{"report_id":"506ee169-c47a-4c92-a703-fc1af49307b5","version":0,"status":"done","tags":[],"date":"2026-07-07T02:19:40Z","url":{"schema":"https","addr":"bills-5xb.pages.dev/credit_ledger","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bills-5xb.pages.dev/ledger","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"title":"Nua-Bills","dom":{"size":17506,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (505)","md5":"ac66fef06700063efaa805f2af2b41f7","sha1":"0ef29f937ae1c8411e1840090a565ae1294551a7","sha256":"8a388034edbc2e5caf35133eaaed2cfd766d0a551cfa534698da3ca437d7a2e7","sha512":"dd76cd7072bdcb58a66399c6bc27ced4e0eeef18b6fc59cb114c1dbc2c4fa45d7122ae054fde438ba5602e7913250570a51b9c91308f01d1c2f462330c4e8062","ssdeep":"192:N16jLGGhNgCOq0bF/9Qx3yMYzdMD8uTGxzShQj7HcInEYDa0znea5f:N16XGGhNgCE/u3yMYKD8qG+IEYDdze0f","tlshash":"6472936420f8063b129390857ea66f1f7ec1d607da0a5a50b2bc0ff50fd7cd9c89b5a9","dom_hash":"domhash58a1a3e5a1da95f26e1872070cf98c8c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"bills-5xb.pages.dev/credit_ledger","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-11T02:19:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":7,"received_data":249583,"sent_data":4055,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":8,"received_data":37913,"sent_data":4298,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"api.nuaimi.us","ip":{"addr":"104.21.34.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":856,"sent_data":504,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"bills-5xb.pages.dev","ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-07-07T02:19:42.019357Z","last_seen":"2026-07-07T02:19:43.193901Z","alert_count":16,"request_count":16,"received_data":1767592,"sent_data":7841,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bills-5xb.pages.dev/credit_ledger","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3ff3fe0807ad87212d4c4c79661d58bf","sha1":"eaac4da3fe48f74286c17be7d34f4f2fd20cb952","sha256":"b24024eb519644244b2e7c152d4708fe5856015fb21d68a69f07b340767803cf","sha512":"2cc880874bccebeb9bfed2c46a24cedee2eb5b584d1519acc84ff8442e97e4d60082c6baa3889b5ecdb5509931851f2d6e4708d2e22fec5b43131cc7b4e661ae","ssdeep":"","tlshash":"c790044f3404054f11d5df1547c55110333344cd44c1500500003507101431f5715c4d","size":39,"data":"","first_seen":"2026-07-07T00:15:35.823567Z","last_seen":"2026-07-07T02:19:46.421748Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/js/jquery.min.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8e7cabd4d49dfaf0146678ee147dfc5","sha1":"b19b077cdc2cf89c66a644f0305ef4959f8472bc","sha256":"39a546ea9ad97f8bfaf5d3e0e8f8556adb415e470e59007ada9759dce472adaa","sha512":"f0b10d35b5e6cc8fc66e3f8ec179aa47a57841a500c34fe9a2b3f3cb5f9d42826a0b424f1de756a1ed030ce4cbdae1c0e575c9c88b0fb623071fcea95656b2e8","ssdeep":"1536:QmGY6OI1mwxklLhClYsosYKq8s1PS0dakYBF0fIZ5+ONtQCcq6RXu:Hgm1ClYsosU88PDf4wyN6RXu","tlshash":"d87309ddb2c6b06247a760b9407f950bf236194d384d8910f229e4e9bc74a4e827bf7d","size":78748,"data":"","first_seen":"2026-01-22T11:09:04.33239Z","last_seen":"2026-07-17T17:58:37.7581Z","times_seen":4182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/bootstrap/js/bootstrap.min.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe96f9dd36170e0e5cdf9aeee3a03e99","sha1":"fe23fd86049bf9b10e1a1b881652e9fb87ce8353","sha256":"c6f670216aedd2c61ec83102f7e40c1c44114eecd7f37b2edc332757390c386a","sha512":"06466f279ad9df36c30a8779b1e587a511a0f8f45de99804f0db9afce32d731aa6f16b60d0fab08545172b96eabe5de872532de4efb7ce34555f42fe2f68fb7c","ssdeep":"1536:oH5mi07eR2tgYR6ifTGqghZxBMzFhhX1fhKCywwPesX5L08j:yNwhh+CywwWsXZj","tlshash":"ed73d6593245b4730ade85e68037430bf2265898b64b812cb57cadde2a7dcc27277f78","size":80448,"data":"","first_seen":"2025-10-12T15:28:01.548191Z","last_seen":"2026-07-14T11:03:28.754029Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/js/auth-global.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fad4e6b249a229ae19a3d62a3e46f0e5","sha1":"892f4027dbdcd0cc1416513e97122e1b71f6c3be","sha256":"77ec470608fec4d1997ba0bc1a3a90aedac5300a79243b5baeb7930df6e610f2","sha512":"4246f633998a4766bab615b20cbed97801b7eef6155b8a669b7aa830492af7b2bcae20c8365890a070b4c6e8bbcb28d7aa78334ae7e53d516f6580e05aee20ba","ssdeep":"192:WpuvPCZ3aIfKzKpDSeDQzBCMXpM3FB7QUMB5LBDpsPY9CGBU9jSvEL:WpuvPCRabzkMZGFtMhDaGHY","tlshash":"6312648530f720124753b4ed26d7660536229017798edd01bbac87842faab1da9f7fcd","size":9365,"data":"","first_seen":"2026-07-07T00:15:35.815504Z","last_seen":"2026-07-07T02:19:46.410109Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/js/credit.