{"report_id":"4c30fa3e-96db-4aee-822a-a26a5be89978","version":0,"status":"done","tags":["meta","facebook","phishing","social"],"date":"2026-09-13T12:51:44Z","url":{"schema":"http","addr":"ai-app.icu/","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"104.21.6.50","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ai-app.icu/","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"title":"Facebook","dom":{"size":129442,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1042)","md5":"89e1e463cadb2819c4cdabcb5dbc1c92","sha1":"7fabd395c29d5ef8628afde43056c4a33a076cd0","sha256":"540eed8e7811f7b9dc48e4c2bdc549b05bf9e6ee9b81534f04241fa9adec3b1d","sha512":"91509e8b159f9b0501a84b7269006224d8faa345a66858a8efb2087d59346c558bf602da09e786c88d21ed70b68c4b002a5677fae15e041346e1f0731890f47a","ssdeep":"3072:IQWInuYqXSIlzM090128tjSdmxmQ+exGKlNaZosGu:IQWInuYqXSIJmt+exGKlNaZo0","tlshash":"5ac3c62962f394a61c23a1b96bee660d3775f107c90acec47eac6211cfc69e4dc53358","dom_hash":"domhash90702e2ee3e50bb29d3aacba6637f8ae","first_seen":"2026-09-13T12:51:47.902725Z","last_seen":"2026-09-13T12:51:47.902725Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ai-app.icu/","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"104.21.6.50","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-18T12:51:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null},{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-09-07T00:38:34.167303Z","alert_count":0,"request_count":1,"received_data":88176,"sent_data":468,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-06T23:16:32.201366Z","alert_count":0,"request_count":4,"received_data":651513,"sent_data":1967,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ai-app.icu","ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-11","domain_rank":0,"first_seen":"2026-09-13T12:41:54.542268Z","last_seen":"2026-09-13T12:41:54.542268Z","alert_count":186,"request_count":31,"received_data":284592,"sent_data":16964,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper:2.11.8","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"PHP:8.1.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]}]},{"fqdn":"shamanleads.com","ip":{"addr":"104.21.61.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-10-02","domain_rank":0,"first_seen":"2026-09-13T12:41:54.53978Z","last_seen":"2026-09-13T12:41:54.53978Z","alert_count":0,"request_count":2,"received_data":1258,"sent_data":954,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-06T23:07:00.048542Z","alert_count":0,"request_count":7,"received_data":503147,"sent_data":3651,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"ai-app.icu/sdk/js/core-global.min.js?v=1.0.7","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"326f54f3ee5c6e392f7953acb7b59e43","sha1":"94a8ff6cb0d1c41a6f8485221149b1e0b445705e","sha256":"90edff5f9e600d90c1845fdb587561e922f80178153abe978be57607285441dd","sha512":"63378fd0b18cf59f0cad793912663cea4c369b8dd6384d332ba230210220061220f1d352da988e10f6a052f9669eb0362aca28e0f68de19a077f4e6cb32fb510","ssdeep":"768:iPuzCc9tVM1eJzfX1VnPANsH3XM3W1iQRkt9R+x3vVK9W:NCc9tD3JX+aC4","tlshash":"2df2a6bd76f0d29d220d7e3b7993daaad907084a15b04ae9d8c46c52d0e2711e7fcb31","size":36134,"data":"","first_seen":"2026-09-13T12:42:00.071875Z","last_seen":"2026-09-13T12:51:47.957143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/hls.js@latest/dist/hls.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"09f28e62f495ad11663c9023917bdf4a","sha1":"ed955ff75a1990389eb274b0468a014e85cac33d","sha256":"a12e7ee1cd64a69dcdb314157e45dafcba705bfb0b1440b7935cb265d374423e","sha512":"81255f89e3d0fc471f214c043486d534b42e8586b3c3c1e0cbca5ff210f724ba508788d4c55e12846fe8dfbba02979e40fce6e875fb07f0eee1a9c5227a521f5","ssdeep":"6144:+OgRL+fNzqRpprEzCrpXcVhcequqonhMDAZcrPqKx6gvcW4rRNkTFvgroytB5fZ0:+bRbAOrpMspqKxY9NfKT","tlshash":"8ad429ed36a5a01647c2b169903f5617633a7d0a284cc12cfa2be9c72d7994db03bf74","size":619692,"data":"","first_seen":"2026-09-12T13:46:51.101869Z","last_seen":"2026-09-13T12:51:47.945091Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7cd57848b35d1551c4fa920be9b96f0a","sha1":"8c87e01a123856fd07ad9ab3034fa29eb05d19da","sha256":"870018310b9f90e63c9ddd940c480017f7dae40b4434cdc13f3c85bd4e123361","sha512":"61ce3642b43320daa31c4b8033d329ae345f7c4f2abdc46ed33eb8d9025fa284c98ef8ebf79350e66ef0d5d08139c0aa79a471f2ec4c9013183c6c2a2b3cb120","ssdeep":"","tlshash":"2541175616ea0437c4a7307b5f8f54427726808b1446ed543f9c83c25f4467c9fb6ee0","size":2013,"data":"","first_seen":"2026-09-13T12:42:00.091372Z","last_seen":"2026-09-13T12:51:47.972507Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36a154fc7754a4760d23aca83834bf18","sha1":"43c0bb10f94afbff456b5f44ae5e804055be7032","sha256":"e7cc76a5d247f3da7e2260f57c311a551ba5f9bdf4ec6d7f0a0f34394227fa72","sha512":"9e70643f511d671f4e97ce2ab111fb557a2eacae4bfdefe47454f3855c9a2906b3ecdfdd433eae9bc34f1f9cb55df7a39e405203b57a27282b67d66b03661aac","ssdeep":"","tlshash":"20e0c61430c1903822b390a123f39109262f3607d44e8b22760bc5926e24c8202422ac","size":323,"data":"","first_seen":"2026-09-13T12:42:00.092467Z","last_seen":"2026-09-13T12:51:47.974264Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"67bad55018b6132a727ecc57f1c4b07d","sha1":"a7dedd8966fe49f9523f57e68fe6c1c233398044","sha256":"2a55c652d3d392263c6427bfa3811e4bb9a1eca2ae845c0efd6922849acad1eb","sha512":"fdb0fbe10ca22f7538a31b7541969d8198defe13c28c7be24fe454982508ebcff394f730737ec566829c7ccc95d01866fcb5f9e894ea4781127f74af2fecc746","ssdeep":"192:4CTiu2uiji8T74OqNUZODiudiujiuJG/d0:Ri8ijiHviIiwi0","tlshash":"29e1ee2dbaa3217096a7a07e539b53043b70921b1508de003d2fd181dff5c65666ebdf","size":6898,"data":"","first_seen":"2026-09-13T12:42:00.093702Z","last_seen":"2026-09-13T12:51:47.976491Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.10.4/locale/ru.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4ccff8fc4f7b686f9c2ed9b6fb00d7f4","sha1":"d210ef798f47b1f039ebcdca67ea64f168538bb7","sha256":"4cc4899d4f654fe1e4468ceed99f8541bf0c57e8a84c909a2e9442f6fe137989","sha512":"fcb295d9041b6616accc300a201ac27fbedcaea88a9eea87a7058c70eed3b9342bc98d921b0879b084a0aad01fc24ec126044dd45c4716fc45a18b60c1b1d4dc","ssdeep":"","tlshash":"5f410f9d9d62a8db8300c0d2c81d6d1acc77d57e3c1be02566617caef8a082cc97e729","size":2113,"data":"","first_seen":"2025-03-18T02:26:47.968475Z","last_seen":"2026-09-13T12:51:47.941847Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/js/toastr-config.min.js","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb4d233aad3937bf7b692e74d82afe3c","sha1":"f35fd86feff1a13f57cb195cedc103094ff35761","sha256":"dc42806deec748ff95621b8f2e56cb6447a29828e12e246a228d17c6b1d6259e","sha512":"0f96314fc774e00719808e4a1de8ea54a671928459475545f7a53b622b46b20987ed69b45ac3adb319f51a7faf3e59aba24bb71544571472c664dd6de9094364","ssdeep":"","tlshash":"cfe0c0c14319ab830bdbc03811545446837d34b7c51b1e01b89c0d4c9cd86048a77add","size":352,"data":"","first_seen":"2025-04-14T16:54:27.126866Z","last_seen":"2026-09-13T12:51:47.949538Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/js/helpers.min.js?v=1.0.1","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee37664d63d8b67153c39a24703053b0","sha1":"cd56db377df0aa3db32550bcf0f982f3a60adbc0","sha256":"249438c1949dae324b32bfe7e4faea533ae21f79d6de6c7474f736125e7f3776","sha512":"831dd677731adc921564a6028177501757cc5a1edf3510a5eb98216d339d60cbdbac2ac1c972501a006f0bfa7dd1800429124c8c40d654632b61bcb6c27d0005","ssdeep":"96:sFdm4qrLu7yCaXMuPNUnCMrCpGOvGpPSz2smucYUq:sFdm4qrL6yuuNUp6Hmnsmuca","tlshash":"34b1312e2f946a763f134e6b7b37b2d5d525611e2e120d8fd0243c053a29b46e8f6e30","size":5447,"data":"","first_seen":"2026-09-13T12:42:00.066253Z","last_seen":"2026-09-13T12:51:47.930872Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/alpinejs/3.13.3/cdn.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"ee793f046235eac36f0e73d9a01213d5","sha1":"e5a9641edd175da21bbe273be6433751b89ca186","sha256":"e415237bc7214a50b044f08500615b9f7a02d92c588e93988224a8f05b8af864","sha512":"e102b71596a51de031989699a00483ae8c77275ae704fad0de3032cf2b092115e459cd537bad5c1bb4ab6973bde8ff87bb5c66adfdbf9996523fef7a7db20608","ssdeep":"","tlshash":"7db092d458c65a00c3233991c03a953b723826a191be88a96a3de3a4993311ae15ccae","size":126,"data":"","first_seen":"2023-04-12T21:12:17Z","last_seen":"2026-09-13T15:01:46.924804Z","times_seen":10099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/alpinejs/3.13.3/cdn.