{"report_id":"4ae37b8a-a1c1-4e72-89cc-5132fdc039ff","version":6,"status":"done","tags":[],"date":"2026-04-21T02:05:35Z","url":{"schema":"https","addr":"therffi.pages.dev","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"therffi.pages.dev/","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"title":"Save, Grow, Spend. Do more with your crypto | ether.fi","dom":{"size":110682,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (51711)","md5":"670704f9fad573aec4dce80c0281e68e","sha1":"5bd948ae1456ee6263c984226916ccdad9cc7fb7","sha256":"3d829d2056064b85d19cf7ed7c27886e43e1810308b8c4c1819a0c180ba9af17","sha512":"7790f77b662ed7d8ac372fde95d13d393b866d587e111621c006d7af4f613582fa8a47208966d9326185cb251501650f878002c3dccaafce9a5a69ce9c6fe041","ssdeep":"1536:A2yJ/KNYH7B5N5bCdajnzZN0RDWlhRS0Ha6bfSfRI/5Rn7vBeO6MDtgKuDxxwr5y:AUYqL","tlshash":"b4b31a7063102e3e42578ac4ff74fb25a25fe189db1b888873ec426557cbcd6cd26a94","dom_hash":"domhash6ecec86078b77a9942bc0e513d6e1a1c","first_seen":"2026-04-21T02:06:09.768284Z","last_seen":"2026-04-21T02:06:09.768284Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"therffi.pages.dev","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.30","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-26T02:05:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-21T02:05:12Z","timestamp":1776737112,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":50432,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-04-21T02:05:12.174466+0000\",\"flow_id\":1714404300721102,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.10\",\"src_port\":50432,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"therffi.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":919,\"bytes_toclient\":3247,\"start\":\"2026-04-21T02:05:12.166862+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"crypto-court.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"therffi.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-04-21T02:05:39.292508Z","last_seen":"2026-04-21T02:05:39.292508Z","alert_count":0,"request_count":13,"received_data":7435706,"sent_data":5863,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.ether.fi","ip":{"addr":"64.239.123.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2017-06-08","domain_rank":1271018,"first_seen":"2025-06-05T08:07:30.286602Z","last_seen":"2026-02-12T11:22:48.154599Z","alert_count":0,"request_count":1,"received_data":6170,"sent_data":467,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"crypto-court.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2025-10-03","domain_rank":0,"first_seen":"2025-11-16T02:57:58.73188Z","last_seen":"2025-11-16T02:57:58.73188Z","alert_count":1,"request_count":1,"received_data":0,"sent_data":499,"comment":"","tags":null,"fingerprints":null},{"fqdn":"promo-expenditure-pad-trader.trycloudflare.com","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"2018-07-07","domain_rank":0,"first_seen":"2025-10-20T21:52:16.534496Z","last_seen":"2025-10-20T21:52:16.534496Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":529,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"therffi.pages.dev/","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f5b767c078c6813816231552aca1d562","sha1":"34f99579b527c24b3a5af82abb42079a0d3e1a51","sha256":"c17d50bae5a02a35e0ae5d0005c694495952f093629bb5193c668070161b0f7a","sha512":"7b4aed1d33c4891894a556505047a8f7afd72efc1c30c064b5a428fac50a5475e895f3937869de6d047128910d762069084c41d12fbacecffd43cd98e84b2e48","ssdeep":"","tlshash":"70c0125d7010696614ce687d4ccf088ebe368812a20809c999dcd4547bb1e6c42e484c","size":185,"data":"","first_seen":"2024-04-08T19:47:46Z","last_seen":"2026-08-04T03:59:23.641877Z","times_seen":721,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"297a907d4e5b4c2198915e66274d9c9a","sha1":"e0f98af49ab0f7a270e2d739436181f924449098","sha256":"0fdbc26d9d5bd7f6a4bc38acfb91fc663c57463d43a08447f1386b3354cd84de","sha512":"48487cbd59