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"440e73babdfc2b6c58f8655480b54f8d","sha1":"6859a38bcc30262e931dbf27ca18b51974069783","sha256":"df4b0f1e1423564f85c6c6b2059ed9c8a5ab00a0b7da1c13c41294678c4937b4","sha512":"39d55f7a7c30ab8808c5167e0235cdad92425debccb90b7d521d26f356111f87426393625d315d10a0a75531a08e6253ee10a12986b0072ccd1223a5a415309a","ssdeep":"768:rLLlKIk5CX4wheS1fPEwR3PGDvXitrpw/PCHyEBoDC/5:PLl1YCXF1fFROzDi7Bd5","tlshash":"cd03c7997cf515310eb7d5aaa69b1b4abc25d1037c42c8a83e8c58920fd6ca1c53fbdc","size":38318,"data":"","first_seen":"2026-07-07T02:19:46.42012Z","last_seen":"2026-07-07T02:19:46.42012Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/js/auth-global.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bills-5xb.pages.dev/credit_ledger","date":"2026-07-07T02:19:17.931Z","timestamp":1783390757931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/js/auth-global.js HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/credit_ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:17 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rq3%2F%2BXyU8aR%2FjSTQ61C3nIdtfZkUkrF6Hc0Nw5%2BHm5hjOWfLtzN1WsTDuYurOpuGId%2B1dP2GvS9cNGalEIg5QlRe%2FkAEvImk1OTblW%2BtWunTurfj%2BTeuXLd80mIVcAcWSdAWEpVV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"aadfc8b380dd9f291aa10ae1e32b3687\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d0d1acd49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9365,"size_decoded":3596,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fad4e6b249a229ae19a3d62a3e46f0e5","sha1":"892f4027dbdcd0cc1416513e97122e1b71f6c3be","sha256":"77ec470608fec4d1997ba0bc1a3a90aedac5300a79243b5baeb7930df6e610f2","sha512":"4246f633998a4766bab615b20cbed97801b7eef6155b8a669b7aa830492af7b2bcae20c8365890a070b4c6e8bbcb28d7aa78334ae7e53d516f6580e05aee20ba","ssdeep":"192:WpuvPCZ3aIfKzKpDSeDQzBCMXpM3FB7QUMB5LBDpsPY9CGBU9jSvEL:WpuvPCRabzkMZGFtMhDaGHY","tlshash":"6312648530f720124753b4ed26d7660536229017798edd01bbac87842faab1da9f7fcd","first_seen":"2026-07-07T00:15:35.815504Z","last_seen":"2026-07-07T02:19:46.410109Z","times_seen":2,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/ledger","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:19:18.321Z","timestamp":1783390758321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /ledger HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/credit_ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kdINvMeW%2FXiA5yUb1RY%2FSrCCXI8QJszNauNf%2BW4Am5rnta%2Fq2%2BA3bMpKruENusNCL2JqlyqpkWu1BaGtFoY15rBzeS4w0gS%2BvewHxmE8bsGp7VWTyEd4hLWdOXtkpyGKnhcnfqt6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d0f8df449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17528,"size_decoded":5080,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (505)","md5":"08fae55cf34dcc774987deb1fb69451f","sha1":"bba73e3e17247bb613c8ce6db56d0f5e909a6b49","sha256":"a12e210b2464cb7b1bcb6ffd41abf8c5eda83cb0bca0089bb7fc3772b8e68a2a","sha512":"8839f1d4d6816eb2451887ab20b2a79072e92ba5ba0c5b959a56d3771a492ea47afae451f566f84e873b17dc82f102ea157f65a045a2a34e1982140df54aecc3","ssdeep":"384:p1oXGGhNgCE/udyMYiebqG+IEYDdze0AM:pONUE0e0j","tlshash":"5b72a4a420f8053b125390857ea66f1f7ec1d607da0a5a50b2bc0ff50fd7cd9c89b5a9","first_seen":"2026-07-07T02:19:46.41074Z","last_seen":"2026-07-07T02:19:46.41074Z","times_seen":1,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.673Z","timestamp":1783390758673,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bills-5xb.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 10:40:24 GMT\r\nexpires: Mon, 05 Jul 2027 10:40:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 142734\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-17T21:52:41.554133Z","times_seen":23628,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.676Z","timestamp":1783390758676,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bills-5xb.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 10:40:24 GMT\r\nexpires: Mon, 05 Jul 2027 10:40:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 142734\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-17T21:52:41.554133Z","times_seen":23628,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/bootstrap/js/bootstrap.min.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bills-5xb.pages.dev/credit_ledger","date":"2026-07-07T02:19:17.930Z","timestamp":1783390757930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/credit_ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:17 