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"bfdf9113ba9ce47cb82eb0cac71184f0","sha1":"e94fc3dfb2fc694c3d4b9190683e03d68bffdd70","sha256":"2644e8bfc7bb3050b3d021c1e80ed0214eb3f9babb4b20a344fd9234b3be255f","sha512":"9b3cb8b86a6e7019f4955a0ebaf8bdf16340a4f4d1639e9da045da4b16d06785da7a5e56da602ae213719c9df85a571b59d0a18b98eb66f84923e489b70642bc","ssdeep":"","tlshash":"a0f06d5877d21065619332728f3560152478e123aa7b8d9e3a2c5e608f6fa7cf18ccac","size":545,"data":"","first_seen":"2026-09-13T12:42:00.096664Z","last_seen":"2026-09-13T12:51:47.97895Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87533,"data":"","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-13T14:48:08.435453Z","times_seen":194391,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e8a9b2127b0197d558dbbbcb99d80973","sha1":"cb793f12ac3b8f7ac9cc69c9581bc2dc5d439ad5","sha256":"cd5ab58bf994afd3ff9a1000a9a22c9619b08dda258ddb055e2d34bd41bd97e6","sha512":"b9f515fafb98229f2033351ad6c1d6dcad412908cdb5410cf72e227025c1e203ce6cf4175729f86e99953436e6b96060709de794da02046fd93e7e462003eebc","ssdeep":"3072:BFEr84Awjj03k4PV03C4PcpiXoLyEZn+3+6DvzZtpSBm6sRTbgQLcn4CQrixrb/f:BFNZgWPZn+3+6D9AH","tlshash":"d734bfebd63c9736a5e97b35968eb7cd1a8cbc93c848527826c3b54f53788e0706c205","size":243661,"data":"","first_seen":"2023-03-07T14:42:50Z","last_seen":"2026-09-13T12:51:47.971486Z","times_seen":2040,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/js/pixels.min.js?v=1.0.0","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"44e7c5a5030ee229d7bdfa4e27ee7128","sha1":"3379912a846feecb95288b121f467744dfb1385c","sha256":"535394312ec94e014dd6ebdc4dc575f56611eda393e8f15e5ce28d158f9cec6e","sha512":"3dd31f78f168519e181d33b741a6e9f417c1deec130634269be97e50d789a3067149a969ee707a1e8a8591664e9de02e5e14842a78a5f09c2ad1186028eb8fc3","ssdeep":"","tlshash":"7921fe3d3b16687707ed549ea7b6e36177a2226a24c2d4053c8dcc6c3fe4f8150e1ea8","size":1378,"data":"","first_seen":"2026-09-13T12:42:00.073506Z","last_seen":"2026-09-13T12:51:47.935682Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/toastr.js/latest/toastr.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b36f28de584845317de40a7219c82b1c","sha1":"6de8657c8782561bc023478ab708179ed846db1a","sha256":"ddb96c25de07962ffbc0243e6e68177ce74aee9fd950cb4f5d8d3c8e6c524a09","sha512":"54477e9eadb90a447aefa3bea4b0670d6d3d47b5505fd31d8a28f4e768150a9e72547de31ad1fbd07a3f514bf89890ec11d4efa91085660d0d2868a88c69d40b","ssdeep":"96:LozfdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrI:Mzf4BtcvvRqIQcNa74ccrI","tlshash":"f7b19384b220bb8b5b731169919f144b937673b2ccce55007639a5987e7082c97b7fdc","size":5537,"data":"","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-09-13T14:43:24.872739Z","times_seen":6589,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"caf7bdf0ce3f11830af1d3dd0dbf931e","sha1":"958a4413837457b5e3b66ca292736de8286eafa8","sha256":"b0de6c6e01a16a20bab373a1e7f7b5f3ad48d1b85210965d8c956319f8ac329f","sha512":"7838f953bfa1c129087cd76d5f7a05bfb8dbf7e308861450a3b64331380dac48e7f0417b1e42d58f3ae7cbe0a50eea81bb3db2035d3150c9b7d731ebaca926f6","ssdeep":"768:c1D7GzOol+D45YMJR3kWG6UdCDxgtmKg3vTpzaDNCY5R:YfGkWodCFgtmKgNzaxCq","tlshash":"a7d2f9a973511637a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a175734","size":29362,"data":"","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-09-13T14:04:12.309446Z","times_seen":12009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","size":20122,"data":"","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-09-13T14:47:02.663788Z","times_seen":12708,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.10.4/dayjs.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bea3f1180a3e2e45eccf9d76f990f3b4","sha1":"062f18541416ee4e26cc1041559633be09507123","sha256":"353b11e123a6dd81df26b9ab9af06d118a9f43a8d0e72bc428c86041edc3225d","sha512":"d1f702465f36f25065ad209af10258e759ad36a4dc1f169b69754b3e0c3f8cf03936eb6e8e1e826d3743811ce5f5a48f616feeb84edce127df154405040cba96","ssdeep":"96:+02PYlx9PrQgFx2TtXNFWkzfdHsMWWR/W0XNkWLJGPFbl+z6jRTJ6cnywtdFwGyw:+TPYlxvPONIAwx0/YJTRUcntyw","tlshash":"6ed1208ab282b1165753a174842f014af22e69e6785f44acf57ac8c27d38c4dc13bfb8","size":6427,"data":"","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-09-13T12:51:47.93695Z","times_seen":2133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/alpinejs/3.13.3/cdn.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b2ef788f8b46f011c1dfd62b9a834ee8","sha1":"9a7ab27dd4cb1b1d91e91e0144b9763138112c10","sha256":"c8fa8ff457abdcd212f37a07ef2f292c999011dffabcaa577fb1e1e0076ca658","sha512":"001daf00c56bb66988fb607048ca81fb2d6a18f349a2f50e0a9e30dbb4bda6f5fcc973d035b04ee24b8cf79dbe2e53a99e0f557963dbf3a6f9377d9b92f5d1bd","ssdeep":"768:n3oVzUGotWtG+837to+73jcVOnLnfhF4PWt4b6j85kXvwTlVyR6MPnPaJbfUpqlI:cV0m+7TcVY74fgvkx9y","tlshash":"b613fae973dab17283ef11b650ff4646f3391894680e5428f719e8da342648941f3fba","size":43441,"data":"","first_seen":"2023-11-19T17:33:16Z","last_seen":"2026-09-13T12:51:47.95124Z","times_seen":513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/alpinejs/3.13.3/cdn.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"AsyncFunction","is_inline":false,"md5":"3503c4daaddc0ca11ba2fd8721a015e7","sha1":"5db7b1f3d132d74acde79930ece2f28e39437b84","sha256":"b3e31a800bb27e39b97ef3912f8d30ebb13ed887a4684c6d0214af1c0a04de64","sha512":"9e47bddd1cfb423a295e470874cb32013a37eb244f0443ab114bf58ff3608fd12e08c9684505b1097e935a4dc96edd250853c23d0344ded85fbd821b8fb77890","ssdeep":"","tlshash":"d7c09bc458c65910c61339d1c135547b61741661d1bd54651a3da364953711ae15cc6d","size":131,"data":"","first_seen":"2026-09-13T12:42:00.094992Z","last_seen":"2026-09-13T12:51:47.980229Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ai-app.icu/images/bob.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.593Z","timestamp":1789303873593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/bob.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:49 GMT\r\npriority: u=5,i\r\netag: \"6a058ce9-b0c\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1r%2B2RC%2BV4vw%2BBtNv9rxHrgRkkyu9Qvxw%2B2x5B7zRHhoRTZ3cPQZa33xMrNh0wu630DHIJe6W3vPqPq8P%2FcE86vcYg4UgOy1uP1zAwpzSIoXXpUsTSMrg%2Bm8p%2Fu1D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483a0811569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2828\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2828,"size_decoded":3562,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"eb0d66f24ce6d03a30f7db95b378faa2","sha1":"57ec1c7ec914054fa7cf9d7e80367ff55d1b9b62","sha256":"25f129f459b32f6df03a8cf8e22d1d70289059f1181cf042bf73efce430e8023","sha512":"2bcceab79cb1c976335d6309b8eed8ad7aec111e11a2169a87c278814779b15df2957ee7b74f10adb4da98419e4207c6a2210b4192c139b3ca92cabf030e4180","ssdeep":"","tlshash":"c9515c88e3700169cbd114ee1639da90d28f1798a6215d8efbda143ea8b5a08eda8d14","first_seen":"2026-09-13T12:42:00.069433Z","last_seen":"2026-09-13T12:51:47.906702Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/Switcher--Streamline-Carbon.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.823Z","timestamp":1789303873823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /Switcher--Streamline-Carbon.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MMkHwjXooxTHIg5eiiaSOOXS9%2BWC%2BTlh1HIDeZJnAX80tP%2BEJcI%2F9%2FjichOInSU9UsIKCkMq2mq5X67cyeqF0KhzbsNZniq9T0XZfiqt%2BHE25Bnuo%2F8fmymVVGlS\"}]}\r\npriority: u=4,i\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483b6847569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":735,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"a53e183b2c571a68b246ad570b76da19","sha1":"7eac95d26ba1e92a3b4d6fd47ee057f00274ac13","sha256":"29574dc19a017adc4a026deb6d9a90708110eafe9a6acdc6496317382f9a4dc7","sha512":"1ca8f70acd82a194984a248a15541e0d2c75e052e00fc43c1c6b6682941dad6ce4b6c2cab4833e208e79f3546758c30857d1d4a3b05d8e571f0ce7a3a5b357be","ssdeep":"","tlshash":"3bc02b6d3913bc4cca63327422c37580c0c6833764ba81128440800331cf2998ac3397","first_seen":"2023-04-05T07:24:51Z","last_seen":"2026-09-13T12:51:47.909726Z","times_seen":3744,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/style.css","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.540Z","timestamp":1789303873540,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /style.css HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 08:51:07 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=coe0knd9nGVA9zdQybwHVidnj3OcrZAK22GhZLdxM%2F5uljBFMQHaoGLeeLkgv8vZNLtKuLV%2BRggexeiaIJuRm1Ey1vajj40e0%2Fuy7QGAbgYE9GtjNdchLZUmRyxY\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a058cfb-78f1\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839aff4569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30961,"size_decoded":8809,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8c22ed671f590f1e5e4a00573fb5cad8","sha1":"4b8fba932b34cfe5ad3573b6b0ace279518ad72f","sha256":"4d7e119da39d985aba248674e68065964ddce15d84ab174d4e73a3b49bf37b2f","sha512":"5085b99d0bb9476c5ce4beeff92fb70e84420db529727e61c4424acd3b6ef6b29e641b6264a9b0608ab96d256b8b5d8c3c9881bfee366daab8267c593ae2477c","ssdeep":"768:DpECEkE2EME0EsEsEUEET0/6W5suDeTfGKveKC1ZRGuZCduHsvlhd20V7Cv6AtV+:zUeChrz0","tlshash":"b6d260108803255667378fbbf3d1cd07ff644823ad026176bacd2264aff98b88922d1d","first_seen":"2026-09-13T12:42:00.088265Z","last_seen":"2026-09-13T12:51:47.911353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/shield.svg","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.586Z","timestamp":1789303873586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/shield.svg HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 08:50:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDZbAcaZGjZpLnDJ%2BgnT4nl2%2BMEhfjaGGvD9%2FbrAYdCJlyq60V7exqlFousfE2fWFZMvmIPI6wbY%2FBdYRkTmGPB7s%2FB6korxCRci8%2F%2FtaXMSSrBAlpZ1i4UKTeYc\"}]}\r\npriority: u=5,i\r\netag: W/\"6a058ce8-b4e\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f805569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2894,"size_decoded":1804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"590080d533922fde518c0be0e53f000b","sha1":"c896e4eb3fff361a054bec49c5d015283dd32990","sha256":"7c22125ef9538c2fbe5ca8d3925629acae7531110e833feff1100f7d5d3b682f","sha512":"84363f0145afad2d970a3a03b4c859cac499a1dd32fd508bca330b39bd5055f2bec2f5d4928af6bb95c08c7378ae07722368921c71d34d95dec1b1525a14b228","ssdeep":"","tlshash":"455156b9331851f19c0293a4472e5036223b18f92f5a0ae949d65bdefa8dd8e0c7ddc1","first_seen":"2026-09-13T12:42:00.060995Z","last_seen":"2026-09-13T12:51:47.913862Z","times_seen":2,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/Mode-Comment-Alt--Streamline-Outlined-Streamline-Material.