e60a259a5836fc0315243da500d617e94e06b3073f79bb834bd141c9e5cfb59c42a3c2086c920c21be5996e589d4658513cf31d95bfc5757a4a44e","ssdeep":"","tlshash":"1371bc3beb00173bdc8fb9fdced5b4c02e62497262496560691ce102b16cd7087bed88","size":3741,"data":"","first_seen":"2025-08-14T22:39:51.132287Z","last_seen":"2026-08-07T09:08:54.699482Z","times_seen":3238,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/ee82e28a5ce6dcd7.js","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c0afe4863058e52aae4a79a60b49ebb","sha1":"ad863a6ef1768f50a941aae17ef20b08b736cd69","sha256":"32881fd830c970e6cdc309850695989b77606d687816970f80cec9d9f69fa5bf","sha512":"e1121fcca63309801bc8a19545c696404413b69d3aa5292c10a30ceca8b40313cc8df690b29141a8382cca8f6d0ac7c9bf0fbb9cf0edaa825e506453e223cdd5","ssdeep":"49152:QuR+7/GbBoxZ+jZC9xOuMDGhK2zLFK/mRPRTnhxbPIvAqoB8AAo4/O28cH8nR+FT:rRU8AAC7yB8E0WUDuO12uuAFAV","tlshash":"8e56d070b3a1b475239751a4547b1101ae34a85ba00cc0fcfaec95f7afd96888a7bf35","size":5962226,"data":"","first_seen":"2026-04-21T02:06:09.800429Z","last_seen":"2026-04-21T02:06:09.800429Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"therffi.pages.dev/fallback_home.jpg","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:13.218Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /fallback_home.jpg HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:13 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 73491\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"7afd49c1bcfd438a1a975e985fd0abbf\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=76vbj143XyBs%2Bdv%2B4UaYWLjdP65f%2B1oLlCvSyaHN6XjHyD1D1y71S7claYERmUGIOGW7wm9z5V8yi%2F9nlKJr%2BqgLf1ytCsQ7PtWdBAVOUxo3i8ArENUv7TPjkhOAwxiTdOnDoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ef8d28d892f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73491,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"fcfefca710c801de3f59d07dd373c54a","sha1":"f935202cd8fbcfadb4b18878cf1099ce9abb7fef","sha256":"d66a9b71f46aec503c62a192f281199be5649eea7f006bd2e80c737468aa08bf","sha512":"ded356b098d872dcd758539ea226ebb0df3c61626789e6e87b8188bd930fe4dd5cdf5625288e69f2aa27b604fe4af0d9521c38cbacbcbdd383999f1b3c39b0dd","ssdeep":"1536:oTI49FgYJtvZY/0Z36GgIkg6zFINUA55JppoaUPYqp455swHp8tvl:o0yj/6G22/9kJ2AwJ8pl","tlshash":"6f7302837e8cc08fdc914930911adb27992639e91e798fd6ad828441f7b253cdf32697","first_seen":"2025-06-25T12:52:18.945945Z","last_seen":"2026-06-24T19:04:39.970173Z","times_seen":11,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/config/style.css","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:14.092Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /config/style.css HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVpK1aCQrJEbvchYZpQGkpchnFCGglUmfi%2FjaO%2BG%2Fdhpm33UabCl%2F%2BJBdL0XCzMG7kOGqbTKXtayBU%2BPMoLM5HYyYLJKB94Y3Qy3WzAwJriB8lneqSqqzntbVt2RO8ksyI4EFg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef8d2931ed91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/dark-gradient.77ebda23.webp","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:14.207Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /dark-gradient.77ebda23.webp HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:14 GMT\r\ncontent-type: image/webp\r\ncontent-length: 10602\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"00c89db1ca198d5a79e39dc8e8945fb6\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OSgr7Z7%2FlUbtAZ31qXdYqyxqdJHw%2FPXCgIEPmcb3BOE6PBfW97kY3%2BK%2FLmRu5eK%2FGMITo%2Bd1AZJYxRQu42ultZB1TeC%2BonG3gp2Pp9uAlwsXWsJpyTIlhTHn4hQpMO03vWvqVw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ef8d293cf771525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10602,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2960x1544, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"ac7d86ed7345fb1519fcc150e37d8cfc","sha1":"f37e0adbea861c071f3713528b64192284c524e9","sha256":"28169f67d409ef928af27985b2e89dd97d458cfc139db3faba12141adbd7b990","sha512":"54c4476b122f7c2f6e5dc7358871bb209ec39dba2af6cd4822197ab5156275deb4c9de2a76f22334937c357b1148bb592b38601fadbe63576a9a9920f363fee8","ssdeep":"192:IDWXzUt1P08fLBOaZ5j96PjWbw3KfxqB04bBnr264nTvVTvf/oD7i3Pypt:MP08fLBhj96PSbwEYfr2nVTn/oDVP","tlshash":"51223c1f2fe18c384c8969a5b29b9940f6cea1b479e05bf0cbb15921692b4f5cf4d50c","first_seen":"2025-06-25T12:52:18.93337Z","last_seen":"2026-05-29T14:18:44.091608Z","times_seen":10,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/home_1.webm","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:14.