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2FooGxYWL3Y3nFp3wOH89OX%2Buq052kyejPoQRfJfIVsITHDRNbtKteH1m1C5eb61RKdmYYyfkRfvWrr5x4jHvzqb5m1kgZAmOUEmJv4G0lkb7SvdjweSGUz8ZGn9ju4YozbRof5f\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8e67fe957a3fadad12aba6510da8bb99\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d0d1ac749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80448,"size_decoded":25231,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"fe96f9dd36170e0e5cdf9aeee3a03e99","sha1":"fe23fd86049bf9b10e1a1b881652e9fb87ce8353","sha256":"c6f670216aedd2c61ec83102f7e40c1c44114eecd7f37b2edc332757390c386a","sha512":"06466f279ad9df36c30a8779b1e587a511a0f8f45de99804f0db9afce32d731aa6f16b60d0fab08545172b96eabe5de872532de4efb7ce34555f42fe2f68fb7c","ssdeep":"1536:oH5mi07eR2tgYR6ifTGqghZxBMzFhhX1fhKCywwPesX5L08j:yNwhh+CywwWsXZj","tlshash":"ed73d6593245b4730ade85e68037430bf2265898b64b812cb57cadde2a7dcc27277f78","first_seen":"2025-10-12T15:28:01.548191Z","last_seen":"2026-07-14T11:03:28.754029Z","times_seen":182,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.674Z","timestamp":1783390758674,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/jetbrainsmono/v24/tDbv2o-flEEny0FZhsfKu5WU4zr3E_BX0PnT8RD8yKwBNntkaToggR7BYRbKPxDcwg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bills-5xb.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 31432\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 06:03:31 GMT\r\nexpires: Fri, 02 Jul 2027 06:03:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 418547\r\nlast-modified: Wed, 10 Sep 2025 16:52:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":31432,"size_decoded":32245,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31432, version 1.0","md5":"b636a65da4f00129f08c7df6e5dd75ac","sha1":"4f27206c4b1caf8b7805597fcbc6922ff5805daa","sha256":"83c005d49d8a6a50474c73a5a36ac0468076e9c4a29da7bdb14995d80560a5be","sha512":"77ad92edddd5fc9ce47b8b329cf41b2fec895ea01a97b9122df3766163998fadcbe47c868631208636c4e587136ddd390d38e3e9da2743758c9da2c77a66f859","ssdeep":"768:a8+AGQwBrw24YHLKRG5lBF260n1e5vhjJKWWAD95I9Puggtx:B+AiBrw2fHL+GyvYtYADM9Pug0x","tlshash":"52e2f274ea41ca57676335ed4203e99d015fa318ebf6fd40869ccad2a506bcb7c4033a","first_seen":"2024-10-21T03:03:54.505463Z","last_seen":"2026-07-17T21:20:49.339564Z","times_seen":10269,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/img/logo.png","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.841Z","timestamp":1783390758841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 430509\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e3f3a5e1aca0726dc096bb8b8c3512df\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NJTUwB2iuKvW2QEItb16CeZFOqc8G3M3L9w75K1Equ1OxV3RLVrICHEWCDaL0dDIXGbj49VG6JzMxrZ1KCWEhvQpMxusfQ33ZEsavMQYMXafyj%2FZOgBxFVJPqjncMiOunIjO0O%2Bm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a1735d12c91349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430509,"size_decoded":431266,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"63b6374c96a128818eda1909d0aa3f5c","sha1":"d8a196b99f5dcf6c9e5c5387bbe0314d3ec8b6b4","sha256":"83c82ed943b88a17c375eea2009b903929689157c16a5953725d65ba97790273","sha512":"6de264d29298c0d343032057dc773e2ac8b24123aa3748daaa0cb06a991770e402e00ac11c32a541194f8f51afaeae70a59bfa314260be7694d9581a14669bd7","ssdeep":"12288:TgcpLIIYTf2hmPa39mcI/3PWF5LC9Q8zj:Mc1IIfhD9m1GF5izj","tlshash":"e69423d939c113f1068566d20b5dee9214e7301ecc40bda36ef8fa8ebf696731923489","first_seen":"2026-07-07T00:15:35.822617Z","last_seen":"2026-07-07T02:19:46.413409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/img/logo.png","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.842Z","timestamp":1783390758842,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/img/logo.png HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-type: image/png\r\ncontent-length: 430509\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e3f3a5e1aca0726dc096bb8b8c3512df\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ESW2DGN2UBWlH1J4XEUwCjiFkI3q8nzYZFRjSxJbBQTNA40nVVqq%2Bd0JjFR0KmggsQuXh%2Bb7M0StVxnpaIMse1aChisxIl7mfJcQjHmoxN92Jr7%2Bugz%2B1oRrq6ICfvo4vY1IEmjC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a1735d12c91749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430509,"size_decoded":431270,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"63b6374c96a128818eda1909d0aa3f5c","sha1":"d8a196b99f5dcf6c9e5c5387bbe0314d3ec8b6b4","sha256":"83c82ed943b88a17c375eea2009b903929689157c16a5953725d65ba97790273","sha512":"6de264d29298c0d343032057dc773e2ac8b24123aa3748daaa0cb06a991770e402e00ac11c32a541194f8f51afaeae70a59bfa314260be7694d9581a14669bd7","ssdeep":"12288:TgcpLIIYTf2hmPa39mcI/3PWF5LC9Q8zj:Mc1IIfhD9m1GF5izj","tlshash":"e69423d939c113f1068566d20b5dee9214e7301ecc40bda36ef8fa8ebf696731923489","first_seen":"2026-07-07T00:15:35.822617Z","last_seen":"2026-07-07T02:19:46.413409Z","times_seen":2,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.669Z","timestamp":1783390758669,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bills-5xb.