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.589Z","timestamp":1789303873589,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/Mode-Comment-Alt--Streamline-Outlined-Streamline-Material.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:50 GMT\r\npriority: u=5,i\r\netag: \"6a058cea-132\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6qB0yMgjYN8kp4rUNuPVtKFqLcaiMUwIqHzecFMEUJorVnro3FAmGU72mSnzO88a%2BRcFa%2B02jAO0AZKt0s6sE2%2Bi0pIGaQb88sq5ih6Zdkyt0sHcQHeresHW9Mgw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f80a569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 306\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306,"size_decoded":1031,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"7bcafd8cb75bb10e43f9ff4af54ab7cc","sha1":"c750e575e5c6448085855a750e7fc53bac3aa4de","sha256":"b8edfc0d4124b8a5e7f86ddd23733b804dcb94fe07632390f0cc0e756d178d75","sha512":"bae25a5c1f503e3f9e88b134e52b9452a877774be221b047a9f1791acbee6e49e69a933a4ead2188fe70e258219f9d7e407cbc952c1459b20e5c50c6262d1d4a","ssdeep":"","tlshash":"e4e0e7b573757f3ce54f45175591ed739c3004d4b6bd071650dc623540e5933109955c","first_seen":"2026-09-13T12:42:00.068041Z","last_seen":"2026-09-13T12:51:47.916218Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/63e9010ac4942e4fe3432fbe4d3b236fef0a61be.svg","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.591Z","timestamp":1789303873591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/63e9010ac4942e4fe3432fbe4d3b236fef0a61be.svg HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 08:50:50 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=40%2F94AodfpfqXhiyYk3Mne1V8FGf6EaRq0SZinRwYg4oJAsSm6Yjj1%2BVi6od0o5WuPoPIg6%2Bm3AI8plyppb1x89ILSr3I8miHhc1rS3OB1XMAs55swOnNhT73JSp\"}]}\r\npriority: u=5,i\r\netag: W/\"6a058cea-5d1\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483a080e569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1489,"size_decoded":1523,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"030d77c4bf41eef0dd34c9d99a22586d","sha1":"63e9010ac4942e4fe3432fbe4d3b236fef0a61be","sha256":"bc2529d1bf7f1fdd22e49f54f96c82e4d23e89366877571655c6b303d7451556","sha512":"21c4171fccd10a460b0c2b1ff11e9e66f488a66afeba6996a15b842389412afc64f8b8cd36d09bd1d05d4b061fc6a212c39a599fb453214a097952a06d7e9fdf","ssdeep":"","tlshash":"a7312ea496f8516fd80ed77b9e58d4098a2ea030705a5841ae1f0f08e43f199e28a391","first_seen":"2023-05-20T03:54:45Z","last_seen":"2026-09-13T12:51:47.923899Z","times_seen":217,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/b19f3bd71f5037b20f16ee851aa4d34995e98a65.svg","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.592Z","timestamp":1789303873592,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/b19f3bd71f5037b20f16ee851aa4d34995e98a65.svg HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 08:50:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cCFxO3LkN0CqIzuY3HVg50hvue93R%2Ft0DVGXo5bguLiQEXlYakdxB2dtW4rfmXFQSARCtbsBNdg4l7fyhCEtZOzAp6z%2BvCAxqjMPbB2gKba84dv%2B1qyeOGvhMtmT\"}]}\r\npriority: u=5,i\r\netag: W/\"6a058ce9-459\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483a0810569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1113,"size_decoded":1338,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1340f6cbe67d9c64707b2eec601c91f3","sha1":"b19f3bd71f5037b20f16ee851aa4d34995e98a65","sha256":"452c1e9f751d7d8d78a9b3e91ed0332e489d71846f70b60e6e6c3a5fb47d152e","sha512":"daf6b847e948f838d2d593e9883fe47917893edd5cec203b787f6b371c0b32f7dfde261c29d0807ce5925c4f196380a3a55c83f46d22d3fa4a8ae08f8853d68e","ssdeep":"","tlshash":"8421feb5defe507fd80e97b6ed98d0168a19a07130852882ac9e1f11e03e19685c77a1","first_seen":"2023-08-02T20:21:20Z","last_seen":"2026-09-13T12:51:47.925047Z","times_seen":18,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"shamanleads.com/cdn/vsl/plugin/js/player-full.min.js","fqdn":"shamanleads.com","domain":"shamanleads.com","tld":"com"},"ip":{"addr":"104.21.61.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.860Z","timestamp":1789303873860,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shamanleads.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 20 Aug 2026 03:02:55 GMT","end":"Wed, 18 Nov 2026 04:02:43 GMT"},"fingerprint":{"sha1":"A2:2C:49:7B:AE:90:E2:CE:F0:1F:CF:35:8C:FF:1F:8F:BD:CB:74:7E","sha256":"CD:3D:2D:CC:38:72:70:7F:B0:9B:D4:D1:37:51:10:B2:53:F3:46:76:5C:DF:9A:D9:8F:67:95:4D:EF:46:91:07"}}},"request":{"raw":"GET /cdn/vsl/plugin/js/player-full.min.js HTTP/1.1\r\nHost: shamanleads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YEYsIr3xuFNKmJM1N8SZ7yvXEQnqgRVG90Prgxh7pLgNeZQfw06Hhy6WjrThVw%2FevAyYts9PKho7PijNSK8rLR3S720BnxkWqNW%2BEa2O4HuxnbVKYx2CnUF6nOVLW6xGpHY%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\nage: 0\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483ba8014e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/css/validation.min.css","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.545Z","timestamp":1789303873545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /sdk/css/validation.min.css HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 08:51:01 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8cCYjnK7nRAWvs1nPx3EwORMaazRq3SWCSi3XwWLX8WAae0ZRsgfGB%2F55A%2BJ6TtlEqpW%2FpkQ0XYQjp2M4ZOBVIL57lbBgs9eBL2iJw2z7fLWCEbB%2BwUTIuqQZTrU\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a058cf5-2fb\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839aff6569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":763,"size_decoded":1105,"mime_type":"text/css","magic":"ASCII text, with very long lines (763), with no line terminators","md5":"ac1b62431a8b06910c0164cbe4c388e4","sha1":"045ca1937c68a4638f83434eafabc999f7538758","sha256":"e95513afdd34ced1ed0ae07c485ede016a06203e8abd0b55feea15f186ef5170","sha512":"c86d64cb2abaef4546235611018966a52f27731472b99ec9bc68927730d59380259d2ff24153ee64da997a607223f2e4fb1091795291b01d77da92826fafd455","ssdeep":"","tlshash":"46012467f4cd04166122c449a552bfbe683f954277136fb5f421f3348b9a4e3bea1309","first_seen":"2025-04-14T16:54:27.133802Z","last_seen":"2026-09-13T12:51:47.926897Z","times_seen":9,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.550Z","timestamp":1789303873550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ai-app.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3848944\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:39 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Koe7KOTxa8VKwLHiNUfvCGaqV7UmCW6eFTijXuUCXs%2FwfsEyVVSz9SWc4lp2YOXKS8iypL8mQCsXdG3I%2BqflmjmwIo%2BPd%2BSqeH2XOk%2F09dHk3BVP0d1o63zCd1Au8t%2BlVCvSEHYL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a74839ee48a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1820\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19157,"size_decoded":2830,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (19157), with no line terminators","md5":"6b7fb2ee130535419a67afb198f41c2b","sha1":"ffb8a25633c4ddeab81d1b1742ac2fd0b442a4c6","sha256":"c6956e8710cf477f7014440385ae16ee4b8cc7ecfd02fddd4d2f0c6c7fd15845","sha512":"cb27bfbb47a142cad5adf49de9b893d7bb77f5183d90d73ebc435c09766e333d9af8b5851af5d49d8b96516ea96df623d637016ff0b7f54670d9c890bf00c3be","ssdeep":"192:6wR+nXh/TVc6jU+4v7fix43obCfCfIlSc:6wRWXhK6jU+4vTixaACaglSc","tlshash":"8f821f1709a32429f627d5a261708eb637278c0bf4264fba49153e7ca3825d51df3fe2","first_seen":"2023-04-05T15:48:42Z","last_seen":"2026-09-13T14:04:12.385193Z","times_seen":20429,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":2,"connect":25,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/toastr.js/latest/toastr.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.553Z","timestamp":1789303873553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/toastr.js/latest/toastr.