{"report_id":"51412867-8079-4d13-a76b-c6ea1a63104e","version":6,"status":"done","tags":[],"date":"2026-02-17T14:17:02Z","url":{"schema":"http","addr":"take589.com","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"172.67.141.15","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"take589.com/","fqdn":"take589.com","domain":"take589.com","tld":"com"},"title":"2026 – Event – Brad GarIinghouse CEO–Medium","dom":{"size":128825,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12622)","md5":"b4f3410fb6a7c30424d0588b97e46418","sha1":"49b5d62ea3fdb18e6a00443ddfce1df3da1ee943","sha256":"efcbd642f120e6d5ef27ee84005cb9af3482a3a5c0c8855ae634c38c1402256b","sha512":"57fe121d96a84805094a93cb1ff024c22a58e228526303f133f75d53b4eedc3b50559b8b2affbc5885dfb25038110bafa0e6eb0b574b80278e18c74ed47ba99d","ssdeep":"3072:YvZU1CFFaTuuXqRTWEkAJ+QqRE79BI7BfQ7rgA7xLw735A70Co79Ko760A7t247O:/CNMnEECZqKCzMHB4Yi","tlshash":"9cc386a16e00227d020bcef7db277265f326e9bae6524490d9ad47f44bd7da1f80f841","dom_hash":"domhash0f45cf29147b4ebb4cd07b2f645e6945","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"take589.com","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"172.67.141.15","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-24T14:17:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"glyph.medium.com","ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-05-27","domain_rank":187209,"first_seen":"2017-08-01T13:23:25Z","last_seen":"2026-02-16T08:18:12.048503Z","alert_count":0,"request_count":2,"received_data":26657,"sent_data":1119,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn-images-1.medium.com","ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"1998-05-27","domain_rank":432231,"first_seen":"2015-07-26T08:44:52Z","last_seen":"2026-02-04T06:48:43.298125Z","alert_count":0,"request_count":2,"received_data":11767,"sent_data":1044,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"i.imgur.com","ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2009-01-09","domain_rank":3309,"first_seen":"2012-05-21T08:09:36Z","last_seen":"2026-02-11T16:34:40.816145Z","alert_count":0,"request_count":1,"received_data":39374,"sent_data":429,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"static.tumblr.com","ip":{"addr":"192.0.77.40","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2006-06-08","domain_rank":537463,"first_seen":"2013-08-05T11:14:48Z","last_seen":"2026-02-12T10:25:04.327026Z","alert_count":0,"request_count":2,"received_data":588530,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"take589.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-27","domain_rank":0,"first_seen":"2025-11-22T06:53:40.141895Z","last_seen":"2025-11-22T06:53:40.141895Z","alert_count":17,"request_count":17,"received_data":722555,"sent_data":7443,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"take589.com/","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8f619c585abef08e17ed0c3c51642561","sha1":"23e296970c4274d5246c113ebf8191049d19866b","sha256":"46fd786232f4f9f28c2795e4a4aa8b063453607b1321ffa3e5cf308b18ea8da0","sha512":"0bc484cf6f11be62fa6653fd63a3755d0799725b104c9226cc53a050b824ba0e7335d7b94f46fbc169a8774c3bf4a27d232701d719f5e9635ffb6ef3424624e7","ssdeep":"","tlshash":"44e0a7fd7453b114e0f728866bb7e8407c030457668bfd257d4ca840af94ac2d9817a0","size":298,"data":"","first_seen":"2023-03-11T14:23:52Z","last_seen":"2026-02-28T11:36:11.162969Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"efa3fc374944296b9c8e7c4fb337b66d","sha1":"54ef468844db88cc6c6454552a5e8e430bf71e33","sha256":"03c6eb71c10a400490613607510f69a301fa4a21a0288b9b885b24bda2275dcc","sha512":"b6093f14b19d48de312c5fc929efe497b35f81483b5407fd8df54a39b62e10e2678769cde92cb8cabfe8e6407494c9c1417d2f5ce00fb1e36fdccd48c5d460dd","ssdeep":"","tlshash":"b3b0125021028af800332e847dac83507c3d9480b64a2a02f0fc7402e070c035c42ee0","size":93,"data":"","first_seen":"2023-03-07T12:58:33Z","last_seen":"2026-02-28T11:36:11.164365Z","times_seen":42,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"take589.com/files/brad2.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/brad2.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 27244\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-6a6c\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tDgBWyGWlRtgTPcfey1CvjF5pg89B5p6UYYm6jQDwE3fmqMhEobVSzdggDt1LRnXXhvpF%2Br38AL5%2BAnrnK7Z3MFbe4ypactpCWU0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705e8a98b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27244,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"8f70d0662f3a21611678eb6ecd3fb33f","sha1":"420466a3c0e9d26a4223f3ef4e563ec1c6a46f33","sha256":"23e3ba952e005e5a0ac4f130741d98017a1033ca1fa5a95b2860dda26623f224","sha512":"702a0d244b03d21e62a43a8f0ba51ef649742f73bc911912f7f13c6161f679d56e5401203e1c44d55f41526923127efa77d193d321c2a095c18a58f2b20ec081","ssdeep":"384:s4enqYlw2/AnFO+gXm/2RDtK4eRt9YsA2HKjwifiPZrqmVqRkJ1X2L9xKOzqktLn:SVoI3WO76A2HbiKxrFVe2GLiOzqkREQ","tlshash":"62c2f18366ec8269d71ed8ba85995b3012583024bae39d1ca1a10c8f9bfc0f97d913e4","first_seen":"2023-11-20T18:09:47Z","last_seen":"2026-02-28T11:36:11.144217Z","times_seen":44,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/jack.