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 433847\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-17T21:41:22.62072Z","times_seen":237936,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/bootstrap/css/bootstrap.min.css","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/credit_ledger","date":"2026-07-07T02:19:17.917Z","timestamp":1783390757917,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/credit_ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=miMjaV73pEIt8MI5n0wrVRiNerspVwONLqL75XHqKtXpd8050RPb2SVXtrrIBdq%2Bfkigi5zxdR0Y1EcPv1AetcT48Key9U7HzqcvdLFBEE4qZq3rvnD%2B5qqApsOnG%2BiCndAgQcx8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ba2ac32edb30b1c23f78dd3bbb1bc5b2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d0cfaa849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232066,"size_decoded":33819,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"6032a13145bb5c6be596e0dac4aa910b","sha1":"072ca2c2d635d735b5e975c129971301fbf09038","sha256":"8f8173cb2d8f867274aeb0cb15328e60f490c7f272351e51a55f1dabb486e4ff","sha512":"c27c7f0314304955dfe2cc07ab7a760dcdc537774f6fa19cde1fe133a01c4930d56ab77ff1efb26882e197b8f2820051bbcc6c10edf2e25103048a031a65e86b","ssdeep":"1536:i9NnXGi9GfJkfvq5wlP7cQZDR9uRV982sYRElV6V6pz600I41K:EnXp9GfVV98II6V6pz600I41K","tlshash":"a33482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-10-12T15:28:01.50785Z","last_seen":"2026-07-14T11:03:28.750426Z","times_seen":176,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/credit_ledger","date":"2026-07-07T02:19:17.926Z","timestamp":1783390757926,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /css2?family=Space+Grotesk:wght@600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.414Z","timestamp":1783390758414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Jul 2026 02:19:18 GMT\r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2576,"size_decoded":1155,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"ed3efd5165e73f412d2d00e5bc815bd1","sha1":"3e25c7e447ebe54cdcfc4bf076092ba11c1f47d9","sha256":"fac9b12e5535995b0cd3ed87a3eb3c579d3242165d21c716da0832985841f560","sha512":"04f14238f9b2f55d836200665502cae40067ce0174e20ed17870e5c3800ee26a29de862abde90ed0fb25fd099e1959e4a0e6f3df218d25ad90e0c3ec4628e283","ssdeep":"","tlshash":"4d510292006ba500eb635cc226cdbe32be8fe1556050da396ffe1898dc9fc311311b2d","first_seen":"2025-12-01T23:52:32.280604Z","last_seen":"2026-07-07T02:19:46.415432Z","times_seen":11,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/css/styles.css","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.417Z","timestamp":1783390758417,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/css/styles.css HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LpqnKZHn0hOpOjkrs3GLecRhw9hYjV4cXRXBbOk9gxTAGyXZWsNFhYesN3ROOxSLMJh6jzKZlvXaD90ATblqCDXgmmiIGdAC3Bvxfkz7IfDGuafDm63Ha4i8CKi13JPqJNvFAtiZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c8dd3e9a1aeb2a50308601fcaad2235a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d101e8349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17282,"size_decoded":4963,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"8f10cf5d5ad26acf005a1b2e1056e9c6","sha1":"7f28fcbb4035e77cfd9926e3d15f66f29d418da9","sha256":"43db85c64c91c7dbfec934cb18b817b74e302a86781b442adb62f43b10a072da","sha512":"550033aea36d39c8eb04ddad45280954747b4f265c255b21767ded7844033696e30718c9c76e28198d0faac70d5d39e85962f83ee608d833eae32eeb569f8be9","ssdeep":"192:UqWmB/XCiIpEvsCRJ2TQ2KuYeFwB+Zr8y2aq/gSAGbRLbNfzaYyoSZZZVAvfOccp:UC/Cj+NOYeF6cIyWc4RLPp5J0F61U7","tlshash":"3f7231d236b455a8792be66437ab9b6a338d6542810fcef87ed4104c5f8c3fa0152f8c","first_seen":"2026-07-07T02:19:46.415943Z","last_seen":"2026-07-07T02:19:46.415943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/css/styles.css","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/credit_ledger","date":"2026-07-07T02:19:17.927Z","timestamp":1783390757927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/css/styles.css HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/credit_ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MF%2BnaVuFBl9ZIkp%2F5gzDvxnmMxQfFFbyJJJeC89MXKXs6MyH8wgJv5FbKpOAdE%2FocLE1NC%2BLdQM6Uqu%2BNK2cHH1biloH2xb4q7xtJF0%2BuDuAHh9OLvZXoV%2BQ3cc8BJjipCta9J2u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c8dd3e9a1aeb2a50308601fcaad2235a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d0d0ac049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17282,"size_decoded":4980,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"8f10cf5d5ad26acf005a1b2e1056e9c6","sha1":"7f28fcbb4035e77cfd9926e3d15f66f29d418da9","sha256":"43db85c64c91c7dbfec934cb18b817b74e302a86781b442adb62f43b10a072da","sha512":"550033aea36d39c8eb04ddad45280954747b4f265c255b21767ded7844033696e30718c9c76e28198d0faac70d5d39e85962f83ee608d833eae32eeb569f8be9","ssdeep":"192:UqWmB/XCiIpEvsCRJ2TQ2KuYeFwB+Zr8y2aq/gSAGbRLbNfzaYyoSZZZVAvfOccp:UC/Cj+NOYeF6cIyWc4RLPp5J0F61U7","tlshash":"3f7231d236b455a8792be66437ab9b6a338d6542810fcef87ed4104c5f8c3fa0152f8c","first_seen":"2026-07-07T02:19:46.415943Z","last_seen":"2026-07-07T02:19:46.415943Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/ledger.html","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:19:18.306Z","timestamp":1783390758306,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /ledger.html HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/credit_ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-length: 0\r\nlocation: /ledger\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EjSzuiS37h02WQA%2FoUth3dvDywxBg%2F8%2Bc8TLbs36TJgwXcaZp8ekXFEeudTKDJAKSk%2B4h5VSqSXs%2FRVqFLIZdL9MW1peoZQbtENJpUFoGFWYoOiGC5Y1S6sGf7itjYNIjr9SYTo2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-ray: a1735d0f6dd949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/js/auth-global.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.422Z","timestamp":1783390758422,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/js/auth-global.js HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNGMZfEkXrABKbILJSW5g4dFtqLMwI6Eoxj%2BwXIZNuqlcOuycZwYkE%2B%2Fw3EDkcqQ5kS1KotjHVuXkd7cmc7aW8UFKOaG69c4iFw8ee1MOC68B3fQPjUkoNy9pJ9esr2nJ3ralLpn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"aadfc8b380dd9f291aa10ae1e32b3687\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d102e8749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9365,"size_decoded":3594,"mime_type":"application/x-javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"fad4e6b249a229ae19a3d62a3e46f0e5","sha1":"892f4027dbdcd0cc1416513e97122e1b71f6c3be","sha256":"77ec470608fec4d1997ba0bc1a3a90aedac5300a79243b5baeb7930df6e610f2","sha512":"4246f633998a4766bab615b20cbed97801b7eef6155b8a669b7aa830492af7b2bcae20c8365890a070b4c6e8bbcb28d7aa78334ae7e53d516f6580e05aee20ba","ssdeep":"192:WpuvPCZ3aIfKzKpDSeDQzBCMXpM3FB7QUMB5LBDpsPY9CGBU9jSvEL:WpuvPCRabzkMZGFtMhDaGHY","tlshash":"6312648530f720124753b4ed26d7660536229017798edd01bbac87842faab1da9f7fcd","first_seen":"2026-07-07T00:15:35.815504Z","last_seen":"2026-07-07T02:19:46.410109Z","times_seen":2,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/credit_ledger","date":"2026-07-07T02:19:17.920Z","timestamp":1783390757920,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /css2?family=Space+Grotesk:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/credit_ledger","date":"2026-07-07T02:19:17.924Z","timestamp":1783390757924,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Jul 2026 02:19:17 GMT\r\ndate: Tue, 07 Jul 2026 02:19:17 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9944,"size_decoded":1443,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6b87154d4422bf26318b04dd38a89bab","sha1":"00a1c95feec9c7d7efb32e1f926bab0566869927","sha256":"9b25e1d2d2c49707db9a0861173516d0df18b23405dbb3ad18267fcdfbb05d44","sha512":"394a40448bd83c157d18e5c6881463ccd3e7a90c53eb7919acdc3094fdfc545b3b76322f5fb5595193c64ba21f3621dcd56740e9312a2bdd6bacc7749559b8f4","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCFGbep3g5XxV:fOGC6CmOW","tlshash":"8122dce1001a8404aa472cda73cfbe356d8ea1072085e5facbff19985daac76633475d","first_seen":"2025-09-12T17:51:23.081191Z","last_seen":"2026-07-17T14:41:41.70354Z","times_seen":978,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":1,"connect":15,"send":0,"wait":33,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/js/jquery.min.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bills-5xb.pages.dev/credit_ledger","date":"2026-07-07T02:19:17.928Z","timestamp":1783390757928,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/credit_ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:17 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aoGfo%2Fegm0rmi6ohUOQey4zqMbT6%2B%2FNBawrrNuLu0LXLddXFTXgS8%2FCrR4VOIbve2%2BaXYHkC9H2cTPE4ZOQegkd4oxKj0cXcmHuL1pgVo5xKWbn5h39yIgUWDcWP3OpdBlK6NkIG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a045e4cb20de8f189025c1f23394c8e4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d0d0ac449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78748,"size_decoded":29224,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"a8e7cabd4d49dfaf0146678ee147dfc5","sha1":"b19b077cdc2cf89c66a644f0305ef4959f8472bc","sha256":"39a546ea9ad97f8bfaf5d3e0e8f8556adb415e470e59007ada9759dce472adaa","sha512":"f0b10d35b5e6cc8fc66e3f8ec179aa47a57841a500c34fe9a2b3f3cb5f9d42826a0b424f1de756a1ed030ce4cbdae1c0e575c9c88b0fb623071fcea95656b2e8","ssdeep":"1536:QmGY6OI1mwxklLhClYsosYKq8s1PS0dakYBF0fIZ5+ONtQCcq6RXu:Hgm1ClYsosU88PDf4wyN6RXu","tlshash":"d87309ddb2c6b06247a760b9407f950bf236194d384d8910f229e4e9bc74a4e827bf7d","first_seen":"2026-01-22T11:09:04.33239Z","last_seen":"2026-07-17T17:58:37.7581Z","times_seen":4182,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Space+Grotesk:wght@500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.408Z","timestamp":1783390758408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Space+Grotesk:wght@500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Jul 