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3324068\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sat, 06 Jan 2024 13:26:31 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A8tdhuAE4e9FSUaDVHdMlvRe1x14Wtl2%2FKw%2F8rdQp9S3oPG93ywV9f%2F1hQ9f%2B02ZUXMLTEfJgraiVoEVpQnU4YywghBv33hu9HIpzRvK5G7NPyJ7xa4wfvtg24g7hsB0orWx8O4B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a74839eb9d0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1884\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5537,"size_decoded":2904,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (5215)","md5":"b36f28de584845317de40a7219c82b1c","sha1":"6de8657c8782561bc023478ab708179ed846db1a","sha256":"ddb96c25de07962ffbc0243e6e68177ce74aee9fd950cb4f5d8d3c8e6c524a09","sha512":"54477e9eadb90a447aefa3bea4b0670d6d3d47b5505fd31d8a28f4e768150a9e72547de31ad1fbd07a3f514bf89890ec11d4efa91085660d0d2868a88c69d40b","ssdeep":"96:LozfdCZR1JHduRv75dR+FIEHXX9oxNDP9mA1UZsEyHGJAcCwV02UfrI:Mzf4BtcvvRqIQcNa74ccrI","tlshash":"f7b19384b220bb8b5b731169919f144b937673b2ccce55007639a5987e7082c97b7fdc","first_seen":"2023-03-07T01:28:39Z","last_seen":"2026-09-13T14:43:24.872739Z","times_seen":6589,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":4,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/js/helpers.min.js?v=1.0.1","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.562Z","timestamp":1789303873562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /sdk/js/helpers.min.js?v=1.0.1 HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 08:50:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5xiKXTz7vx4QBQ3wp7PBo1nQLthojbuQy5OyCllnNboZ5QRIGxzIjz9GMzvCeE69xpULZ6%2FkMMJnkf6jLzxttIIfTyqNv8JZ%2B5p8qrDd91AtD9%2B2u1ldWWx%2BZVWH\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a058cf0-1547\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839cffc569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5447,"size_decoded":2756,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5447), with no line terminators","md5":"ee37664d63d8b67153c39a24703053b0","sha1":"cd56db377df0aa3db32550bcf0f982f3a60adbc0","sha256":"249438c1949dae324b32bfe7e4faea533ae21f79d6de6c7474f736125e7f3776","sha512":"831dd677731adc921564a6028177501757cc5a1edf3510a5eb98216d339d60cbdbac2ac1c972501a006f0bfa7dd1800429124c8c40d654632b61bcb6c27d0005","ssdeep":"96:sFdm4qrLu7yCaXMuPNUnCMrCpGOvGpPSz2smucYUq:sFdm4qrL6yuuNUp6Hmnsmuca","tlshash":"34b1312e2f946a763f134e6b7b37b2d5d525611e2e120d8fd0243c053a29b46e8f6e30","first_seen":"2026-09-13T12:42:00.066253Z","last_seen":"2026-09-13T12:51:47.930872Z","times_seen":2,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/lisa.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.597Z","timestamp":1789303873597,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/lisa.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:48 GMT\r\npriority: u=5,i\r\netag: \"6a058ce8-bd3\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uAnphWcDQnHcrVp8rEY%2Ftxi3T0kRaZVXAEf4CRFtuWN2wSx9mAWfpIX3W9VJTK4y7oomrV4239eprhnEv1jgPqe1%2B3kznz%2FINYTOtdzpS6Eqix2k8d3uFu9uWKyx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483a0812569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3027\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3027,"size_decoded":3753,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"643014c9c49d853cef51801056f5ee80","sha1":"6daaaa8339c221eac85f3f3b0c30b3b7b216d63d","sha256":"c68891ff48322eab2db11358ab83362892d3bd4aabbc9320708a39c4b3ed7ea6","sha512":"629c69fccf9bfcbd66fe6c8d8be7dabbeab6487fef2c52f6a713828b8a93c21904f8dab1ad2280267c84830b6ee0ed0196a9258516e22af1e45f86bedea774d0","ssdeep":"","tlshash":"4b516cd1cb7eff4176ec0d767882337469b35cbef4aa30c60044249a61b45ca891c7aa","first_seen":"2026-09-13T12:42:00.085442Z","last_seen":"2026-09-13T12:51:47.932515Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.557Z","timestamp":1789303873557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 2806783\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xGyMYfhGlUqCMpXB373s3F%2F5g%2BhlI4ofgHjhy5qSsng555tzjW5TiZXV%2FJfJMYaRxzFM%2FG7l4zMfAG8sUW8fd5KTKm71M6UOuevhN4wnC8778KFN5NuuHu%2Fkup6iG0%2FfFxQ6Fiiz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a74839eb9a0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8889\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29401,"size_decoded":9913,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (26959)","md5":"caf7bdf0ce3f11830af1d3dd0dbf931e","sha1":"958a4413837457b5e3b66ca292736de8286eafa8","sha256":"b0de6c6e01a16a20bab373a1e7f7b5f3ad48d1b85210965d8c956319f8ac329f","sha512":"7838f953bfa1c129087cd76d5f7a05bfb8dbf7e308861450a3b64331380dac48e7f0417b1e42d58f3ae7cbe0a50eea81bb3db2035d3150c9b7d731ebaca926f6","ssdeep":"768:c1D7GzOol+D45YMJR3kWG6UdCDxgtmKg3vTpzaDNCY5R:YfGkWodCFgtmKgNzaxCq","tlshash":"a7d2f9a973511637a89aa0a1687f16472ebf34015a84cc8cb87ecdcc1feced9a175734","first_seen":"2023-04-05T15:31:11Z","last_seen":"2026-09-13T14:04:12.309446Z","times_seen":12009,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.7.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.129.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.551Z","timestamp":1789303873551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-3.7.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ai-app.icu\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-155ed\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\nage: 2516652\r\nx-served-by: cache-lga21978-LGA, cache-bma-essb1270077-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 583362, 385723\r\nx-timer: S1789303874.611836,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 30336\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87533,"size_decoded":30979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"2c872dbe60f4ba70fb85356113d8b35e","sha1":"ee48592d1fff952fcf06ce0b666ed4785493afdc","sha256":"fc9a93dd241f6b045cbff0481cf4e1901becd0e12fb45166a8f17f95823f0b1a","sha512":"bf6089ed4698cb8270a8b0c8ad9508ff886a7a842278e98064d5c1790ca3a36d5d69d9f047ef196882554fc104da2c88eb5395f1ee8cf0f3f6ff8869408350fe","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKr:sHNwcv9VBQpLl88SMBQ47GKr","tlshash":"3983f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-08-31T16:03:19Z","last_seen":"2026-09-13T14:48:08.435453Z","times_seen":194391,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":3,"connect":10,"send":0,"wait":9,"receive":4,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/js/pixels.min.js?v=1.0.0","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.565Z","timestamp":1789303873565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /sdk/js/pixels.min.js?v=1.0.0 HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 08:50:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hus0YYP0MkQ9DVPMp0rF4f0pch4XlL0Y1viX63eXtfBYXUd9%2BjVA9N%2B7ypyj0ani5rYDE2DhikCe55QzkAQyhY2WUo09cRvVptMrx4ZNByoNzP7mUdX%2Fmg9Ozj0g\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a058cf0-562\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839dffe569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1378,"size_decoded":1357,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (374)","md5":"44e7c5a5030ee229d7bdfa4e27ee7128","sha1":"3379912a846feecb95288b121f467744dfb1385c","sha256":"535394312ec94e014dd6ebdc4dc575f56611eda393e8f15e5ce28d158f9cec6e","sha512":"3dd31f78f168519e181d33b741a6e9f417c1deec130634269be97e50d789a3067149a969ee707a1e8a8591664e9de02e5e14842a78a5f09c2ad1186028eb8fc3","ssdeep":"","tlshash":"7921fe3d3b16687707ed549ea7b6e36177a2226a24c2d4053c8dcc6c3fe4f8150e1ea8","first_seen":"2026-09-13T12:42:00.073506Z","last_seen":"2026-09-13T12:51:47.935682Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.10.4/dayjs.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.554Z","timestamp":1789303873554,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/dayjs@1.10.4/dayjs.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.10.4\r\nx-jsd-version-type: version\r\netag: W/\"191b-Bi8YVBQW7k4mzBBBVZYzvglQcSM\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 2316582\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\nx-served-by: cache-fra-eddf8230132-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 2941\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6427,"size_decoded":3735,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6426)","md5":"bea3f1180a3e2e45eccf9d76f990f3b4","sha1":"062f18541416ee4e26cc1041559633be09507123","sha256":"353b11e123a6dd81df26b9ab9af06d118a9f43a8d0e72bc428c86041edc3225d","sha512":"d1f702465f36f25065ad209af10258e759ad36a4dc1f169b69754b3e0c3f8cf03936eb6e8e1e826d3743811ce5f5a48f616feeb84edce127df154405040cba96","ssdeep":"96:+02PYlx9PrQgFx2TtXNFWkzfdHsMWWR/W0XNkWLJGPFbl+z6jRTJ6cnywtdFwGyw:+TPYlxvPONIAwx0/YJTRUcntyw","tlshash":"6ed1208ab282b1165753a174842f014af22e69e6785f44acf57ac8c27d38c4dc13bfb8","first_seen":"2023-03-07T12:04:24Z","last_seen":"2026-09-13T12:51:47.93695Z","times_seen":2133,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":29,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shamanleads.com/cdn/vsl/plugin/js/player-full.min.js","fqdn":"shamanleads.com","domain":"shamanleads.com","tld":"com"},"ip":{"addr":"104.21.61.84","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.570Z","timestamp":1789303873570,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /cdn/vsl/plugin/js/player-full.min.js HTTP/1.1\r\nHost: shamanleads.