{"report_id":"51528ffc-3559-45ac-b710-4073dd89f418","version":6,"status":"done","tags":[],"date":"2026-02-14T16:05:19Z","url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"172.67.203.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"title":"Zoth Deposit USD – Official Zoth Atlas Platform | zoth.cam","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"172.67.203.150","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T16:05:19Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"zoth.cam","ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-09","domain_rank":0,"first_seen":"2026-02-13T13:18:50.549463Z","last_seen":"2026-02-13T13:18:50.549463Z","alert_count":30,"request_count":30,"received_data":6137696,"sent_data":13187,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"7e20d390acf3b0d0813cea5e9bbe981e","sha1":"f674b6080dcbbfc57768a5dc777e3ee5ca86be93","sha256":"773898f30f6fbd1fd0f326cfbd18ef5fd0748d2260cbbbf7c937233e19711c28","sha512":"2cf94159effa1c8b33a7bd491717846e92ceed802efaf082b3ed119f7d478dfc35b870a00de3797dbc99ec8e4eee97718edea69cee0a46399f8ff45b50c21e34","ssdeep":"49152:wkHmNE+DwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtqz:C","tlshash":"d6d523825c9b65b6cf940364b0a79d0a149d0c13699de1cef398fdc2396efa1c1e781e","size":2937321,"data":"","first_seen":"2026-02-14T15:21:29.456718Z","last_seen":"2026-02-14T16:05:24.110909Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-06-04T13:34:26.82876Z","times_seen":2927,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-06-04T13:34:26.861411Z","times_seen":2896,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-06-04T13:34:26.844261Z","times_seen":3102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/chunk.47.twgtub9a.js","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8357687e9ef8be402e9aa558d1f15c8d","sha1":"fb6aed25a1ab0a066a9466cdab98dd8770580998","sha256":"1c37be2ceb1e5c6f8aff0f0349245d33fcec337edd9acf8815bc1243ab341ba6","sha512":"a5e59249703d6679053d280b1acaeec9c696625afd73e2defdcb7cfa2fba2ff999535cc82ad95604c8206c2a100d371f0f5e208f00bf969f161f73668e364dcb","ssdeep":"1536:73+vmsE8UdcQYvRCLCC8n5O2lj2thu3P/JKy03:73+vmsZUdcQY5CLCC8nQ2ihAJG","tlshash":"58b35fd9980b80d09e2511ded477ec15e0284a63cdacf1a3b92cdee1751dfa2c587a3b","size":113164,"data":"","first_seen":"2026-02-13T13:18:54.379981Z","last_seen":"2026-02-14T16:05:24.103563Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-06-04T13:34:26.862791Z","times_seen":3066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-06-04T13:34:26.852723Z","times_seen":2984,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/0fab9cb3-50bb-47c8-9f39-61feb0f5632a","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d8e6d640a1affc9041916eb4e64043d6","sha1":"dbe8476b8a7769fab08058c65c1767c9a0e301b9","sha256":"467148db140fd5d5ec8a8b9c65ad47ce392f2915afec49ae5b4b0d4eb2151627","sha512":"d2220cc9fba1d57ad3f6dec947647e01a85ba7301a0521918c79b8d40103b99f8d179403bd222bf74ddaa347df3bbc922ab4c57fc52c2b73cd027c8d27769d74","ssdeep":"","tlshash":"6e1125e5f406e81951464f3577f70d347caae01945df98fafa84df2024e087111c2781","size":1000,"data":"","first_seen":"2026-02-14T15:22:08.721793Z","last_seen":"2026-02-14T16:05:24.114624Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"38e3afae2c196377895ac472c991a80c","sha1":"b407af8385e79478575f6bca8446fe74498dddeb","sha256":"5c6b41d2b14257a1e31a8a371daca51b3982a19595711849cfc14c9c11721599","sha512":"113fac127dd2b9008d506466c48fe3b1cbed913d0b28cffaa2acbd9dff70fc0508836304cd22a7b179b69a13337