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/jack.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 33481\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-82c9\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OerH6dgR0Zu1bDcD2GEZS%2FnAbA3sZ2GU8KTvOI%2BlmYp4tz6tHFcDcwJdG5WNGIcUuqmPTI5gnkVtWPktCr6XaXW%2F3v48G4ET4q2q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705e8b58b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33481,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"fd7b37997a9673f1b8e357b6b8a4be5d","sha1":"fe079718871ee4c2ac8ddd73ec00ccf5a07c3d2e","sha256":"4bce9718d0d37fe90db9f7930816455b16f82596f96c9e7cbc4c7e615def66b6","sha512":"1a69ab12710973493ed96e2e18030dc05c4538df5680427115d9a9317b55ce4d3d8844cdf2a06e8d64cc7ab0d8003c82b2b5fd725a80a505f41ecaa040c74bb9","ssdeep":"768:PkLat34oVYNKqX3EhA/VKDLmdht36N+guL:PkeJRVYwqXUm/ht36VuL","tlshash":"abe201c82e8a7fbdefc83d3120a66549b6156d30ebe20fa90c4ed095173c948de69d51","first_seen":"2025-05-27T11:15:00.590673Z","last_seen":"2026-02-28T11:36:11.158185Z","times_seen":17,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/eri.png","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.292Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/eri.png HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 114644\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-1bfd4\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fm53vUA8s40C9kVfOqRJOdLsc0BX5Lm0kw9HC9e6ti16%2FPwuLjwL0H6NCn3uArkswnSMDrhmUDdJM7VZA0fmNvfsHP4JsH07iO07\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705f8e68b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114644,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 270 x 270, 8-bit/color RGBA, non-interlaced","md5":"a9e0bfb426473bc5b037a54d57fc921a","sha1":"9993f9db2e5303edb0474bc5113a543ea2fed7bc","sha256":"4e9c938cbadfe141fcd6bcdb9b99007d82b122468fab826be3af5390323ba841","sha512":"103284e4a026b637cb3c96bb5cab0c1ffc266712957b5934be72b7530277123482d3422e335cd527a2e151550167d674a529d9302c16dcad9544b8c3727707fa","ssdeep":"3072:ee9mi174dTGDU2eXZYg5enjEpLyg+VzqVZke1JQug6An:f54dC9eXZl9+c1ql6An","tlshash":"fcb3121ffae956642c30dd1bb037f206d52ca1ac84c3f389731a525415b3badd0b5e6a","first_seen":"2025-05-27T11:15:00.575892Z","last_seen":"2026-02-28T11:36:11.152874Z","times_seen":17,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glyph.medium.com/font/f50d520/0-3j_4g_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/charter-700-normal.woff","fqdn":"glyph.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 19:40:05 GMT","end":"Sun, 12 Apr 2026 20:40:01 GMT"},"fingerprint":{"sha1":"C6:3A:AD:02:32:02:0B:35:F3:D3:8E:F7:AE:57:DC:F4:4A:81:7A:36","sha256":"19:26:F7:CE:FF:F0:BC:78:94:80:58:67:AE:57:08:BB:2D:4C:45:F1:59:7B:93:76:42:09:39:D9:A3:B7:47:DC"}}},"request":{"raw":"GET /font/f50d520/0-3j_4g_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/charter-700-normal.woff HTTP/1.1\r\nHost: glyph.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://take589.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.tumblr.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: application/font-woff\r\ncf-ray: 9cf5e707fa521a30-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cache-Control, Content-Type, Cookie, DNT, Origin, User-Agent, X-Client-Date, X-Obvious-Cid, X-Opentracing, X-Xsrf-Token, ot-tracer-sampled, ot-tracer-spanid, ot-tracer-traceid\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=31536000\r\netag: v2-f50d520\r\nexpires: Wed, 17 Feb 2027 14:16:25 GMT\r\nx-envoy-upstream-service-time: 66\r\ncf-cache-status: HIT\r\nage: 13\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=LJH.0RZ0jfZxT5l5dI6D3kP1UeK0xYut5zj_FB0I7Sw-1771337785615-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9912,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 9912, version 0.0","md5":"d3bbbb1fafadd13d0421bea9fcf3644b","sha1":"2739559563b37109ea6bce389ccccabef3a73d29","sha256":"41532aec4c3a3a0747ca853b064ef7a96483a95798a6526974ec043997e2ccf9","sha512":"0beea971d8bd901f1615a4bb75f7f878569dcd58a75d0bd987b5d80ee8a09607bd1ab1c8baafc38e15a07b164aa8f720c99e7bd5e234a1a10bf3425b9061e990","ssdeep":"192:f3wwV3fFqGxIjgYog1wnzcRSZpVK+Kxjyxg8X+QmBaSLScUBEggDRQ:f3x1fF24gQzSypnGjyq8X00egngDK","tlshash":"6512a0f85f97d5c6c5951f702873fb1319c0b9c10ab9c2540776a8d8b9f2b821c4ee96","first_seen":"2023-04-18T03:45:43Z","last_seen":"2026-02-17T14:17:03.748263Z","times_seen":28,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/index_files/1UATD6Vui-5Xa4Vb2QAOtbg_002.png","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /index_files/1UATD6Vui-5Xa4Vb2QAOtbg_002.png HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FvEHDz9G%2BW6K8wAtbdfCYPENOhLggb6boxOOBxl45iDyY%2FK4PdSkiXMb6Uxy%2Bh8j1ISBuclm9riGOttbccTt6y%2BhZeteCTINO9XF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cf5e705e8ae8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"9d2ae7cdc4232fa111329202f1bcee7a","sha1":"859931af8e252b498c1c918266019907c4c50fda","sha256":"111b83a8e730497d70909985213811e22bebd99cba530fd96c15520fc9e37665","sha512":"fd455653ca22eea5f5fee79b6cc88c55cf6fdfb62b44a1c782427ece6d2a64a0e5bf693da03a614883d95635846cf208d8443ca5c470761c0548e2c3c5ab1710","ssdeep":"","tlshash":"fbd02b9e5083a2cb481315a039c555c6264c22f7a43a85e82d8ad887529897ecd9a69c","first_seen":"2026-02-17T14:16:34.90964Z","last_seen":"2026-02-17T14:17:03.749322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/chad.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.296Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/chad.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 25770\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-64aa\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Q%2Bw%2FGncmkyCfcoHkJuLo2d8Pt36yFyESHHe%2FX1gDxkyuNc5pj090lAUPzVl4LXj%2FNjOvde%2BwKlpQAQ1Zw7xr7fT4weNhNdcQxcG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705f8f38b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25770,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 371x371, components 3","md5":"32baa7aebc7af94ebdd684123d52a7c4","sha1":"a2321724aaf4e0fdf6dbcccee9669f5d746c5ab1","sha256":"bcb499ff6fe4aaf2a9965460e519f26e1a66a603b9c89703598c0b8a41330f55","sha512":"8383f70225b35326c16fac435a826ce8a7057199ac7a70a2f047ff55372a028c9be5a8302d57e4c3c48c522d8e180559d76b51088796fdaebe69727184f700df","ssdeep":"384:spxZe6IKriis/d3SWS4gNdCtFV1tvYgI4ZfUrKqFdlZAWUCJp5p46RJIDUwu:GNOiMd3/g8FV8boUu2+WRzdJnF","tlshash":"2dc2e1993b056c56df3e1db4d0cab344d5e4061ab38b8ad3b1341b2e0fa8745d664cf9","first_seen":"2025-05-27T11:15:00.581871Z","last_seen":"2026-02-28T11:36:11.131652Z","times_seen":17,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-images-1.medium.com/v2/resize:fill:136:136/1*8I-HPL0bfoIzGied-dzOvA.png","fqdn":"cdn-images-1.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 19:40:05 GMT","end":"Sun, 12 Apr 2026 20:40:01 GMT"},"fingerprint":{"sha1":"C6:3A:AD:02:32:02:0B:35:F3:D3:8E:F7:AE:57:DC:F4:4A:81:7A:36","sha256":"19:26:F7:CE:FF:F0:BC:78:94:80:58:67:AE:57:08:BB:2D:4C:45:F1:59:7B:93:76:42:09:39:D9:A3:B7:47:DC"}}},"request":{"raw":"GET /v2/resize:fill:136:136/1*8I-HPL0bfoIzGied-dzOvA.png HTTP/1.1\r\nHost: cdn-images-1.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://take589.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _cfuvid=ECk7rAEtLnrJ8DsQg_iiTWUV9qpleuRYDWewPcJBit8-1771337785702-0.0.1.1-604800000\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 5072\r\ncf-ray: 9cf5e708cfd28be6-OSL\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000\r\ncontent-disposition: inline; filename=\"1*8I-HPL0bfoIzGied-dzOvA.png\"\r\ncontent-security-policy: script-src 'none'\r\netag: \"X8vyfwJoSiP97T4SJeCdAu2dzX-ut7dHLbPOnVeUgVY/RImYwOGY4NzNjYmQxYjdlODIzMzFhMjc5ZGY5ZGNjZWJjIg\"\r\nmedium-fulfilled-by: miro-v2/main-20260119-155203-ecd2ec2a08\r\nx-envoy-upstream-service-time: 98\r\nx-request-id: 09e39a1c-225b-41b0-9dd4-1a2b84ae9748\r\ncf-cache-status: HIT\r\nage: 13\r\nexpires: Wed, 17 Feb 2027 14:16:25 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":5072,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 136 x 136, 8-bit/color RGBA, non-interlaced","md5":"8518be80b2d7bb3fe92f46d8cc4c6bf9","sha1":"ef99374a5dff9dc4a987673aa3ce6acea3b19ce3","sha256":"03ebfb6ce0b847954241a6a96b79e8222174eb14fd1fa211b57245703cb4bd7a","sha512":"a6ca3c3eefe3a444e618d35ca181657008cc740e18917f7aee37dc5ced27043039a79d2e7379174a6e122e7395594502109bcf6d613679e8acd219537022ebd6","ssdeep":"96:8S8mH2eVAP2hZLihEAMvqR3ChbzJzuKpm1tJLrIhi61BwLUyEnIiWnorOz:8S8OCP2LPji3MpzyPI461c7ArOz","tlshash":"3ca17eec0b8e7f98f49664388e4f8bd2240621085d7c2d05ef2e86f4040f6edb1297c2","first_seen":"2025-09-02T04:14:53.795588Z","last_seen":"2026-02-28T11:36:11.150161Z","times_seen":7,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/rand.png","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/rand.png HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/png\r\ncontent-length: 