2026 02:19:18 GMT\r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3864,"size_decoded":1174,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"887070f9d897c32f30006915e8397790","sha1":"4e84edd733f07cc0379463ea1d2a0cb68b2fe699","sha256":"623f776fec7513d8a8981fd306ca9c7dbf4c42dc95d5d3c0a556f14d5f710034","sha512":"70cc24caa9b3e8620a5e38837159dbfeaf0909235e63cc3d32707febc644e8a2235c4f5af635ae5d35b5c9a6837aaca8e514b300d3e260dc45649c124ea36751","ssdeep":"","tlshash":"3781e09200669500eb635cc226cdbe32be8ea1556050da396ffe1498dd9ec311311b2d","first_seen":"2025-12-19T05:26:05.619539Z","last_seen":"2026-07-14T05:46:29.030494Z","times_seen":25,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.411Z","timestamp":1783390758411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Jul 2026 02:19:18 GMT\r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1385,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-07-17T21:22:46.161057Z","times_seen":8761,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.412Z","timestamp":1783390758412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:02 GMT","end":"Mon, 07 Sep 2026 08:41:01 GMT"},"fingerprint":{"sha1":"FD:DA:E1:3E:1F:AC:E0:96:14:ED:37:58:30:0F:ED:9D:B4:5E:F1:EF","sha256":"7D:36:0C:A4:14:F6:05:8D:F4:E1:CD:BF:84:A7:03:AD:3F:C4:93:AE:B3:D6:7E:99:CB:92:D7:1F:29:A1:49:A4"}}},"request":{"raw":"GET /css2?family=JetBrains+Mono:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Jul 2026 02:19:18 GMT\r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9944,"size_decoded":1423,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6b87154d4422bf26318b04dd38a89bab","sha1":"00a1c95feec9c7d7efb32e1f926bab0566869927","sha256":"9b25e1d2d2c49707db9a0861173516d0df18b23405dbb3ad18267fcdfbb05d44","sha512":"394a40448bd83c157d18e5c6881463ccd3e7a90c53eb7919acdc3094fdfc545b3b76322f5fb5595193c64ba21f3621dcd56740e9312a2bdd6bacc7749559b8f4","ssdeep":"192:uG+7p3ZAXYjG9Up3qnXfmG0dp3HKXCFGbep3g5XxV:fOGC6CmOW","tlshash":"8122dce1001a8404aa472cda73cfbe356d8ea1072085e5facbff19985daac76633475d","first_seen":"2025-09-12T17:51:23.081191Z","last_seen":"2026-07-17T14:41:41.70354Z","times_seen":978,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.640Z","timestamp":1783390758640,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/spacegrotesk/v22/V8mDoQDjQSkFtoMM3T6r8E7mPbF4Cw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bills-5xb.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 22288\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 05 Jul 2026 10:40:24 GMT\r\nexpires: Mon, 05 Jul 2027 10:40:24 GMT\r\ncache-control: public, max-age=31536000\r\nage: 142734\r\nlast-modified: Thu, 04 Sep 2025 17:26:34 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":22288,"size_decoded":23101,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 22288, version 1.0","md5":"87c506d88b9f587f0e2292bc271f5083","sha1":"c0781ea2f29013826dc1eb8db40f4d400d9df710","sha256":"0640890476fc1198ab4de571fb658de443c4d85b66466ec09534a8737ab1ce9d","sha512":"25171eb14ce4c75ccfdb6f1c2a7de82182fd8d3d79cfa108df2d0e015e4ac84678ad97fdf90cff2ac2f24934531fcca3289343129687f176f21964ce5cd01b02","ssdeep":"384:TB/NWnO5qgQvU7gd7EeEX5qPOJO4FqaCEuAsCyzvDfxPdjuHsrC:TBlo1vUsvZqO4MAsCKrxxuMrC","tlshash":"8aa2e15b3f6bde211a27aebf4fc957b0a3ac6c1db2dd2712c198b104408962cc5d5ce6","first_seen":"2025-09-05T05:08:09.568652Z","last_seen":"2026-07-17T21:52:41.554133Z","times_seen":23628,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/credit_ledger","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-07T02:19:17.371Z","timestamp":1783390757371,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /credit_ledger HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:17 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iUwZQzIoNBr8bNuuniYWwFVJwBWyRCKmWvXPfG%2F%2BgdBF6cp9WqNJfipBlUBMgQSJxkhHW8u0plX75lWXc9%2Blg45t7PA2U7T2Jjv3CbZrOn4ODqJwFgU6J61PJ9IwlzMEzdlCz0Kz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d09ce9c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2763,"size_decoded":1550,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"6ccf43379717629e7ba5810d8debfa90","sha1":"8b268aa93f543db0415322580430dcdf79fdb388","sha256":"1a0ff3947c1e1db1c3e38e1d97378f95be1cf45d277b5aaabd283cc8e57f0ab1","sha512":"0c36f1267370705c1588a259d94418f9cb61011fab5fe2e93396e46736046d1c879ffed31707429720a8d280a996870b9724d3a06d24aebe278097e72f437a57","ssdeep":"","tlshash":"215164c710d4884b1200a655ac67bd1c99830107539cadb4f47e5c3aafbaf5e8477ebd","first_seen":"2026-07-07T00:15:35.812796Z","last_seen":"2026-07-07T02:19:46.418943Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":11,"connect":16,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/credit_ledger","date":"2026-07-07T02:19:17.922Z","timestamp":1783390757922,"http_version":"HTTP/3","security_state":"secure","security_info":null,"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Jul 2026 02:19:18 GMT\r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-17T21:40:26.917758Z","times_seen":17323568,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/js/credit.