f3a57e8301f40c3d159f9f8319ef18b2dee56","ssdeep":"","tlshash":"0fd0125d7064a96628cf697e5ccf088e7e369812a2080dc999ecd4547fb1e6d42e488c","size":198,"data":"","first_seen":"2025-09-20T14:46:13.54982Z","last_seen":"2026-05-06T23:01:23.457591Z","times_seen":69,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-06-04T13:34:26.859392Z","times_seen":3034,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-04T13:34:26.859979Z","times_seen":1700,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-06T14:09:26.438236Z","times_seen":362061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"895f526ab37305311d1e998fa4d5a6e8","sha1":"06d0220830c81bf254c70552e908371c6dc1f18f","sha256":"90916b8b1fb2fbbd765a22eba866c30d8829f59aa2d7ee86869abd20207b2117","sha512":"6b087d2e2025f4d11073254448b124af8839ce24ff37eb45bf2fd1a2b66bee8fd4fdca2b4d23c08786d217dd71dbc660d1054b7876b37752dee3baaefdaeaa4e","ssdeep":"","tlshash":"2871bc3beb00173bdc8fa9fdced5b4c02e62497262496960691ce102a16cd7487bed88","size":3743,"data":"","first_seen":"2025-08-14T22:47:51.287187Z","last_seen":"2026-06-04T14:53:21.612438Z","times_seen":1317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"zoth.cam/00092f88ba6fa667.css","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /00092f88ba6fa667.css HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\netag: W/\"698a4a93-13254\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 96386\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xN%2B3W6n3z4tm0vN8g8Pb%2BAcTtViyMBQZlYeWYifk9Dmj6QDtHRcYv1qFMVR%2BOUX2O8a%2BZAYal0ph7YNf3npJQ%2FEoQ5ZzZ4jW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cddcdc7bca2a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":78420,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (63215)","md5":"f7e2de2fc27ebd7ac4058f09a089d87f","sha1":"f087457dab2d37093cef99ee0d6d487ab4175147","sha256":"a3c4e6da9afae578725c76a4e41b083dc7a56ac993749361801f826d67db0c38","sha512":"bc4ce4066d679854830b2ae5814ccd9217a65dd033d218fc4a38d4e4e257f9f022fcc99ae55843a62f6c39c7ce21d6a3040dc1835831c7206db557528e8d2a48","ssdeep":"1536:+H0CJn/omthH0/eiYotN62gv2NeOC25CMnNh1jGi2jA:+H0CJ/omzJiYbv2lC25CMnNh1jGP0","tlshash":"e373d86e6b16107e7c27c0f6d198bfdc901af1c4de3a12eaf9531520afd22f21d66624","first_seen":"2026-02-13T13:18:54.396431Z","last_seen":"2026-02-14T16:05:24.063789Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.081Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Sat, 14 Feb 2026 16:52:53 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5vuAPE%2BgqHpDIxGg%2BSEXiomhcS1KFnxNDt0Zu5G90WrWnT2Z6Jy0URiC27u139x6k0iZCUWRXgP5%2F%2Bnk1NUmvKlkoqU9JvCj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncf-ray: 9cddcdc7bca5a9d3-ARN\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-06-06T14:09:26.438236Z","times_seen":362061,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48532\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\netag: \"698a4a93-bd94\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1Xv68QrkiVaLs82qolqqGiRaBBkfivXhW5GAdwIRHEOvcgtH7RywNFW04r5AGkR7W9JB4kv4vczMW46kJ7Qsnd138bmzC7ha\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cddcdc9fd05a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T14:10:37.947396Z","times_seen":204859,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/zoth-blue.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /zoth-blue.