5008\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-1390\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xi0UgGRl7KNIa2LTGyTf2I0uYijjNaZ7QFmELibd3tQ08fjwiEWBzMrtQfooKaykskuSORHIJRFgoYov%2FuWgZMzJeSwpYHx1I602\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705e8b38b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5008,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 240 x 240, 8-bit/color RGB, non-interlaced","md5":"c0fc690c3446abf9097b141eefd9eb72","sha1":"e22be0323418a3d63ba800734d67afef636cef8a","sha256":"4143cfe5f9c15ee1d73d236db0bb348df7eea04c2646ea908d86eb827a8f68f5","sha512":"180f5c4e5dfa2e5d1193faa22d9a8c917ff84ce4475fb2bb58065b4096a2888bb609534624df311f752cd51bc24082f793dcfb0439a885a0e833b301838605e0","ssdeep":"96:hHlOPpozNL0ryqLg4JTKDtWtBHae3udfURvy77RtK1SAy:hHAPSzNLktXdSAB6cud17CSL","tlshash":"8ca15cb4902825145deedad7bc851cb9ad91664274df0f1d380a0dcba64f0c5d8832c4","first_seen":"2025-05-27T11:15:00.594444Z","last_seen":"2026-02-28T11:36:11.14684Z","times_seen":17,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/lord.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/lord.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 31459\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-7ae3\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pyfsSAPzrQagXfYuXHeLnqe7ItGys0i%2Fdq5XQRTNN4y%2BHGo9pdEQEJ%2FynzPKtqZ5Ip4%2FZdzqeJ2pxBkQ6EbPMOj81WYr7At%2F5eaA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705f8c18b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31459,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"0643a211ceafb29512708d337af8c0c5","sha1":"ad0b6bc4f0252606debc8b6c67f8f9675d9b876c","sha256":"07b350630f931a7ee17d903b01a7d3441530560fcdc0eb847e1fe6b7572b52e2","sha512":"2d1df466ffd8323c69026bb9f5dfc0851d6e117dfecfb1dedf048759d77c6ffa067a61d8e255826532ab6c51a17df94597847c7582eea926e3d626799490a2cb","ssdeep":"768:r9lMEFkew3ynXdJcccM5OAMbM+CeX9Db8b:lzCccgOl7X9Dbk","tlshash":"1ce2e0cf51c64b05d6fe1fb595624b32ef60b834a7a00dcf41d52561f368e382d978a4","first_seen":"2025-05-27T11:15:00.57714Z","last_seen":"2026-02-28T11:36:11.152094Z","times_seen":17,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/mm.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/mm.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10338\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-2862\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Kih%2FBjDYaISwDOHDMbSXAaxiAcWpgPXwZSZXkIjvM5iK3OUHHZ4yKA%2BMlhrySv%2Fp2j360XA2VUwKF4Oc79kXVUmJQrlg%2FmjBnfGu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705f8e98b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10338,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 214x214, components 3","md5":"8d2cd1e1728e065984ee1df0b355b0ad","sha1":"30012b2c81c0fbf78849195edd2ee8f5168f0509","sha256":"da82fef95363c69ba16f28b05ec898618a4f974b35c6e0a7a729ed73e5c135c4","sha512":"e48cc37f030aaaa5ade1bdb64ea4de52e7565a8b7342b1e2f5333e56d34d75d4db57c467f5e0e24a768e8747679f5aca8d8d9eeb2a29eafc07f9573bb5b831a5","ssdeep":"192:soL6pdjh1GGb6G9JTA/3ghr6eSk7GEcf7vEgBQOxSP3JiqigTqQBeZ8C:soLGdTdeG3AI8dEcjEgBQ9PZpiaqQG","tlshash":"4f22bf5c9738278ee70e7e3996c9ab3005e08f61be5047e702d18aed9ffd086c942249","first_seen":"2025-05-27T11:15:00.598973Z","last_seen":"2026-02-28T11:36:11.153778Z","times_seen":17,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"glyph.medium.com/font/78ce731/0-3j_4g_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/fell-400-normal.woff","fqdn":"glyph.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 19:40:05 GMT","end":"Sun, 12 Apr 2026 20:40:01 GMT"},"fingerprint":{"sha1":"C6:3A:AD:02:32:02:0B:35:F3:D3:8E:F7:AE:57:DC:F4:4A:81:7A:36","sha256":"19:26:F7:CE:FF:F0:BC:78:94:80:58:67:AE:57:08:BB:2D:4C:45:F1:59:7B:93:76:42:09:39:D9:A3:B7:47:DC"}}},"request":{"raw":"GET /font/78ce731/0-3j_4g_6bu_6c4_6c8_6c9_6cc_6cd_6ci_6cm/fell-400-normal.woff HTTP/1.1\r\nHost: glyph.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://take589.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://static.tumblr.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: application/font-woff\r\ncf-ray: 9cf5e707fa4e1a30-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Accept, Cache-Control, Content-Type, Cookie, DNT, Origin, User-Agent, X-Client-Date, X-Obvious-Cid, X-Opentracing, X-Xsrf-Token, ot-tracer-sampled, ot-tracer-spanid, ot-tracer-traceid\r\naccess-control-allow-methods: GET, POST, PUT, DELETE\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\ncache-control: public, max-age=31536000\r\nage: 404510\r\netag: v2-78ce731\r\nexpires: Wed, 17 Feb 2027 14:16:25 GMT\r\nx-envoy-upstream-service-time: 49\r\ncf-cache-status: HIT\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=Ttlb_7J.NUxX3gRbH0cVjHpYKTk3eyrYwLv51aAu5Lk-1771337785632-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":14711,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 