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.424Z","timestamp":1783390758424,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/js/credit.js HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j6lb1azkKKkh1%2B5dEs4GrFRzFlPx0DnwOyTNAvIJAgwYy%2F6vNVznI2RSgyeQ9bxnGSDeopA%2FDQE9YN6B73AgsK3BeCZt%2F%2BQlSZwZ8yALdQuDn5GWPOHWEKIAq82FL2tTAfT9QQMs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"98394a829eeda48f9c23507f00a2b746\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d102e8949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38318,"size_decoded":10813,"mime_type":"application/x-javascript","magic":"Unicode text, UTF-8 text","md5":"440e73babdfc2b6c58f8655480b54f8d","sha1":"6859a38bcc30262e931dbf27ca18b51974069783","sha256":"df4b0f1e1423564f85c6c6b2059ed9c8a5ab00a0b7da1c13c41294678c4937b4","sha512":"39d55f7a7c30ab8808c5167e0235cdad92425debccb90b7d521d26f356111f87426393625d315d10a0a75531a08e6253ee10a12986b0072ccd1223a5a415309a","ssdeep":"768:rLLlKIk5CX4wheS1fPEwR3PGDvXitrpw/PCHyEBoDC/5:PLl1YCXF1fFROzDi7Bd5","tlshash":"cd03c7997cf515310eb7d5aaa69b1b4abc25d1037c42c8a83e8c58920fd6ca1c53fbdc","first_seen":"2026-07-07T02:19:46.42012Z","last_seen":"2026-07-07T02:19:46.42012Z","times_seen":1,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.662Z","timestamp":1783390758662,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bills-5xb.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 433847\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-17T21:41:22.62072Z","times_seen":237936,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.672Z","timestamp":1783390758672,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 08:41:01 GMT","end":"Mon, 07 Sep 2026 08:41:00 GMT"},"fingerprint":{"sha1":"01:31:A1:A6:4F:08:45:E1:F0:0B:CE:B1:B8:D8:61:D7:D1:70:ED:6F","sha256":"29:C5:5D:01:47:6E:72:F7:2C:CC:0B:96:BB:67:BA:39:CC:03:11:EB:7B:47:F5:3F:CC:DE:12:AC:68:07:A1:BA"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bills-5xb.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Jul 2026 01:48:31 GMT\r\nexpires: Fri, 02 Jul 2027 01:48:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 433847\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-07-17T21:41:22.62072Z","times_seen":237936,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.nuaimi.us/users/me","fqdn":"api.nuaimi.us","domain":"nuaimi.us","tld":"us"},"ip":{"addr":"104.21.34.152","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.760Z","timestamp":1783390758760,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nuaimi.us","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 26 May 2026 10:57:16 GMT","end":"Mon, 24 Aug 2026 11:57:11 GMT"},"fingerprint":{"sha1":"96:9B:A2:E0:D7:0E:68:C4:9C:BB:ED:75:F1:FB:EB:5B:12:91:56:E5","sha256":"B1:CE:53:C5:24:C2:2D:6B:C2:37:48:2B:2B:D0:27:5F:01:0B:FD:18:D8:3B:18:A6:08:0F:BC:B3:84:F4:FB:D9"}}},"request":{"raw":"GET /users/me HTTP/1.1\r\nHost: api.nuaimi.us\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/\r\nOrigin: https://bills-5xb.pages.dev\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 401 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\nserver-timing: cfExtPri\r\ncontent-type: text/plain;charset=UTF-8\r\nserver: cloudflare\r\naccess-control-allow-origin: https://nuaimi.us\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Content-Type, Authorization\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-max-age: 86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qUFXK%2Bw5vSIPF%2FCahJzMTr50w5jjDsetPnmEKiAsCH811NGZw03MK8fKwUDxNuPnTeP%2BTDy2czUyLuNAeQ1ylqDqPGJvjUzl5VryJaZUrXNsiBOaRLgZ0oNR3jngw4W5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a1735d127df3c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40,"size_decoded":856,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"aa95ad29c374abfc43dafa7672468861","sha1":"15403a57825b7d17fb321e2be5b9b034fb22c530","sha256":"71a00434e128051d5e330d4fd663ee42df2508218808d4509c4591ef34b7eca4","sha512":"35e173345a63c32ea3b4c32ac5a995316d207e2a018880d8c9d0a80025659643e7e09ba891813cc6f9f18b57d6e96276e3640e8e211333b02e7cc8376e651902","ssdeep":"","tlshash":"07900405054401df74011104551c0c1155c0c0fcd1101c17c514c11d55c30c55451405","first_seen":"2023-08-05T08:25:35Z","last_seen":"2026-07-17T14:39:11.700389Z","times_seen":69,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":16,"connect":18,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/js/jquery.min.