samesite=lax; secure\nnimbus_session=eyJpdiI6ImpLUlZYQnlHL1RBbXoyaGthVW9vWVE9PSIsInZhbHVlIjoiQ0hzVTNBMk53RWFGd3RuT0psaDNBbDdtdnZDMXhmOU9tbWdtbWpvMTF0ZTZyYjRUNTBxRklaV2wrbndRUjJ0eSt6Q3hOdy9obndKUFl4Y1U1SW1XbXl3bEJ0dzlMS3Q4VDNtRnEwRzF1M2hob091KzQ3cGxQQzdoaC9vai9qUnUiLCJtYWMiOiJlMGUyNTVmYjk4MjllOThmNTAxMjJlMTc1Y2VkNGNmMWZmODljOWRjNjRhOWE4NWRmYjZjMDI0YTQ5YmNmZjdlIiwidGFnIjoiIn0%3D; expires=Thu, 13-Aug-2026 21:02:47 GMT; Max-Age=7200; path=/; httponly; samesite=lax; secure\r\ncontent-length: 1934\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 13 Aug 2026 19:02:47 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6224,"size_decoded":3414,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ad32d3d3c10fa2d90dccdb25f3fd6388","sha1":"31371997e8ac2da036fdcc051b871e628a29e7a7","sha256":"3357c040e211a407c5ed0921643c74334fcb21ffa45cf207eeeee0c969e91c8c","sha512":"1c639b2dd9e5253648d74615fd374bd326ea0ef89cd0892b3dde65903ec76ed031d8ceb9d244d7c711516231257d5533f1289d6aa6ab169654182266f7aa8b3c","ssdeep":"192:Hs9aqzYVjL+wfBET8d9E4sSq/JICnZccbcS:M9RvZbQS","tlshash":"d5d151a4a5451813a233cea877b1475afa559013cb07027a3bdc93871ffa565c723f9c","first_seen":"2026-08-13T19:03:15.953491Z","last_seen":"2026-08-13T19:03:15.953491Z","times_seen":1,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":0,"dns":535,"connect":15,"send":0,"wait":68,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-08-13","alert":"Phishing Block","trigger":"growtok.us.cc","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-13","alert":"Sinkholed","trigger":"growtok.us.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://growtok.us.cc/register","date":"2026-08-13T19:02:47.974Z","timestamp":1786647767974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 10 Jul 2026 07:07:58 GMT","end":"Thu, 08 Oct 2026 08:07:45 GMT"},"fingerprint":{"sha1":"DF:66:97:F5:13:A2:C0:81:D3:5B:60:C4:B0:7F:CD:78:F5:91:14:D5","sha256":"3C:F2:95:73:83:BA:4D:D9:CC:85:8F:BC:7D:2C:22:CF:F3:49:9A:3A:E4:1D:FC:AE:CB:07:3D:66:89:74:0E:C5"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://growtok.us.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 13 Aug 2026 19:02:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 18752\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 27 Mar 2023 17:46:59 GMT\r\nvary: Accept-Encoding\r\nx-cdnjs-cache: HIT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5BNTw6VxNzop1Qhs%2FPJnoAw8xbkUvsdU2LSs68RD9OaNps33bBniTlU%2FmkC%2BlCM1Z1x6w0NftYF0RnLGkLrhKljI9QHJvDArf8NGrkd%2Bg0C1OX%2BqepWDeBk3E1oKF1BZGwk%2B3O%2Fc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a2a9f9e5ec53120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102025,"size_decoded":19751,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52276)","md5":"ded1c367363e8b20bdc6a19b8350a737","sha1":"8c06d82739d14b094ff6d9036021a252bd1d985d","sha256":"1edb1725a9ea8ca4dcf2f5508cee183218aa1685e47c1b23056717f754f58ebf","sha512":"89e71d2e66ac925ec2564aa45cd43f647fd72e5bd664e2728fb632eed71e9e6a43d72a404a8ce9993fc4d223ed985201e3a66676d01cf5e341bc7d07fd9a6207","ssdeep":"1536:OwMCMPMCMjMCM4MCMwMCM3sVMX709gbPMfjSFOTyPGuZprfZCl:S709gMGFiyPGuZpfZCl","tlshash":"2ea3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2023-04-06T15:05:25Z","last_seen":"2026-08-13T21:36:44.764467Z","times_seen":59774,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":67,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growtok.us.cc/register","date":"2026-08-13T19:02:48.098Z","timestamp":1786647768098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growtok.