14711, version 1.2","md5":"51834bc9061e563744962a3173ab6405","sha1":"8a3ec81f592145a952cfe94e07c95ea75b7ed854","sha256":"f57137897a4e676f0d2199b79def1a95b253a1a938dff9d8ba10519f3beb2b08","sha512":"083b24904ad980282d36aae0998face7ecad57a830b3299b7ec30926dde3bd97b0303d8f5cfe29150bb29eb62e57b1b67d96aa5483b4fb88b3a91b48d81dbc59","ssdeep":"384:rQ7fRWSsTGF/0fK7iIP98+VrGfdc4r+4Ur:rQzRWSy/0iIP9PVrqTUr","tlshash":"3d62d0f4de3aee02c260ccbeed4bf465ab11f305aa0487854ceac444bd6e7d6959019a","first_seen":"2023-04-18T03:45:43Z","last_seen":"2026-02-17T14:17:03.753739Z","times_seen":29,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":20,"dns":1,"connect":1,"send":0,"wait":35,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/cobb.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.286Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/cobb.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8869\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-22a5\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TFq0vLAgoOkbZJVXmAUw24DfwJQA1rtgQ3IIw0TZDi8bqA74uhs%2BUYdeFndZ8ZrGNYlcGBWX1iV6m99lSllWQgtY3XVizsnhco4d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705f8c68b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8869,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 216x216, components 3","md5":"87d110199244edba86ee9155ee86f48d","sha1":"4be19b6ff7437a5f2d4ab0e288a93c89dcb74c0e","sha256":"a56b4fbb3e4e8907e341adff687e8843a654ae27da7b73540180e6287054a205","sha512":"41155d2557a1d11b0afef7adee3c51f5ec6c02b158c2da5d2de901fdf5ffe8aa1cad51263fa36a7dabcb8f56b4b1bacaa827fc4fe7e30bc503da965c7ee8d4dc","ssdeep":"192:s9tF+XQnQzJJ0ULwo93V/XZ8Ih0ihEkbe+lLBkt1GlUV:sgXQnWJ5Lwo937pasdLypV","tlshash":"4c029eea9f8c5e48f01ccbbd908087fee711ae26d51a6f8681c24f95733dc466ed40a5","first_seen":"2025-05-27T11:15:00.583346Z","last_seen":"2026-02-28T11:36:11.147642Z","times_seen":17,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/dai.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/dai.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 46912\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-b740\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JtQ7AU%2BXLN23m2agm9cplgietzQaFxnOVxEnDtNXZn4a07%2BajxQJtsoqNvbSaJiB9mt5XXRscW5WH3OyqNP2kZao5ZcyrATmkmh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705f8ce8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46912,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"cda99caa862778e890a90788c99ea1aa","sha1":"478984f35bfa845dbf9a8d4a3096685cb1e5109a","sha256":"198f7f8d32f771479af26f52469b8dd04dc50cd187aceb661dd3beeffaa2aebc","sha512":"1417b5527259e03cb9b4d1538db5eafc4369ae9dea831b534a08d9580e725d21f10d00bc01a627559d37310bb4f219ec8da2ed63a22fe3432284ac8f9609a6e1","ssdeep":"768:Orhl6wRtk46H/lwXZ/JFST/Sx4w5byK4VQuMbwZ77WAItE6jxfZWN95LCFes2IUZ:OrhlnzMH6XZTa/SV/4VUbwZ77WAItE6y","tlshash":"1423f2f0a380e274f76e493da4f43210713ba9585aab6b532744b8694f9dcd8e06d3d1","first_seen":"2024-08-21T10:18:06.496416Z","last_seen":"2026-02-28T11:36:11.148546Z","times_seen":23,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/index_files/1UATD6Vui-5Xa4Vb2QAOtbg_002.png","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /index_files/1UATD6Vui-5Xa4Vb2QAOtbg_002.png HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nage: 14\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXlcEFTidFRTtZakSYqXfVpryCgaCfNnVhMzrdYKgw03bFmODus%2BhAumvPCNS5ZV40c85lUTR35JJaN6kEcWjKHH8RtuEljQ2%2Btc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9cf5e7076d418b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"9d2ae7cdc4232fa111329202f1bcee7a","sha1":"859931af8e252b498c1c918266019907c4c50fda","sha256":"111b83a8e730497d70909985213811e22bebd99cba530fd96c15520fc9e37665","sha512":"fd455653ca22eea5f5fee79b6cc88c55cf6fdfb62b44a1c782427ece6d2a64a0e5bf693da03a614883d95635846cf208d8443ca5c470761c0548e2c3c5ab1710","ssdeep":"","tlshash":"fbd02b9e5083a2cb481315a039c555c6264c22f7a43a85e82d8ad887529897ecd9a69c","first_seen":"2026-02-17T14:16:34.90964Z","last_seen":"2026-02-17T14:17:03.749322Z","times_seen":2,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn-images-1.medium.com/fit/c/136/136/1*8I-HPL0bfoIzGied-dzOvA.png","fqdn":"cdn-images-1.medium.com","domain":"medium.com","tld":"com"},"ip":{"addr":"162.159.153.4","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"medium.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 12 Jan 2026 19:40:05 GMT","end":"Sun, 12 Apr 2026 20:40:01 GMT"},"fingerprint":{"sha1":"C6:3A:AD:02:32:02:0B:35:F3:D3:8E:F7:AE:57:DC:F4:4A:81:7A:36","sha256":"19:26:F7:CE:FF:F0:BC:78:94:80:58:67:AE:57:08:BB:2D:4C:45:F1:59:7B:93:76:42:09:39:D9:A3:B7:47:DC"}}},"request":{"raw":"GET /fit/c/136/136/1*8I-HPL0bfoIzGied-dzOvA.png HTTP/1.1\r\nHost: cdn-images-1.medium.