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /home_1.webm HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://therffi.pages.dev/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:14 GMT\r\ncontent-type: video/webm\r\ncontent-length: 1046477\r\naccess-control-allow-origin: *\r\netag: \"bf8f8f61eddcb4dc3a750d92abe288a4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=viSw6ugd0STcBdF%2FBiPFb0W8OW%2BzJcLZjeC1ZhM8G8bpuV%2BE22I2%2FectMgDCferjYLgGIjZCu0elmTGPvC8kLhHFQws7TDJoIVN9Yp45RsyRqhTLoZ2U3PAeE%2B9%2BYQgBEjxgyQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ef8d295b9281525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1046477,"size_decoded":0,"mime_type":"video/webm","magic":"WebM","md5":"e1d35219a5ceb15be571a1831476abe0","sha1":"8461047ff740d71e7b6947b01f4ff7b2c2d30009","sha256":"25bab62e605c7ea72263e15eacdcd507094abeb72311fbeb5bd0bc59c4e0073a","sha512":"90545aa94b66c81269baa3ab40a8bd2b0eedba003d7c347f648c3e8e0156bc2ed1bfda063a21e19cf412ac8b2b7a13bfaf21bf9aafb32a1b95e04427f81a8223","ssdeep":"24576:NrU6+lw+lLQTfl1HV4wHXlUS7bptQRUTWodaWBwoA/:NXt7aw3lXtQMaWBwt/","tlshash":"ab2512da98e3a46fc8464f35d23b8091d5131d43a5f80bd526b6aa89bd34b4cca1fc33","first_seen":"2025-06-25T12:52:18.929992Z","last_seen":"2026-05-29T14:18:44.131036Z","times_seen":10,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.ether.fi/images/favicon/apple-touch-icon-167x167.png","fqdn":"www.ether.fi","domain":"ether.fi","tld":"fi"},"ip":{"addr":"64.239.123.65","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:14.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.ether.fi","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 04:20:11 GMT","end":"Fri, 12 Jun 2026 04:20:10 GMT"},"fingerprint":{"sha1":"0E:08:E7:4A:B0:46:23:E1:51:34:2C:FB:FA:EB:DD:9E:EE:18:8A:E7","sha256":"CB:07:E6:48:4E:10:26:F8:01:AB:CF:11:5F:13:1D:53:26:9D:5C:B2:21:16:F9:E7:9A:31:6F:E9:AF:27:15:D0"}}},"request":{"raw":"GET /images/favicon/apple-touch-icon-167x167.png HTTP/1.1\r\nHost: www.ether.fi\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 8998\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-touch-icon-167x167.png\"\r\ncontent-type: image/png\r\ndate: Tue, 21 Apr 2026 02:05:14 GMT\r\netag: \"88d40833b8c9b7ffc42be921db8ece84\"\r\nlast-modified: Mon, 20 Apr 2026 23:35:16 GMT\r\nserver: Vercel\r\nset-cookie: sync_id=0000ocwbqo; Path=/; Expires=Wed, 21 Apr 2027 02:05:14 GMT; Max-Age=31536000; Secure; SameSite=lax\nsync_sid=1776737114737; Path=/; Expires=Tue, 21 Apr 2026 02:35:14 GMT; Max-Age=1800; Secure; SameSite=lax\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /images/favicon/apple-touch-icon-167x167.png\r\nx-sync-device-id: 0000ocwbqo\r\nx-sync-session-id: 1776737114737\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::bgqc4-1776737114701-f08eb5a5ae63\r\ncontent-length: 5289\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":5289,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 167 x 167, 8-bit/color RGBA, non-interlaced","md5":"88d40833b8c9b7ffc42be921db8ece84","sha1":"5bcd6f4b5336d26e01348e4ce88c1567ecb62b3a","sha256":"5e5dfada129fe12b77c1b33b10e7d05c965439461ec4a0d1290548c4c420a4c4","sha512":"7ac006dfda60f031b904ba44ebca53f1684438ec323216f97a01c5acb5a33c6496782e782b969e90047450b742169eacfba51be8c545adf170332afaf28dea07","ssdeep":"96:fSbnwTCiE68irHBaeL7OmAxo0WOtrVUGFgEfRQMzeLFiDnjQE//9dY8aD:fSDw2iEp6vfOfxotOFVf5fRQZe//l68E","tlshash":"18b19e8d0271e538e3610c541a5c29879f68afbe400f8fbfb1607e0a5faa87943740b3","first_seen":"2025-06-25T12:52:18.940106Z","last_seen":"2026-07-17T04:43:25.665108Z","times_seen":17,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":44,"connect":1,"send":0,"wait":51,"receive":1,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/favicon-dark-16x16.png","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:14.