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RUWQ5W5HZE0V2PizPzn%2F%2BOOTXH1gth2nW1iXntU31xLCuHo0hm6PyMjW2UOLuLF9DCHYQKCWmTZQaNTKHtZqLQzzGLgvkzB1QrXvWI%2F2GRFLhb0NI70bhO0IyeZS3rqAIV4%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483a1f9e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-13T16:24:19.8643Z","times_seen":18445652,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/images/1d6d8194e3de7ac3b5bca57eed87d28fc8bbf24c.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.822Z","timestamp":1789303873822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/1d6d8194e3de7ac3b5bca57eed87d28fc8bbf24c.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/style.css\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:50 GMT\r\npriority: u=4,i\r\netag: \"6a058cea-87\"\r\nexpires: Mon, 14 Sep 2026 12:41:22 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3W4kOLQkn%2FQ8BmH%2Bb5YH6aF59L%2F60UeeQorRtXOE8pJJbq2qEZFVwyRUWM%2F9KrZtqdwlZyuZTB1jNcsZKJ3Lw9PHn0478BnWE93G4cIb%2FV%2BjTRbG7SdfY4R56nms\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483b6846569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 135\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":135,"size_decoded":865,"mime_type":"image/png","magic":"PNG image data, 2 x 14, 4-bit colormap, non-interlaced","md5":"94b070b5bc4fd150622c009b1ff28d8c","sha1":"1d6d8194e3de7ac3b5bca57eed87d28fc8bbf24c","sha256":"c2128b5b8a9ea02f0830a3b22c37023dae3f287e7ef5d91fbb4ff535c6b30675","sha512":"adc3c5d6df76548f0d7b00157b99fe07952b40bb41f31c095328b3d0532b38ef31ebaa34d0416ace3cf32feace3b7aac01d97702928aa30948927f299b65d853","ssdeep":"","tlshash":"cdc02bebdaa37d21c0c80073015c1002d034010c2213b14e5001a610031174d50c4706","first_seen":"2025-07-09T05:47:55.968197Z","last_seen":"2026-09-13T12:51:47.938168Z","times_seen":9,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-13T12:51:12.951Z","timestamp":1789303872951,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VJDjBP2%2Ff%2FA00o0A9%2F24ODfCHKl3LLiiqkbT8tzgiTjJ7%2F8E6cN15siyiIsRNK8g6NMlDlEy%2BhBB0w0P9l1mtj57C2bjfj1fuby6Nd5ZR%2FA9Ad%2BBKJ5v4VKKFwy5\"}]}\r\npriority: u=0,i\r\nx-powered-by: PHP/8.1.32\r\nset-cookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a748362fc5569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"7f136609abd43d26ed89b7da1bef78b1","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=7f136609abd43d26ed89b7da1bef78b1; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.7.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper:2.11.8","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Alpine.js","description":"","website":"https://github.com/alpinejs/alpine","common_platform_enumeration":"","icon":"Alpine.js.png","categories":["JavaScript frameworks"]},{"name":"PHP:8.1.32","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":132895,"size_decoded":27252,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1040)","md5":"0faf3f063beef4fc2f711060f614d4c2","sha1":"2edb6f636bbef7ceec65d65a88b7066e039400b8","sha256":"f8b9ea8a5174783ca5baec766d8ea79cb7ad8b6b94815948ff275a0789928293","sha512":"65808b74375cd4d9849b932be610485bf38e532eb59d4af9fb58d87bc984a521ffab79420b339b122922d76fc754193f2de5d078e22cb4bb5e7a3a1e6b875ac1","ssdeep":"3072:SQWInuYqXSImzM0901D8tjS9mgNhl8xGKlNaZo9/5:SQWInuYqXSI9mWl8xGKlNaZov","tlshash":"6ed3c66962f394a21c23a1b96bef620d3765f107c90acec47eac6251cfc69e4dc53358","first_seen":"2026-09-13T12:51:47.938875Z","last_seen":"2026-09-13T12:51:47.938875Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":5,"connect":22,"send":0,"wait":175,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/css/custom-select.min.css","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.544Z","timestamp":1789303873544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /sdk/css/custom-select.min.css HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 08:51:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b25xKgsuumN8%2FNAC3%2Fv3PcLpzxWpjL%2FrDMoHkhZpk4a9BUfWzlGbcnJapX0s7QN61XVt7DxW5Xm%2FY7%2Fj1XjBDJzAClAgQUTUA1WC1ta7JQLQxvCXHL0XE7E7cuSF\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a058cf6-ad7\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839aff5569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2775,"size_decoded":1633,"mime_type":"text/css","magic":"ASCII text, with very long lines (2775), with no line terminators","md5":"ec0fdf40ca37346757838300c700f808","sha1":"ba72f393fa02d2533d2473079a3408a2ec2e0cee","sha256":"b97a3698ffc3e30a19501d8fcc72dc7910f92c4b522ff1e55260211ed8bc305d","sha512":"01daad1236d69f655b4735edb14f6c7de6199cd6509c494e3dea66102d1d79dbd369d554edfb56f460ea39d6125bb304838cee8ab376adff4c37c7ade5c0b46d","ssdeep":"","tlshash":"9451cb19e170203530af9cbe598876e91537eb22d53646f8b385e22883c5dbf4263b0e","first_seen":"2026-07-13T08:58:25.642169Z","last_seen":"2026-09-13T12:51:47.940606Z","times_seen":3,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/dayjs@1.10.4/locale/ru.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.556Z","timestamp":1789303873556,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/dayjs@1.10.4/locale/ru.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.10.4\r\nx-jsd-version-type: version\r\netag: W/\"841-0hDveY9HsfA5683KZ+pk8WhTi7c\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\nage: 4149961\r\nx-served-by: cache-fra-etou8220069-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 1030\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2113,"size_decoded":1823,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1661)","md5":"4ccff8fc4f7b686f9c2ed9b6fb00d7f4","sha1":"d210ef798f47b1f039ebcdca67ea64f168538bb7","sha256":"4cc4899d4f654fe1e4468ceed99f8541bf0c57e8a84c909a2e9442f6fe137989","sha512":"fcb295d9041b6616accc300a201ac27fbedcaea88a9eea87a7058c70eed3b9342bc98d921b0879b084a0aad01fc24ec126044dd45c4716fc45a18b60c1b1d4dc","ssdeep":"","tlshash":"5f410f9d9d62a8db8300c0d2c81d6d1acc77d57e3c1be02566617caef8a082cc97e729","first_seen":"2025-03-18T02:26:47.968475Z","last_seen":"2026-09-13T12:51:47.941847Z","times_seen":37,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":10,"send":0,"wait":9,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/images/check-2.svg","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.583Z","timestamp":1789303873583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/check-2.svg HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 08:50:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nA3iD%2FAAOrFQRJOUyGeQwZX7qqU4pwG1xpm9FAHt5mDgfnBVPfQlaFtBjr25POyoEVJPUbiQRNYOwhwYOJZ4FuwmlayfFex4JXCmX50DDdbxjzEvFTDSY6%2F4FX5Y\"}]}\r\npriority: u=5,i\r\netag: W/\"6a058ce9-dba\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f803569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3514,"size_decoded":2069,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"38c24fc920f2f03ce6cc562e4d1e9025","sha1":"f35d8c1effd6641a3910e1a6dda804eebd4f4cb2","sha256":"bd8787edf1adb6ba59c71344ee3ff610e707b9b255eb4c47d67efdb90f4ff86b","sha512":"8fbea6b4dc24dbb1038a85c14db1908c188c871caae36978ba8fae644cb1513d308b51fcb7aea4847ec4aab1564bcd91e89795a345de3043062a02f4b8a9fffc","ssdeep":"","tlshash":"9b7132f8330861f15c02a3b4461e9071323b38f93f5a4be588d65a9dfa8988d4cadec5","first_seen":"2026-09-13T12:42:00.034564Z","last_seen":"2026-09-13T12:51:47.942565Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/Thumbs-Up--Streamline-Carbon.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.588Z","timestamp":1789303873588,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/Thumbs-Up--Streamline-Carbon.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:50 GMT\r\npriority: u=5,i\r\netag: \"6a058cea-da\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yWzRd8%2BbVjXhcUOXi7rXldqoUm0cS4Hwx7EHInD4Dg2aS9OKa0twaWpjKW0Xmt39aFe37%2FKW7ErihI%2B%2F9anyhTq61BmogkHeNLzq3OMIzt5vhNA6PGpSmYfebY2Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f807569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 218\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":218,"size_decoded":944,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"e2dcb9cb2efdf170d98ef4489a05fec2","sha1":"710c6a5bc3626b7b81cd2df250d99adf3c46da2a","sha256":"952ceaf72686ec2d61f03ad58e43ab2099c2f5fcbcc10cbb7961b34bb93851ba","sha512":"e407a4b41e2b3bf3ba10d7976f39e9d48b2fca02b055332f373266ab08374d953374d8e1d0238a5d15d7f94cccf6ec961400bacff846957cabbb9bf5f61de958","ssdeep":"","tlshash":"add023f220497c2dc98bc73324044015d8e210084a7f04e01703516109b8d00c0e8253","first_seen":"2026-09-13T12:42:00.076477Z","last_seen":"2026-09-13T12:51:47.943747Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/hls.js@latest/dist/hls.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.542Z","timestamp":1789303873542,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/hls.js@latest/dist/hls.