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 Moved Permanently\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-length: 0\r\ncf-ray: 9cf5e7087e368be6-OSL\r\naccess-control-allow-origin: *\r\nlocation: /v2/resize:fill:136:136/1*8I-HPL0bfoIzGied-dzOvA.png\r\nx-envoy-upstream-service-time: 1\r\ncf-cache-status: HIT\r\nage: 13\r\nexpires: Tue, 17 Feb 2026 16:16:25 GMT\r\ncache-control: public, max-age=7200\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: _cfuvid=aqH6MMpAax8i56xLLA3RHC9QaRu5_3ZBLE7e6xKZyqM-1771337785710-0.0.1.1-604800000; path=/; domain=.medium.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5072,"size_decoded":0,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-08T04:34:22.099329Z","times_seen":16229809,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/brett.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/brett.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16771\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-4183\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iD%2Fk84WtnsEF0n4JrAUnQA8BHG0gRlc1CyWRzKlyWDiNaztV%2FKY0BFZKXa4XjQ40QlRyVic32ub0ijTtlNkkFrAUQLgQzKcu6RGc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705e8bd8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16771,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"4f1f228fc4cee46046ec73209ad877d3","sha1":"96dc7a72565576d8fbbc5a2f716872e56ab29037","sha256":"9627488e58631df6d9c486c54c93db4cb1b4e5d6053d2dc781b302aa56f56cd5","sha512":"9f8db2edc5d293e39c97385370fd5a1ef3d6683717d42781ef864b9dd11cd69390d16aeb98d52d9db4aae38728f99c8096979d6f090ce05cc42d1432268a5340","ssdeep":"384:s82BiTxJYacN0dtkROwAE6eFrdcnE0xYu:D8CSslWrinUu","tlshash":"e672c09923341321cd6e7bf35e8012c2b6d19e2e4953ef4bc1554424e79e2b47d8aacf","first_seen":"2025-05-27T11:15:00.591776Z","last_seen":"2026-02-28T11:36:11.150974Z","times_seen":17,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"i.imgur.com/Nwg2Z8Y.jpeg","fqdn":"i.imgur.com","domain":"imgur.com","tld":"com"},"ip":{"addr":"199.232.196.193","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.imgur.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Fri, 13 Feb 2026 00:00:00 GMT","end":"Mon, 15 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D4:9A:34:EF:13:3D:45:98:6B:98:4B:9D:CD:FC:74:9C:06:42:A0:7A","sha256":"90:50:0F:E4:90:40:B5:50:04:7E:E1:6E:55:14:FE:7B:38:BB:79:2B:70:83:78:AC:16:E0:F7:1E:3D:ED:92:9A"}}},"request":{"raw":"GET /Nwg2Z8Y.jpeg HTTP/1.1\r\nHost: i.imgur.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 29 Aug 2024 15:13:29 GMT\r\netag: \"00dafb2d6cbede9899616ceed727e87b\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-cf-pop: IAD89-P1\r\nx-amz-cf-id: C1kZI_z_8UzUJixrb7oitbF71gRM7sPP18PyC6n2B3WmGxXhM8FSNA==\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\nage: 714443\r\nx-served-by: cache-iad-kcgs7200161-IAD, cache-hel1410020-HEL\r\nx-cache: Miss from cloudfront, HIT, HIT\r\nx-cache-hits: 67, 1\r\nx-timer: S1771337785.325893,VS0,VE1\r\nstrict-transport-security: max-age=300\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\nserver: cat factory 1.0\r\nx-content-type-options: nosniff\r\ncontent-length: 38619\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":38619,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"00dafb2d6cbede9899616ceed727e87b","sha1":"ae6d24b6632f43fb1a76d8828aaf79f86d2c07ec","sha256":"77a9e88d5f62b2e64904afbc4ebc8ef0c78ec2281771646618d8144b3bf1e189","sha512":"5386cbd33daf3288b50b4711f65f10f30c1ae49844aed9c7e4a70a61be2e25c04618281a6cf85ae3115a13905ecb620d823c946b2305841f5f4ea106fd503949","ssdeep":"768:8xvHDfzpRKFjvJZdYMUn80dLeDHDbCMq1Sg+WK8NNNKudL/w/0x01pifHyN:8xvjfz2jq0DTlW3Nr1dbws8pifHa","tlshash":"d10302f6c2cd7855ad4b16b6631ce0602a8f8bb4c989dccc9865a08779fce0e197c4d3","first_seen":"2025-05-27T11:15:00.589494Z","last_seen":"2026-02-28T11:36:11.129929Z","times_seen":11,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":28,"dns":0,"connect":18,"send":0,"wait":15,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/amonyx.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/amonyx.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 16867\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-41e3\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O%2FUFyApwCqpC5tWokWFhmbtOKugBQ4yy6R0pn4GPgqHz91MF%2F%2B3umK3DZbvq%2Bu7SgEVx44vpzqLsqki6NqdfYj%2Fc98w0kSPUOZC1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705f8e18b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16867,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"33085cfc91b01992332371ed5e4e0711","sha1":"889f599a1cee0e3ac7d5550f0ef020e874444b48","sha256":"bedd7c8f656ccf4a270ace7c616eefcd87a033f7ff3b5e06077d6db06aa1b5b4","sha512":"d0057aa38b5822dc6a7598204056ca2b702395c98663bdc6ec662f94dcef7415e6d3ed97de95697227947c65c60b63ea101695cc41d2bb75be534f1d3059fe64","ssdeep":"384:sflotX+Ui3dE82d7//lGY/Tbjv1spy7rIDJcjO3HfBZL63nA6s01Y4:au+LL2d7/lGY/3T1s43wJc63aQUY4","tlshash":"b772c077ab281065ea0dfe7874d96f813e075e7282f0db9a2302512f8f0a5950dad39c","first_seen":"2025-05-27T11:15:00.597779Z","last_seen":"2026-06-03T10:15:18.836947Z","times_seen":19,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-17T14:16:25.