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /favicon-dark-16x16.png HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 576\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e8616884cf3370c13fae5301249b4e9d\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XX39UmZe%2BI9lHFXt4r7sqUgKWuUlIX549QqtGiLISZPK1iLYL7EiWpqXLTvkLFOZXL4keplptAnFxQ227EgoiSEirHBEeAB8keeGucMVR3uEAteTkiEnR8NYiVSbvvScF4jGjw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9ef8d2966a051525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":576,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"c3b83ee9462e3aff024b3a44aa7b24a0","sha1":"01a56dd40a5829d154d141914771a9802d1baba4","sha256":"d20e832e761c72ca2120794b176d42daa5a8af0b210f291c93f3bb66f0704aa4","sha512":"7ed3eb7615532d409b57895b41abf5789eb04f05e1037e4ca15550e09ca9cf625b748eecbce174dae6fff607edca992cbce9250f461dcee75c84301db11c4088","ssdeep":"","tlshash":"a4f0e1d27f0d283bcd058bb93582e5a0b49f34b6617a440d5ca5c62c4a56b64d589263","first_seen":"2025-06-25T12:52:18.949188Z","last_seen":"2026-07-17T04:43:25.666553Z","times_seen":16,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"crypto-court.com/api/config?t=69816ada671d10c3e914e7030c566046dd7c70436213249f","fqdn":"crypto-court.com","domain":"crypto-court.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:14.121Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/config?t=69816ada671d10c3e914e7030c566046dd7c70436213249f HTTP/1.1\r\nHost: crypto-court.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nOrigin: https://therffi.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-21","alert":"Sinkholed","trigger":"crypto-court.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/config/style.css","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:14.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /config/style.css HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:14 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0I1DrgSaWxopWcWBrkiSRLZ7azsXyE628TG7QqzgA3sHLkFhW5omMEpQT1cRRcAF9oLwOaMJ8yI6rzKnWO2zWKxgF6p9g7cIhRkO8p5BP5%2BqqMu2%2FFMXUBDiCL5INa0dAjbMbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef8d2934f091525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-21T02:05:12.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EFkfV8sTwsbvePNcxjGYsEk6M%2FWOc87a2Oe5CovyGUeDyGt5e%2Fv5GAEZVzyRPcCh3RjVgmintAr6MN8lH6IPYsad8Ev%2B55RDbpREtJ%2Fa1pncbtXLKgQxw7kl%2FVJKGFRWEfdHjw%3D%3D\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef8d28b28a2b517-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":125325,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (51507), with CRLF line terminators","md5":"dfef7d8a92d7bcbc4788198b434c11b0","sha1":"2148e86a753630d4077c1753514a798fdb0b2760","sha256":"dd8000035d6f54f12f6ef0f54a0f00aa0df261710652cab022002e0fe1b32a58","sha512":"2a16f5ca8f7574c5f683224d0ef3d81c248e50580ccc456abf796313640edf8c74601aa05d900e4f3484eea7530696a17aa6bda4064c678d9226254ef0093837","ssdeep":"1536:4+ZJ/bNdHnB3nPS7qVam1d9gtHIzLrGQfw4CMdTYIV3KzJthI5vZSKhuGa8kNalR:4yF4STnbWM","tlshash":"2ac3097063202ebf425b4ec4ff74f7a9b25be289db1745c832ed429547cac818d27a94","first_seen":"2026-04-21T02:06:09.781338Z","last_seen":"2026-04-21T02:06:09.781338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1595,"timings":{"blocked":683,"dns":28,"connect":1,"send":0,"wait":226,"receive":0,"ssl":653},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/ee82e28a5ce6dcd7.js","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:13.210Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /ee82e28a5ce6dcd7.js HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FwmRvT05EBHsAKzBYINdU8XowxfhUT%2FdqUS7D5AApK9zTBQtIWddWAOwJ%2FQL3xSK8UXZcqzIDhkXNXW%2Bq8HZUjyqx3Jl0tMnYixUF265TjrTgdkTIEHRdL5%2BSf5IXR1%2FzcGucg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"95affbe7668500c6e2c3940f428738fc\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef8d28d89231525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5962226,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (59667)","md5":"c3d523bf2c4b5359a94ff2d4452c5afd","sha1":"d40276c6ac85a517b45f73f3f5aab0971bdc48eb","sha256":"efd32c1b454780da35666d5f7827b1c5561588ad84f5fe9e810047e4da23ec9b","sha512":"04a763b533b7a64f470c53814553c70e368f3be7f0c924cbb6ba2def28394f059462acfbe569260815eb5df50dfda19030e0ab4e1149c2d9e71e6c2fea169ea8","ssdeep":"24576:QunR77wfCO7JABsGb2spxJe5SQZ+c6e2p13sYT:QuR+7/GbBoxZ+jZ/","tlshash":"9125c0717365b5a243aa1de010362409ee34e86fb41c80a8f9dc85fb75fa5849e7ef34","first_seen":"2026-04-21T02:06:09.782815Z","last_seen":"2026-04-21T02:06:09.782815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/12badcefaaf85e58.css","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:13.213Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /12badcefaaf85e58.css HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZAHACf7u57dn0D8TLRI2ubhMseJjzCbw%2F%2BeRoBqUtVPHhStjPo%2FWoeFb9XreYzae1Q%2FdIG%2BALnff2z2i2GdaeMzSZhUNoH2qGbpnKKsmfE09sRgRWhoBneU1OgivwZrSTSU7cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e65da11adf2eb2d76c8c68fd3add8cde\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef8d28d89261525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7236,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (7236), with no line terminators","md5":"5febfb963c52be6bed9c9f4b1883a025","sha1":"5932df210c98abafc48f3a610713988b3e9dcf9e","sha256":"c6d6c54c1f337a1fd8397617a1cd8cf99b77bc69ab605b887eede0349df71c99","sha512":"852c15cfbc3bf6346d1f0de842356960d4013c13682a7064d22c60b862db63309a0895951f56c8247a676b84571e3aa8720a6d414f81d35d4187bb693456ae81","ssdeep":"192:9NoxYVDCYV2nYVktYVCQeYeYZYjXTksedOJ91:zt558AHaik","tlshash":"59e1db344428900fd579bdc235cd7f232d7d50145ee48822eb6849a98fdbcae72e0fa8","first_seen":"2026-04-21T02:06:09.78385Z","last_seen":"2026-04-21T02:06:09.78385Z","times_seen":1,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"promo-expenditure-pad-trader.trycloudflare.com/api/config?t=69816ada671d10c3e914e7030c566046dd7c70436213249f","fqdn":"promo-expenditure-pad-trader.trycloudflare.com","domain":"promo-expenditure-pad-trader.trycloudflare.com","tld":"trycloudflare.com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:13.926Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /api/config?t=69816ada671d10c3e914e7030c566046dd7c70436213249f HTTP/1.1\r\nHost: promo-expenditure-pad-trader.trycloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nOrigin: https://therffi.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/config/style.css","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:13.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /config/style.css HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qotOFGB%2BhZRjimCkne0U36KbroEPfK3vE4ZX%2FODys4eU7uxo%2FUWwv2kaQPOQGP43VbbX0tRrzF7MW8J554bkcXrprFygaO0NJM9rZlgUEMo8NuIskqkgKNgdPmJidqWrpuqspQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef8d28d89251525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T11:24:25.423291Z","times_seen":17778095,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/5fb9df807764422c.css","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:13.214Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /5fb9df807764422c.css HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H0bxly4sLljku7gmxSkNwkBFsSwysCzt7iVYFM9OmFQjVEKn7hArrwPxFTt%2Bp3l0wsCUPABRqfRQxS67hstR%2FUNWPtNxsh99p40RYORgBuNAdHlyMMKgmmRFaYp8OQf3C32XeQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"b843a25ce1724fc5024a784ab757ad49\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef8d28d89291525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195283,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"1c6a69faeb5de359467a8aa5f9a1a981","sha1":"ae0f5dc07c1556328e8a6acdd7736187be73a8c9","sha256":"64f2d423556832ba2bb00c130eccf2525aab15296fef9fc9474540e634f6c009","sha512":"1f6c9e563e212814006c1b17edfb8dcefda8908702a76efb6d2978c6816d61f8816ddd968473791276acce8f0605e3490427fe2f21a3685117fa41c28b6a5a90","ssdeep":"3072:ZlVZNQLulhqPQrkKAy+RhR04J3T4h0CShatywzL1ICWaG7fIJ3XJtxZrUVsDymIQ:ZlVZNQLulhqPQrkKAy+RhR04J3T4h0Cz","tlshash":"57149490f235d43f6c236079a3acd44c9254b685af16b7dcbc6260c21bc77fb5826b1a","first_seen":"2026-04-21T02:06:09.786059Z","last_seen":"2026-04-21T02:06:09.786059Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/3cd83cfe34ca397f.css","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:13.216Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /3cd83cfe34ca397f.css HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x2iuPVtLJBPzerPnGILamG42biXLx0d96joV%2B0n3XkpuvUGq0wVoeANsBjLbIUJ2SrS%2FGul9Q5LujW4aDVD5Ryb%2FAUmZWNRtT6IN%2FpGAmSA1ZGlTncZfIlTKlozFJ%2FLK6f8%2FEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"da4ac470da0175363f1bc13569221f9c\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef8d28d892a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4216,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (4216), with no line terminators","md5":"f0e02ee28c62ab299517de16af737193","sha1":"19a3d8a96ba9676dd2885b91e24fa53779be88d0","sha256":"3e226741b0bda77ff49b22beae8dc92240adc578fa36dadd9397d65ae8596296","sha512":"551526805b08a380d92100f4272727cfa269742725d21c9a344057842d3a26a8a66553cba1225973ed12b118e8bd299fa5c3745f9313cf54475157fe0224b2db","ssdeep":"48:sv9URP2352gmpCd8g0+71zH1f5LpSFSme+jeBhIOXIWI4mEuL/onA9/85Hg75+mF:OJToiR5dKSme+jeHoaapU3Eyw06","tlshash":"d9915630a3241c2791378f285784e7bd63e884618bd3896ad795ae3cdbfd8f5114e782","first_seen":"2026-04-21T02:06:09.787811Z","last_seen":"2026-04-21T02:06:09.787811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"therffi.pages.dev/f117db1aaa02256a.css","fqdn":"therffi.pages.dev","domain":"therffi.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://therffi.pages.dev/","date":"2026-04-21T02:05:13.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"therffi.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 00:56:25 GMT","end":"Mon, 20 Jul 2026 01:54:09 GMT"},"fingerprint":{"sha1":"57:E6:18:80:35:67:08:00:7E:3E:77:0E:A7:EC:FD:CD:72:18:46:52","sha256":"64:28:E0:F4:A4:51:D7:2C:82:5B:BD:C6:9D:AC:BE:01:F1:7C:B4:90:5A:80:03:77:E4:9B:FD:EA:BF:39:25:4D"}}},"request":{"raw":"GET /f117db1aaa02256a.css HTTP/1.1\r\nHost: therffi.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://therffi.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 21 Apr 2026 02:05:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YkPsXX%2B07v0AbiakGq0CRa5QMblW4aNbc2SWY17KSfaZlExMJQNVF%2BbUQwlFhISZJtKj2ZmNx3i2%2Ff%2FsedHmkyjZkOZz0dB5O86lGpMt6Nz2OJeWdTPK1P6UHcEC0dij5imt%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"71ec22ab9c7943d6ecf34aad239c4ed5\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9ef8d28d892d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (407), with no line terminators","md5":"ada72883164d848ed60e435de47322d9","sha1":"0979f4de11ce7689b7885294d7466927ee124419","sha256":"d2651ae6aaaf72836d80f3ef99d0fced7869233a7c0c89fab3fa72e154660c25","sha512":"278380c7a81bb5a0662ee9917fd171ab262291f7f0ca84aadda30f38838df56109450cd646469dc8b7ee163523d777daa0e9fb3c2dae47689352a623f1d76de4","ssdeep":"","tlshash":"4ce0ab22f1a0382a492b0a3c10ad953ca8bdc800c307554a18c29b6d8b0b0a2437b97c","first_seen":"2025-06-25T12:52:18.947185Z","last_seen":"2026-07-17T04:43:25.671771Z","times_seen":16,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}