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.7.3\r\nx-jsd-version-type: version\r\netag: W/\"974ac-7ZVf91oZkDiesnSwRooBToXKwz0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\nage: 24064\r\nx-served-by: cache-fra-eddf8230210-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 188440\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":619692,"size_decoded":189218,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (62704)","md5":"09f28e62f495ad11663c9023917bdf4a","sha1":"ed955ff75a1990389eb274b0468a014e85cac33d","sha256":"a12e7ee1cd64a69dcdb314157e45dafcba705bfb0b1440b7935cb265d374423e","sha512":"81255f89e3d0fc471f214c043486d534b42e8586b3c3c1e0cbca5ff210f724ba508788d4c55e12846fe8dfbba02979e40fce6e875fb07f0eee1a9c5227a521f5","ssdeep":"6144:+OgRL+fNzqRpprEzCrpXcVhcequqonhMDAZcrPqKx6gvcW4rRNkTFvgroytB5fZ0:+bRbAOrpMspqKxY9NfKT","tlshash":"8ad429ed36a5a01647c2b169903f5617633a7d0a284cc12cfa2be9c72d7994db03bf74","first_seen":"2026-09-12T13:46:51.101869Z","last_seen":"2026-09-13T12:51:47.945091Z","times_seen":4,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":12,"receive":21,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/images/tom.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.595Z","timestamp":1789303873595,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/tom.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:47 GMT\r\npriority: u=5,i\r\netag: \"6a058ce7-ad3\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UrgMrhmgyf9O%2FSJftE4nrLGjuGocxx7bKRe88elcQCsPh%2B117UnifXFKHVXAyO3eu3wUARiGkBE%2Fhldo1P9Z0LRdbtJ71KQ%2Fqhxnz%2FLgBkDhhrJgypPAoNK7IOP4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483a080c569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2771\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2771,"size_decoded":3501,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2b3a9ec4e907c53a360bd70eabc82701","sha1":"4e8039da5750774d64cf654e58a1ec516848193c","sha256":"4adabf959d7451201624229e8c3a5aad14ef27cf50be7e2c63f20b679e4e8010","sha512":"1d69b59bf1fe83cf082602fc8f22d003db94f76b7c20e2734524f5455157dcba22b1e708439024d947cc74bae576235eb8c291a174f8e6a967c13227ed4fa3aa","ssdeep":"","tlshash":"a6514ce2195810acb2ca03de1b3710afe57e2f81d362d0fe2ad58c5d6514ca1f958be3","first_seen":"2026-09-13T12:42:00.083203Z","last_seen":"2026-09-13T12:51:47.945939Z","times_seen":2,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/favicon.ico","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.928Z","timestamp":1789303873928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:14 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7fPCz7%2BH4eyZU%2FmmTbunSumt67DDlk3uXklDS7%2F4w2XrqsstMJgXg2EKUwRdIhdScUbBZLMalvpH4pTvpY8wJDxcVrGkjzmeWZGlpGb3Wa%2F4RBfu%2FcjjxtWyVU0D\"}]}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483c185d569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":734,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"a53e183b2c571a68b246ad570b76da19","sha1":"7eac95d26ba1e92a3b4d6fd47ee057f00274ac13","sha256":"29574dc19a017adc4a026deb6d9a90708110eafe9a6acdc6496317382f9a4dc7","sha512":"1ca8f70acd82a194984a248a15541e0d2c75e052e00fc43c1c6b6682941dad6ce4b6c2cab4833e208e79f3546758c30857d1d4a3b05d8e571f0ce7a3a5b357be","ssdeep":"","tlshash":"3bc02b6d3913bc4cca63327422c37580c0c6833764ba81128440800331cf2998ac3397","first_seen":"2023-04-05T07:24:51Z","last_seen":"2026-09-13T12:51:47.909726Z","times_seen":3744,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/btn-arrow.svg","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.582Z","timestamp":1789303873582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/btn-arrow.svg HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 08:50:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ch2KI5lOqWvZsW7SLVl3L2VvPZEfgozNmjNSICzSO0i%2FnBWPFEcrXM2s5%2FHdgOm4AwyBrI6zl%2FQFl2qgRlcCsvPO1VFF140uXo1%2BgoIBMeCickrpRSzSWEeOEG4\"}]}\r\npriority: u=5,i\r\netag: W/\"6a058ce9-e0\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f801569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":224,"size_decoded":911,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48ad14fdc0ccfd09988a49af34b9856a","sha1":"1d28e4ba08637ea7e8e9d9e6487ec86d360ada9f","sha256":"e7b9d9f17d5c1601db7fc87372bf6403e0f13caf471295d70795ad899d5e3968","sha512":"5241e074ebb2db64c9d48ab36a76869b098a27bbaadab82a0e84ad7e7fd4b690690947535965bbc1a8c8455dcdcbe0503a7fad71ee801a9c362cd322dc9992fd","ssdeep":"","tlshash":"93d0a7996314cc6cb2114528f764317194a59293998c1195d8613432a04566b3c7b5ec","first_seen":"2026-09-13T12:42:00.032728Z","last_seen":"2026-09-13T12:51:47.947164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/emily.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.598Z","timestamp":1789303873598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/emily.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:49 GMT\r\npriority: u=5,i\r\netag: \"6a058ce9-b98\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fn%2BEMdU8Mxzu7EASXut208rdprFzTjnczJucqnigUoCLCQAoeLKmRH%2FzVpSDbyVJUOAtSVDKVpVuBAUK5Bm9iuiNVyP2CALP3YlmcsIuMeEEi%2BIMLg5Ea%2B13Ps31\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483a0813569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2968\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2968,"size_decoded":3698,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"4fffd6171148d8a6ed187e3dcc09489b","sha1":"66c3cb0475e58bca7ac638909759cf040c416452","sha256":"df4eb82e3febf683c4fa42ba542c5f2dd61e8517d2fa9288f61f466b69f62da3","sha512":"8049f2bf9191dd08d190ea880c853c964452ff0809d518c6e2936dae466db9dcac75e585bb8668c09689165caef577acf3de3977513c7974ffc00c2dd977fc27","ssdeep":"","tlshash":"74514aebce2a887cb849a53692f188dd704aae55512e1b407f51f084bbf9ad21c0c22d","first_seen":"2026-09-13T12:42:00.090312Z","last_seen":"2026-09-13T12:51:47.948451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/Search--Streamline-Carbon.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.819Z","timestamp":1789303873819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /Search--Streamline-Carbon.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9X%2BXoZq5XA7dpwklIek%2FEnPIwi5aL4fc3WfJjlT2NKnlzTUN5nW1IThtklImS3h2bM9650LykWIXyiii6FgCgv9YOdesNH06IygXbb5Cnzm9FFb%2BV4hJ1QRo2UH1\"}]}\r\npriority: u=4,i\r\nvary: accept-encoding\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483b6843569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":153,"size_decoded":727,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"a53e183b2c571a68b246ad570b76da19","sha1":"7eac95d26ba1e92a3b4d6fd47ee057f00274ac13","sha256":"29574dc19a017adc4a026deb6d9a90708110eafe9a6acdc6496317382f9a4dc7","sha512":"1ca8f70acd82a194984a248a15541e0d2c75e052e00fc43c1c6b6682941dad6ce4b6c2cab4833e208e79f3546758c30857d1d4a3b05d8e571f0ce7a3a5b357be","ssdeep":"","tlshash":"3bc02b6d3913bc4cca63327422c37580c0c6833764ba81128440800331cf2998ac3397","first_seen":"2023-04-05T07:24:51Z","last_seen":"2026-09-13T12:51:47.909726Z","times_seen":3744,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/js/toastr-config.min.js","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.561Z","timestamp":1789303873561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /sdk/js/toastr-config.min.js HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 08:50:56 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KwzOTeB6ozOYWXCmyLu%2Fq16AgNTkG3BImL%2FjqX%2Fsgwm2YGjTGC08lD5kItZQzQoCScrCR3PQrkd3V5kdulbkVV%2FiPXeZgppnKfrqiYyaF4k6he%2BDWE92BnTy4yut\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a058cf0-160\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839cffb569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":352,"size_decoded":1001,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (352), with no line terminators","md5":"cb4d233aad3937bf7b692e74d82afe3c","sha1":"f35fd86feff1a13f57cb195cedc103094ff35761","sha256":"dc42806deec748ff95621b8f2e56cb6447a29828e12e246a228d17c6b1d6259e","sha512":"0f96314fc774e00719808e4a1de8ea54a671928459475545f7a53b622b46b20987ed69b45ac3adb319f51a7faf3e59aba24bb71544571472c664dd6de9094364","ssdeep":"","tlshash":"cfe0c0c14319ab830bdbc03811545446837d34b7c51b1e01b89c0d4c9cd86048a77add","first_seen":"2025-04-14T16:54:27.126866Z","last_seen":"2026-09-13T12:51:47.949538Z","times_seen":12,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.548Z","timestamp":1789303873548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.0.0-beta3/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1070199\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 22 Nov 2021 21:02:51 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ND%2Bj%2BlktXjk%2Fu8SuzaINj3dOegUNQ4ArEXpszwPzcFVEG%2FbYTycNs3XkcXUqOCeXbhzd3qlqD6X%2BVNnQF0XPVMeV9D3k%2B78CtMEQup%2BhZvojIJnXcFIPnjLhRDxTVjmokcjFHzJr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a74839eb9c0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14850\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83981,"size_decoded":15863,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65311)","md5":"3d5ef2bf867c4054a2f336cdbad9e1dc","sha1":"07228d1fa3245ee156a27a353f45758a3207849f","sha256":"a361e7885c36bacb3fd9cb068da207c3b9329962cac022d06e28923939f575e8","sha512":"168deb96b663fe4eee8d39c78380864760fb912b34bf82cb6a7c36aa4b18b91944ccefad71a10f428810d0a6a818ddbaff3ae7db42264750dfb8b5a73a8eda04","ssdeep":"1536:YlMVM6MVM9MVMKMVMRsVMNdhwJHQ9Kll3ITRUHrt+z:sdhgw9kITRULt+z","tlshash":"458376e8e44c05d56732c44baf55b378a1b6f73cd5810da9f02f590c29d26a822c6f7a","first_seen":"2023-04-09T08:23:50Z","last_seen":"2026-09-13T13:18:29.158445Z","times_seen":22007,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":3,"connect":26,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/alpinejs/3.13.3/cdn.