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6RCy%2B3LJC%2Bu7yC0du4DzaDH%2BUooB4R2fL2eEvaC8CMbsPi0klJSTQdUSG2VhylT8xnNhEMryIAb5%2FfKAZ0UIWZ1srXtBmqEprQLS\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9cf5e704acb9dbb0-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128837,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (12622)","md5":"b45ff60ba7e8052b5b00423b99820054","sha1":"c2ebd8400431dc41288166fa0e7aa0aff7f85517","sha256":"6cf172cd5abb5836dca2b67822fd0a055c32fca404d06ce0135aeae95d9bd82b","sha512":"24dae00ef6dd5a61d4a0449514cecade489f438cee4175d353f53ebaa67a3ac51e85d0386fa54892e8913fa65bc73fc9cdd2b0f7f76548a02a3a4be7a6f13049","ssdeep":"3072:lTvZU1CFFaTuuXqRTWEkAJ+QqRE79BI7BfQ7rgA7xLw735A70Co79Ko760A7t24N:l0CNMnEECZqKCzMHB4YV","tlshash":"f6c386a16e00227d020bcaf7db277265f326e9bae6524490d9ad47f44bd7da1f80f841","first_seen":"2026-02-17T14:16:34.904406Z","last_seen":"2026-02-17T14:17:03.758554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":39,"dns":1,"connect":8,"send":0,"wait":54,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/br.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/br.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 133296\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-208b0\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z8452BjD7FPgnK7fEhRb3PcEMqdHOJ0tYGtfCoilH4z%2FPo3FL1t4JCzicXxUv6FoY%2BvQNFKSuN0Nd5iNWsqB7%2BEranuK7dT79vLH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705e8b08b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133296,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x720, components 3","md5":"e9d09382998441ec1f192d85dcc986bb","sha1":"f7f77f23066ce92be1c06a971c2b7b8097beaa64","sha256":"9436d31d607a226f3aee2d97228ccb1d57e7858a2083a2e28f2dd62bb86e5d39","sha512":"759b11787be3217e869f2a87d4126e3f42308e0135a3bcae0482c620ce11322e5c6cf9dbd510fda9315431a39f05b893afac4f21ef740d11f9274a09e93c1da0","ssdeep":"3072:31w3zmurKnF8qO/ey/xDFjUBBacj2GBOwH2X+tDTCs1hs1DA:Fvk4CjDFjUBLj2GVpDL1hsDA","tlshash":"6dd3125498430a47bedb826459f99c88cf09af7b922ce70bc1da999cd050dce8fc1768","first_seen":"2025-05-27T11:15:00.580637Z","last_seen":"2026-02-28T11:36:11.145132Z","times_seen":15,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/xrpp.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.294Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/xrpp.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 19009\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-4a41\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MlLjZV8ez9bslAprtqf52KMruDszm7dy642JRlMwD8uGwXf%2BRtf%2BLnq2gz9ePj5nIQzjGvMD%2BYx6Lj6aD04eFCKf2c5HpA0G4ecX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705f8ee8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19009,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 331x331, components 3","md5":"a68af475ba74ee65329d4eb5da0d6d62","sha1":"65f5eb232db245bb08d632e904fd6e945f66eefd","sha256":"b59aff113fe4070d5dabf11e187fa1e874675766f35a62004a9c653ca133350e","sha512":"1286e3b247317f4a16561774dd24be7866ad7915ad56a64278632cb80546b2d7638fea8075405745dec759efcbfbc878f5f6bf81c29d8f458feca3d0e24e7ece","ssdeep":"384:sv9zUHqhQbMzJTqDCQHHmhGVLwU/vCh0qkjWHsXYYTQBjC+:89F+CGDCQm0NpDWt17","tlshash":"ac82c0364bc51a03f99e19f27d905daaf9219fd3834503abc95f84ee27375c1146232b","first_seen":"2025-05-27T11:15:00.585989Z","last_seen":"2026-02-28T11:36:11.149382Z","times_seen":17,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.tumblr.com/bejxdgc/NDhpx23f1/m2.css","fqdn":"static.tumblr.com","domain":"tumblr.com","tld":"com"},"ip":{"addr":"192.0.77.40","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tumblr.