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27752\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Aug 2026 23:37:40 GMT\r\nexpires: Wed, 11 Aug 2027 23:37:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 156308\r\nlast-modified: Tue, 16 Sep 2025 03:41:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27752,"size_decoded":28565,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27752, version 1.0","md5":"aa575f0b65515787deb8a9e80b9abb1a","sha1":"96bc39c48e3b97118eca8b57b319292aebbfb451","sha256":"7981ef90c246352c7c217081b8d9337b9c95e9d17ae126bf56b0d3753d1e5ffb","sha512":"876dda2c000bb8ae53e95076c721de8dc65146b8a626e11c1c8f093d507c2cccea52b97a08aba90b6e76a076e1eee055244a821dbca4b86c5159cdfdb7f92bbf","ssdeep":"768:88zCdKmnhwvjlhxwVhY6aOQfyz6qIzK+F5T/Lj8KB+yEh:mdKwGlsYeQTv+eVE","tlshash":"20c2f2d72ad6f5818948b9fed8e65f0f7344e80b3e78274390055ed3aa048b87ad01e7","first_seen":"2025-05-30T12:51:46.048531Z","last_seen":"2026-08-13T21:06:40.0808Z","times_seen":4603,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":2,"connect":30,"send":0,"wait":18,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://growtok.us.cc/register","date":"2026-08-13T19:02:48.120Z","timestamp":1786647768120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 20 Jul 2026 18:07:39 GMT","end":"Mon, 12 Oct 2026 18:07:38 GMT"},"fingerprint":{"sha1":"12:E8:CE:14:FC:4E:1E:0D:A3:9B:2E:5D:D0:88:79:79:71:C9:F8:6A","sha256":"58:07:B9:A1:6C:54:97:F9:9D:6A:66:E2:49:57:FB:86:86:8D:12:97:8F:4A:C9:74:A1:9D:69:4E:1F:A6:CC:9D"}}},"request":{"raw":"GET /s/urbanist/v18/L0x-DF02iFML4hGCyMqlbS0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://growtok.us.cc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 27752\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 11 Aug 2026 23:37:40 GMT\r\nexpires: Wed, 11 Aug 2027 23:37:40 GMT\r\ncache-control: public, max-age=31536000\r\nage: 156308\r\nlast-modified: Tue, 16 Sep 2025 03:41:15 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":27752,"size_decoded":28565,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 27752, version 1.0","md5":"aa575f0b65515787deb8a9e80b9abb1a","sha1":"96bc39c48e3b97118eca8b57b319292aebbfb451","sha256":"7981ef90c246352c7c217081b8d9337b9c95e9d17ae126bf56b0d3753d1e5ffb","sha512":"876dda2c000bb8ae53e95076c721de8dc65146b8a626e11c1c8f093d507c2cccea52b97a08aba90b6e76a076e1eee055244a821dbca4b86c5159cdfdb7f92bbf","ssdeep":"768:88zCdKmnhwvjlhxwVhY6aOQfyz6qIzK+F5T/Lj8KB+yEh:mdKwGlsYeQTv+eVE","tlshash":"20c2f2d72ad6f5818948b9fed8e65f0f7344e80b3e78274390055ed3aa048b87ad01e7","first_seen":"2025-05-30T12:51:46.048531Z","last_seen":"2026-08-13T21:06:40.0808Z","times_seen":4603,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":22,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}