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.560Z","timestamp":1789303873560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/alpinejs/3.13.3/cdn.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 3476832\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 20 Nov 2023 04:34:25 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BAAtguZfgTCOx4DiwFMw3QhAAs2sszQ7xbAWVTCs7Ks4RDWXw0KC%2FAAWChyEa5zu1AMsj1T8HUUMtG0VuKTmpNy72HemkfWgWEcC4DcmMGUZD0%2BTN30R0PUvuNWAV1bs25FpNfgy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a74839eb9b0b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 14206\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43441,"size_decoded":15223,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (36769)","md5":"b2ef788f8b46f011c1dfd62b9a834ee8","sha1":"9a7ab27dd4cb1b1d91e91e0144b9763138112c10","sha256":"c8fa8ff457abdcd212f37a07ef2f292c999011dffabcaa577fb1e1e0076ca658","sha512":"001daf00c56bb66988fb607048ca81fb2d6a18f349a2f50e0a9e30dbb4bda6f5fcc973d035b04ee24b8cf79dbe2e53a99e0f557963dbf3a6f9377d9b92f5d1bd","ssdeep":"768:n3oVzUGotWtG+837to+73jcVOnLnfhF4PWt4b6j85kXvwTlVyR6MPnPaJbfUpqlI:cV0m+7TcVY74fgvkx9y","tlshash":"b613fae973dab17283ef11b650ff4646f3391894680e5428f719e8da342648941f3fba","first_seen":"2023-11-19T17:33:16Z","last_seen":"2026-09-13T12:51:47.95124Z","times_seen":513,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/images/hurry-up.svg","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.582Z","timestamp":1789303873582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/hurry-up.svg HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 08:50:49 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I2DWZDxwq0RmfCj93WyDCnBzQa2wfSFYJ1zL7t2dgvnrDXlsZzaymdamUe5ATbwxh%2B9KtWo2cCZG%2F%2F1ahDnKpZM2VVsleM5WpvnQOJX2oXMVG56Y3Tqyb6BB10k%2B\"}]}\r\npriority: u=5,i\r\netag: W/\"6a058ce9-31c\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f802569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":796,"size_decoded":1138,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"13f8bc38d74e5ed7ea53859fb6f36186","sha1":"0c30389b23604dd0a1240c87bf24329bd3445287","sha256":"135415915a4a2092739c6f3131b9351a9564c8e3f01b684d05e75c83e9d9a561","sha512":"36c3da3017d9f6c8981ac2ee32d968adcd1d413f4207de235e812fdec03b28c182bf6cf824dabfd98905a9807aa468d0699332a4d0e445dc9877c622e0311319","ssdeep":"","tlshash":"3d01f9d873d4426e4a004205771e7073533be2ec55669150f9cabb37b849dae29732da","first_seen":"2026-09-13T12:42:00.050559Z","last_seen":"2026-09-13T12:51:47.952295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/user.svg","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.587Z","timestamp":1789303873587,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/user.svg HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 08:50:47 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vkdrjd%2B0tRWJyj9cyxyBDP%2BVuI9LvgGaak4JZzbVTAqrRp6Cwml49BtRLa7%2FLITFJ66PcD5yCLmDhstj9sINve%2FRhBufTRIe1cOW4D8i5NaetM459gMvVDS5IMX5\"}]}\r\npriority: u=5,i\r\netag: W/\"6a058ce7-d4e\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f804569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3406,"size_decoded":2016,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1c5f68a1976bf9bb5958dbe1b2c6cb6f","sha1":"726a177821d986995d66efab50b3e09172c04891","sha256":"ab2e549165570cb3189475f926cadd304763b502437ec21c1594a75c09e544a2","sha512":"de38a48199d62e5e90e9b8a15488acfb69d67d04ddd871a7bf06ceaf046bf6c40621c1ce2faacb70bcf8822309600a19bed93a5bdee767cb04715f87fc7679dd","ssdeep":"","tlshash":"bf6169f8734e51a1dc0293a0462e1075623f38fa2f564af849d6579dba88d8d4c7cd81","first_seen":"2026-09-13T12:42:00.075181Z","last_seen":"2026-09-13T12:51:47.953387Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/css/toastr.min.css","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.547Z","timestamp":1789303873547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /sdk/css/toastr.min.css HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 14 May 2026 08:51:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B1s%2Ftvr5MzbYoSw0Ft%2FLxMVi%2F%2FWsgtwH9nzBJxorwCwW9NnyPaOHux49KS1GFDETNF7JJjgLiRLdH3AjY33q83qrDjup1Jko%2BGru65YvUK%2BpKzChy1puvrXsvfRJ\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a058cf6-1884\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839aff7569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6276,"size_decoded":3718,"mime_type":"text/css","magic":"ASCII text, with very long lines (5990)","md5":"25b8e7cc5466efa2af7dfb5c333e5a7a","sha1":"9ea65ff1d4b76dd650831f6644c36557983c133d","sha256":"b39193f9b3b898770ce93cd6483ce7d61690047e5085c615f4a8f8f735851408","sha512":"5bc43cf225eb151b7693f50017b750ec45bebc3aa54c571a7db0ed622c0cc8b73b7a687f6c7d2877c3e95e46512a56faa85bb2dff65a123a1807c5fdc5fb802c","ssdeep":"96:Lozo4GSDPY1SH9octum/WQ78GhJZCjts/WP+zLmlDI/WKG8Czy4/WVMz2Tb6wt2E:Mzo4BPY1SHvuZY8syRttzGjVMSbbX","tlshash":"c6d185319b453b29fed3811ee01922096e17e173e6ed1daa750ea5bcc2c57945c372c4","first_seen":"2025-09-01T16:42:37.894684Z","last_seen":"2026-09-13T12:51:47.954302Z","times_seen":8,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/share.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.590Z","timestamp":1789303873590,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/share.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:48 GMT\r\npriority: u=5,i\r\netag: \"6a058ce8-30c\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vs%2FxxMMjf9VWdGMehM8Q4l1rFmzweTOmOvaVWBQplSVam%2FPdrjjfJ9Y0%2Bp%2B%2FXgKXlHsK9toZqKNQwq3lUE61HufWfRa23FhDziE5xQZn9MuyYJ3nV4xovD14%2Bhkz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f80b569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":780,"size_decoded":1511,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"11c85f32376b2a2a9f8dd0ed5640de07","sha1":"c4fad4b403eae1554d9f8956f349e03dfe4f2431","sha256":"cd09115954a977bc1e7197ecd3d4792e38100b954b30e8a1a7eebf98ea76b4e6","sha512":"6d1af94ad97a74f85f66d2054beed0236bd261827d2ff3503cabcda950272d228523f68684da47f71b168f48776532b3ff948e8c3ef675972cbd81d380293f85","ssdeep":"","tlshash":"50010affb20de877f8cd63c6c2d18b3c5919280b05123848e8534824c02ecc0075df45","first_seen":"2026-09-13T12:42:00.0778Z","last_seen":"2026-09-13T12:51:47.954913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/julia.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.596Z","timestamp":1789303873596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/julia.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:49 GMT\r\npriority: u=5,i\r\netag: \"6a058ce9-ba3\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N8hPd1HK%2BnEfJxCDXSwqCnbsNhSpTv31RqT5fPwtiNVSFodBFQdz%2FmPHbvfTdvttCsiMu9JcuDDxs2sn0SBcoe%2FMWGrqFqmrPe7g8n3GZ7i4fHcqLck9NBQ4UxrS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483a080f569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2979\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2979,"size_decoded":3705,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d4f33379ac5cb3902b17c8db4a0255c4","sha1":"3f4d7ae4e37a972f3ecbf3013435ee8563fb8f5c","sha256":"fff5bed6266998a879b973c1e4d4e63207eb3f01f7699dd486b31b28c6eb5fa4","sha512":"d6668077928da08a9ae140ded222d4782cacd835ff060f050c0402c2bcbd3e73c620ba6d3cac378525f330c1224cfda8d89e444025f9d4f757a5c9b5c051b868","ssdeep":"","tlshash":"25514cd0054aa1eb8cf683d63a827060cfdb161b505ed384eed4f66d4cc99c971d658c","first_seen":"2026-09-13T12:42:00.084356Z","last_seen":"2026-09-13T12:51:47.955668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@popperjs/core@2.11.8/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.65.