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Feb 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:ED:13:34:E5:33:FE:60:8F:86:9C:75:16:32:BD:08:68:F9:A6:14","sha256":"94:0D:5B:51:16:8A:17:28:49:1A:83:D9:4E:7D:DD:27:B3:30:C2:8A:E9:FB:82:65:0F:7B:D5:4D:0D:FF:32:49"}}},"request":{"raw":"GET /bejxdgc/NDhpx23f1/m2.css HTTP/1.1\r\nHost: static.tumblr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Aug 2019 15:37:50 GMT\r\ncontent-encoding: br\r\netag: W/\"376dd17dad7defb0a0c4f2d99445382f\"\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nstrict-transport-security: max-age=31536000; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":65054,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20468)","md5":"376dd17dad7defb0a0c4f2d99445382f","sha1":"4825eaee66af27a78dfaf734ca123b0e8a3bb483","sha256":"29e89f00341d65ffbab6fdfce78f7e42a1daf4bda2e3615ad9466e2ce47760ef","sha512":"4fb4c78b0383a2404a4f00deaf248a28734d301c63f8c80a9ad304653c06786f363454ada2b657465051ef91ddfad9b0575ca4c4fae10073f758d548f9432023","ssdeep":"1536:M3R8NlTfpC5it0JVIcFSTQDiXvxX9+2C+G:IClTfEtVIySqijm","tlshash":"f453e1722844a6402dd7098a518f3dad0c2ec8777b05e01aaf9f48d0adf1f63637579e","first_seen":"2023-04-18T03:45:43Z","last_seen":"2026-02-28T11:36:11.156967Z","times_seen":32,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":78,"dns":1,"connect":8,"send":0,"wait":8,"receive":0,"ssl":77},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.tumblr.com/bejxdgc/H7hpx23gv/main-branding-base.css","fqdn":"static.tumblr.com","domain":"tumblr.com","tld":"com"},"ip":{"addr":"192.0.77.40","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tumblr.com","organization":""},"issuer":{"commonName":"Sectigo ECC Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Tue, 25 Feb 2025 00:00:00 GMT","end":"Thu, 26 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"2D:ED:13:34:E5:33:FE:60:8F:86:9C:75:16:32:BD:08:68:F9:A6:14","sha256":"94:0D:5B:51:16:8A:17:28:49:1A:83:D9:4E:7D:DD:27:B3:30:C2:8A:E9:FB:82:65:0F:7B:D5:4D:0D:FF:32:49"}}},"request":{"raw":"GET /bejxdgc/H7hpx23gv/main-branding-base.css HTTP/1.1\r\nHost: static.tumblr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 30 Aug 2019 15:38:57 GMT\r\nx-amz-storage-class: STANDARD_IA\r\ncontent-encoding: br\r\netag: W/\"0acc5b1299f898a0c3a615c3aab31699\"\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 23\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nstrict-transport-security: max-age=31536000; preload\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":522276,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"0acc5b1299f898a0c3a615c3aab31699","sha1":"7ed52efc7872582e80fe82a7d824230fbd228991","sha256":"be9a62a389ef14e5aa7c9c7ef9f7bec271ecce1f86aa8f0cdcc9a5e3acf7948e","sha512":"b9f7d037b1732318120588881f08dcf90e532773fdaba60c6d6793a6b053597b34cf578a43c8db49102d3f713fc82c16af4828a3cdd15b4af257b45dc2f24744","ssdeep":"1536:IF+FxWhn0x/Mrr87oKy9zIjAMOiCEm1y64JovSgQ325wF+DpABRiFQtkDrMqSsfp:IiWhVtIjnIQtkEZZ2","tlshash":"ffb48677f6c01318a423cd16d2cb3bbc7a3e992763125dfaea4137758b825db139160a","first_seen":"2023-04-18T03:45:43Z","last_seen":"2026-02-28T11:36:11.154633Z","times_seen":21,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":98,"dns":0,"connect":10,"send":0,"wait":8,"receive":0,"ssl":97},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"take589.com/files/proof.jpg","fqdn":"take589.com","domain":"take589.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://take589.com/","date":"2026-02-17T14:16:25.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"take589.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Dec 2025 18:42:48 GMT","end":"Wed, 25 Mar 2026 19:41:24 GMT"},"fingerprint":{"sha1":"38:8A:B4:C8:D1:83:5D:6B:7C:6A:9E:9E:A5:A9:DA:96:D7:C4:EE:7C","sha256":"DC:75:34:46:7D:DB:E5:93:91:2E:59:2B:F9:BD:30:C6:D1:1C:13:7C:ED:B3:A3:FD:EC:93:6C:10:A4:17:13:E8"}}},"request":{"raw":"GET /files/proof.jpg HTTP/1.1\r\nHost: take589.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://take589.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 17 Feb 2026 14:16:25 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 92350\r\nserver: cloudflare\r\nlast-modified: Mon, 23 Dec 2024 23:54:14 GMT\r\npriority: u=4,i=?0\r\netag: \"6769f826-168be\"\r\naccept-ranges: bytes\r\nage: 13\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KkEXRgtc%2FPH43tGFBHhJ6K1nrlZo6aae22J2pBWbO5wQSOQDm8o7w83kY8xbxR5SlhruQ%2FfkjfG9KdSrSqcQuJyseqteF66RIweC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9cf5e705f8ec8b20-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92350,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 575x420, components 3","md5":"5167adecce2883a432e49039c147c80e","sha1":"5f1bfa8cf0516d10821f15198bf99506739850d4","sha256":"bfa49ab1e13e2fb1c79edc64c869a52835f724e6d760887f462aa24ca059e70d","sha512":"479ce2ff1863b094b36cd51f0c8f9e34e815dc91016302ca392a1dddbd690e39c5cbae333b074fa4868ab0dd4b20ad73d15db8d918b7ec02cff0bb7e714b09cb","ssdeep":"1536:k4Kk/TuuBzbW62v/MWmC14c3Ug6i9P9V9ofQw2zxqRAEbqADc3pSSoB:koTuSarEijc4woq6wpDefoB","tlshash":"b19302ec06b92863e9f5a591bc58c394fa3491f990df2c27c94d6d3e2c8d2c6b56c310","first_seen":"2023-07-22T18:04:03Z","last_seen":"2026-02-28T11:36:11.155719Z","times_seen":18,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-17","alert":"Sinkholed","trigger":"take589.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}