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.418Z","timestamp":1783390758418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1O4i4%2FbGPg2%2BIOXfeh7BzkRT%2BVXTj5b8IfpEBC%2B3PxRb%2FGvTnT40%2FkObb4SwcmLp7uFhbXLupdOdHEw4h2LVWl2Kky6MYhIS0FW%2Feryty5UBHGKIVDOrU9f4nzQOhYThRmfgD2X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a045e4cb20de8f189025c1f23394c8e4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d101e8549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78748,"size_decoded":29220,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"a8e7cabd4d49dfaf0146678ee147dfc5","sha1":"b19b077cdc2cf89c66a644f0305ef4959f8472bc","sha256":"39a546ea9ad97f8bfaf5d3e0e8f8556adb415e470e59007ada9759dce472adaa","sha512":"f0b10d35b5e6cc8fc66e3f8ec179aa47a57841a500c34fe9a2b3f3cb5f9d42826a0b424f1de756a1ed030ce4cbdae1c0e575c9c88b0fb623071fcea95656b2e8","ssdeep":"1536:QmGY6OI1mwxklLhClYsosYKq8s1PS0dakYBF0fIZ5+ONtQCcq6RXu:Hgm1ClYsosU88PDf4wyN6RXu","tlshash":"d87309ddb2c6b06247a760b9407f950bf236194d384d8910f229e4e9bc74a4e827bf7d","first_seen":"2026-01-22T11:09:04.33239Z","last_seen":"2026-07-17T17:58:37.7581Z","times_seen":4182,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/bootstrap/js/bootstrap.min.js","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.420Z","timestamp":1783390758420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2Bg5d7vBOHeKVQPTvVPqoHP1bkOe7C5M1tPHB%2FkVxeQW37RSnrbC%2FkMmj01xd7x3oUr6t5c2Ysrb2wc%2BZb6DlzFENMCeVk16LsAMkEl2dgJlEZxcjo%2BuJgNsj23%2Fcg9DvMH8sWw0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"8e67fe957a3fadad12aba6510da8bb99\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d102e8649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80448,"size_decoded":25241,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"fe96f9dd36170e0e5cdf9aeee3a03e99","sha1":"fe23fd86049bf9b10e1a1b881652e9fb87ce8353","sha256":"c6f670216aedd2c61ec83102f7e40c1c44114eecd7f37b2edc332757390c386a","sha512":"06466f279ad9df36c30a8779b1e587a511a0f8f45de99804f0db9afce32d731aa6f16b60d0fab08545172b96eabe5de872532de4efb7ce34555f42fe2f68fb7c","ssdeep":"1536:oH5mi07eR2tgYR6ifTGqghZxBMzFhhX1fhKCywwPesX5L08j:yNwhh+CywwWsXZj","tlshash":"ed73d6593245b4730ade85e68037430bf2265898b64b812cb57cadde2a7dcc27277f78","first_seen":"2025-10-12T15:28:01.548191Z","last_seen":"2026-07-14T11:03:28.754029Z","times_seen":182,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bills-5xb.pages.dev/assets/bootstrap/css/bootstrap.min.css","fqdn":"bills-5xb.pages.dev","domain":"bills-5xb.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.103","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bills-5xb.pages.dev/ledger","date":"2026-07-07T02:19:18.406Z","timestamp":1783390758406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bills-5xb.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Jul 2026 17:30:33 GMT","end":"Sat, 03 Oct 2026 18:28:52 GMT"},"fingerprint":{"sha1":"D3:94:73:C9:64:A6:50:BD:FB:F9:A4:1D:A5:20:FE:AA:B0:A3:3B:05","sha256":"64:DB:8D:AF:91:40:E7:3D:EC:2A:6A:12:AF:86:00:5A:47:B3:E9:0E:D8:72:5C:C0:7F:AC:4F:60:2E:23:F5:6F"}}},"request":{"raw":"GET /assets/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: bills-5xb.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bills-5xb.pages.dev/ledger\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Tue, 07 Jul 2026 02:19:18 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QL%2B6l1FkHltLVVYVD%2F2bBbXyed5PBlpZNalQ843GL2AtX1oT%2Fntr55Er83bPdaPaT73U2D5q2PAJSpIxYhe8qbHiRtu4XG6ScRl05YgTC7AGPH52kzJjQlmzXW3ISvGxlT2%2BFHuN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"ba2ac32edb30b1c23f78dd3bbb1bc5b2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a1735d100e7749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232066,"size_decoded":33810,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"6032a13145bb5c6be596e0dac4aa910b","sha1":"072ca2c2d635d735b5e975c129971301fbf09038","sha256":"8f8173cb2d8f867274aeb0cb15328e60f490c7f272351e51a55f1dabb486e4ff","sha512":"c27c7f0314304955dfe2cc07ab7a760dcdc537774f6fa19cde1fe133a01c4930d56ab77ff1efb26882e197b8f2820051bbcc6c10edf2e25103048a031a65e86b","ssdeep":"1536:i9NnXGi9GfJkfvq5wlP7cQZDR9uRV982sYRElV6V6pz600I41K:EnXp9GfVV98II6V6pz600I41K","tlshash":"a33482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-10-12T15:28:01.50785Z","last_seen":"2026-07-14T11:03:28.750426Z","times_seen":176,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-07","alert":"Sinkholed","trigger":"bills-5xb.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}