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.558Z","timestamp":1789303873558,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@popperjs/core@2.11.8/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 2.11.8\r\nx-jsd-version-type: version\r\netag: W/\"4e9a-hx1u8QcL02PqOQ4MjDhOR9zn84k\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\nage: 3920273\r\nx-served-by: cache-fra-etou8220168-FRA, cache-bma-essb1270047-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7519\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20122,"size_decoded":8313,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (20033)","md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-09-13T14:47:02.663788Z","times_seen":12708,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":12,"send":0,"wait":25,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ai-app.icu/sdk/js/core-global.min.js?v=1.0.7","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.564Z","timestamp":1789303873564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /sdk/js/core-global.min.js?v=1.0.7 HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Thu, 14 May 2026 08:50:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1CDtAgWoiv50iCdyx1M1Betsg4i2PZGYJNtlQhZJ7xG%2Fc%2Bh65lEyLlQ6Th7i4PlITDjnVdnqtqUYNM5Xmz2RIGTlzDvjR6gA33qXwiXyN9oOHtt7MjuO5%2FfN9LVq\"}]}\r\npriority: u=2,i=?0\r\netag: W/\"6a058cf1-8d77\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839cffd569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36215,"size_decoded":12265,"mime_type":"application/javascript","magic":"Unicode text, UTF-8 text, with very long lines (34068), with no line terminators","md5":"326f54f3ee5c6e392f7953acb7b59e43","sha1":"94a8ff6cb0d1c41a6f8485221149b1e0b445705e","sha256":"90edff5f9e600d90c1845fdb587561e922f80178153abe978be57607285441dd","sha512":"63378fd0b18cf59f0cad793912663cea4c369b8dd6384d332ba230210220061220f1d352da988e10f6a052f9669eb0362aca28e0f68de19a077f4e6cb32fb510","ssdeep":"768:iPuzCc9tVM1eJzfX1VnPANsH3XM3W1iQRkt9R+x3vVK9W:NCc9tD3JX+aC4","tlshash":"2df2a6bd76f0d29d220d7e3b7993daaad907084a15b04ae9d8c46c52d0e2711e7fcb31","first_seen":"2026-09-13T12:42:00.071875Z","last_seen":"2026-09-13T12:51:47.957143Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/Joe_Rogan.webp","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.580Z","timestamp":1789303873580,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/Joe_Rogan.webp HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:50 GMT\r\npriority: u=5,i\r\netag: \"6a058cea-206a\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zj7xz%2F5dSRdfAIHlmO5yp2p2nLctWCWY7yHoGspaeLWhpXr0lVeBV8FmpWsfUeBuseoM5OLiN4ay6X6DqlZJK7QOddQyUYe3%2Bzz5iAWaJeDGhF74I3MISh2pF9l%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f800569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8298\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8298,"size_decoded":9026,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 450x449, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"e7427635fb3572120d75250d514da412","sha1":"75d3ceb21afdfff29f0724293a959faa06a1170b","sha256":"4d678bfc96de6f807096f03d0250afb0f36fa987537097fc2537a9e2fcb8909a","sha512":"847dc306fca4e57bae81a515daf84656d943099aba5a3c95400f7904850635c90836a1167bde274e53a2a210a9f41e5a4c97ae6f6e5b9b2b654f27e830c6d09f","ssdeep":"192:PKziPNoOlwUEhT/njUwYnOYxPJFH1zx3h+WIQbfw4wbF5:miHlLEhTg5zGWIQbzU3","tlshash":"6502af5de655bf045920a0060234cfeb8a169399d1720bb5313d1dbd906aa839b76e2e","first_seen":"2026-09-13T12:42:00.039923Z","last_seen":"2026-09-13T12:51:47.957913Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/lock-3.svg","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.584Z","timestamp":1789303873584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/lock-3.svg HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 14 May 2026 08:50:48 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XxyIBEHYj8tvIWHyvQxhdJjjZ7kKOBliVtt3UcAKGrOsZOFh5w9zoIwK7mvbhkTvJE4iMa2RrU8ZoTau0U8FOFktkFqRXm8aanntbqF6EHq8WElODFCw7TGpfIyx\"}]}\r\npriority: u=5,i\r\netag: W/\"6a058ce8-ee6\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nage: 591\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a74839f806569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3814,"size_decoded":2165,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f677185f1fe25d6504f36d00c2b3bf51","sha1":"3fd7e70999f150feeb51e367378a36a7637b4422","sha256":"f4ebcd6d466a314372948e3ade1bcf8ca85da320c149f2cf27d76cbdb5e2a9b5","sha512":"4abc1c64020c1e81560c9b162752d2edfadbdc0de4d84daa07de827ca9d34f55dcdabfa9906de614e689599a7f9419b81dfcdb2bd7562eec49c6b8ca62a8870c","ssdeep":"","tlshash":"6371a5b47388a1f09c0293b4112e6479712f24fd3f694da605c96bcef79884d0daddc5","first_seen":"2026-09-13T12:42:00.036097Z","last_seen":"2026-09-13T12:51:47.966591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"ai-app.icu/images/mark.png","fqdn":"ai-app.icu","domain":"ai-app.icu","tld":"icu"},"ip":{"addr":"172.67.154.238","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.594Z","timestamp":1789303873594,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ai-app.icu","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 09 Sep 2026 06:40:20 GMT","end":"Tue, 08 Dec 2026 06:40:19 GMT"},"fingerprint":{"sha1":"6B:39:80:D1:84:EC:51:73:AE:34:3D:3E:C7:80:2F:87:30:F0:16:F4","sha256":"12:62:E9:DA:0F:72:85:EC:A6:76:86:57:11:56:07:B6:0B:14:4A:B2:6F:0F:47:CE:DC:C9:17:EF:A7:08:A0:47"}}},"request":{"raw":"GET /images/mark.png HTTP/1.1\r\nHost: ai-app.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nCookie: PHPSESSID=7f136609abd43d26ed89b7da1bef78b1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Thu, 14 May 2026 08:50:48 GMT\r\npriority: u=5,i\r\netag: \"6a058ce8-bb8\"\r\nexpires: Mon, 14 Sep 2026 12:41:21 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nage: 591\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bn238Wess7EHdf7LxZ77aI7xa4xStEXLJIdmGsPd%2F7GWBgYQSEw%2FEkfQARkEkjGaIr2tH%2B4D0ELwNYEu4FhgWMWMHKFuSMsXs0idpoWLQ2ypZYC0os%2BOhWHdlB2d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3a7483a080d569c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3000,"size_decoded":3728,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2eb6dfc25e95335fb19e5bd947e68228","sha1":"16267a0fa306b325f47827b15738e890369598d8","sha256":"f34d8e036a67659c03dfc708b1dfee59c8c3a69b6dce9ad836a8cd106132ce3c","sha512":"246686725abfe69f8bdcd6fc55bfbe77ab0d87ebbddbe83ff3daf08de5478f82a11f9da1a427976f5cd766da572e0429f2c5c61719c5836e3b3fcc673d1de4de","ssdeep":"","tlshash":"c5516d0703e44819baf9a8482b2b714c5f8461cebe0b962342560c1a98af5d23a76fc2","first_seen":"2026-09-13T12:42:00.080345Z","last_seen":"2026-09-13T12:51:47.968808Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-13","alert":"Sinkholed","trigger":"ai-app.icu","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-13","alert":"Phishing Block","trigger":"ai-app.icu","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Phishing - Facebook","verdict":"phishing","severity":"medium","comment":"Resource associated with Facebook phishing","tags":["meta","facebook","phishing","social"],"meta":null}]}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/img/flags.png","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.925Z","timestamp":1789303873925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/img/flags.png HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/css/intlTelInput.min.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: image/png; charset=utf-8\r\npriority: u=6,i\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 1074310\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:14 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N79BNHoYklQvZ5NPYg%2FwXMrQ18h5IPJPDQaDQGMSyIFy%2FkenosuUsIZHz9qMKgxZfm6FuSrzwxo%2FF6mggvxbrDCfjnaBBznRgSZX51pgem1W2XE9jN%2FSsZgs%2FA7HyybZmsYBuzGp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a7483c0bc50b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70862\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70857,"size_decoded":71869,"mime_type":"image/png; charset=utf-8","magic":"PNG image data, 5652 x 15, 8-bit/color RGBA, non-interlaced","md5":"416250f60d785a2e02f17e054d2e4e44","sha1":"21572c9751e5a3dc20395befa0fcb349c32c4811","sha256":"0a012cf808a24573168308916092d2d4bd3f2b4af8e16b59167013cc77acee55","sha512":"cf1e7acf47464f00d206e9149475e22b8ea5a31727fa16344cd151384d850b83ece5e9abe4ac62861dba0dc3d3410955611d94665b60e2faa0c3d7a3d7c88404","ssdeep":"1536:cBBfgWxg7McnRdaRx9krb5LhxHG1gmvlpWUZA1eog3e7xr:Lg+3n3ax9kHV3Wgmdg2A1Y3elr","tlshash":"9763019797adf1d82a92274bef801109ae6c2b3d5d7c1da372cf1d532ae12c306c8586","first_seen":"2023-04-05T15:31:12Z","last_seen":"2026-09-13T14:17:06.533251Z","times_seen":26114,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/17.0.8/js/utils.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ai-app.icu/","date":"2026-09-13T12:51:13.958Z","timestamp":1789303873958,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/17.0.8/js/utils.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ai-app.icu/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Sun, 13 Sep 2026 12:51:13 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 4116927\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 21 Oct 2020 12:48:41 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PnCvIObZ7eRZeh39g3fI%2F661hzDaDJFaX%2F6spWJUoH7y%2BAmP0IGjZKkQALlmdYoOJ0TrGbTUAfrkkWBKYt2yCvZKUIaR5jI7JKOhpA8UftXY6sGboJcKE%2Bgib0zaxdDUUBq2DpPD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a3a7483c4bc70b4d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44414\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":243661,"size_decoded":45435,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e8a9b2127b0197d558dbbbcb99d80973","sha1":"cb793f12ac3b8f7ac9cc69c9581bc2dc5d439ad5","sha256":"cd5ab58bf994afd3ff9a1000a9a22c9619b08dda258ddb055e2d34bd41bd97e6","sha512":"b9f515fafb98229f2033351ad6c1d6dcad412908cdb5410cf72e227025c1e203ce6cf4175729f86e99953436e6b96060709de794da02046fd93e7e462003eebc","ssdeep":"3072:BFEr84Awjj03k4PV03C4PcpiXoLyEZn+3+6DvzZtpSBm6sRTbgQLcn4CQrixrb/f:BFNZgWPZn+3+6D9AH","tlshash":"d734bfebd63c9736a5e97b35968eb7cd1a8cbc93c848527826c3b54f53788e0706c205","first_seen":"2023-03-07T14:42:50Z","last_seen":"2026-09-13T12:51:47.971486Z","times_seen":2040,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}