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-137e7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SzDLNjNzunhFi5TIneeIqDngZ8SezbHMHY1umzWnsyf7zO0ZQYE0RE3S%2FGDq1DrQXqQWHstp%2BOcXtqDzfmnFllXazu2%2Fzy%2FW\"}]}\r\ncf-ray: 9cddcdca6d2ca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79847,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1ebdbf95830e5215df3575c5407de6fc","sha1":"b7968bb9fe85ce50a50fca8383d12bc0f2f8b1b6","sha256":"58c2a0072e63e99f1e8c4ff7a599bfbb2dd11f4212c20184f31d82569c35898c","sha512":"15f8f024c8002f780c4d7033e727d59dcab3b84de4357e426e9aa9f81f0f81dfbabaf0bcfb96888636895e8ed17202ff755d9238c68dfc49685042202c916409","ssdeep":"768:+5JFp+5sNetYcMa23wL9G5eHOkrvi3mYiMSYv1L9j/1O82:6JFO9ieHP4T8f","tlshash":"de7342e7b7d8fcb6e10ad3e8c8018075725e25bb7a82cb5282a4ff5e6a1508d5d0ddc4","first_seen":"2026-02-13T13:18:54.421518Z","last_seen":"2026-02-14T16:05:24.069981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/krillcrafter.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /krillcrafter.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"698a4a93-27224\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l8hLPGH4LBJnAIdNDiFOS65iQpxCijEL%2B6k0%2BdRncKFMN69hdcCTItEfCgkdtfzTZksQuLPOfBoaJ%2F0j1XE5WPKNRd7%2FDlPy\"}]}\r\ncf-ray: 9cddcdca8d3aa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":160292,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a32284b8e1dfbc4faa02ea76f09dbc43","sha1":"2856b54dc818e083bae257b86e2d9ade01e1e170","sha256":"ed08ef7d5ed8fc61b1e52ed3500dfd0a9e76dc60210fd63aaad9257d3dcf9a28","sha512":"5b389017e2b6637bad53db08062d15f9541148679806b408c441686f689ac9d8b8bfe24a2dfb9bcf416fa0d80be730fd84964a60d14746777fbe32f0f3489194","ssdeep":"1536:e60QJ1Smr8wupu4H5Tvav7e2+ZFw0uiHikk44gopiKi/oqGYD7DChRcMgkHgsNvn:9Z+PozB","tlshash":"23f37244737ad67ef005f4fccb46a470395628dab4a380f0c3b16f1ea89558d4ead9e2","first_seen":"2026-02-13T13:18:54.370434Z","last_seen":"2026-02-14T16:05:24.072603Z","times_seen":2,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":218,"receive":104,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/lighthouse.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /lighthouse.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-a917\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0OO5mY68ZUtJJKZdob%2FZf1zGLJ%2B9FkC%2F00sonBXFVvzHRnfDNtx8Yr8TZSJCBiKs5PwJ4gYkZEt%2BpLnjp2D%2Bn82YUSzYW5vE\"}]}\r\ncf-ray: 9cddcdca8d3ea9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43287,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"54f84d4bf26d1de5b963b9d1bec73e9a","sha1":"66a9285660d6b742a3f7f22876d3710ab5568a74","sha256":"0c57a80cd82c55338c6c89e6fa85633e86f1acf8bc6f8a54272e95620c722f8d","sha512":"bdc9f2a4014164af659b7d411205c083545a1a21bdbf70d6717faff824550b1e62ba5dbab5e3be2a18b2f56e27cc7b46f7a16139b0ae6bf028f7207d72083048","ssdeep":"384:zTH6+KKq9sGTcjutD1eW6ms2Brbkybnd0ikLkKqJvCE4xox4:zjFInTDHrfbdhsOJvz4","tlshash":"92133466b3b9ce3ff299e1bcc605a870309951d6a482c5a0c3b0bf2f69621ce1d4d7d1","first_seen":"2026-02-13T13:18:54.429437Z","last_seen":"2026-02-14T16:05:24.075344Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/css2.css","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\netag: W/\"698a4a93-238c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 96386\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5uQw73iROI7J5lDmd7qZ%2FakcaXpJdk7nsP3HRvHkfwX38mukfAa2RI18DyjZzWe9r0x4z8nX1ar5O6ehojBYDUHRxGfjp1QT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cddcdc7bca3a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9100,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2697aa3ac7b847513fe0243c985c479b","sha1":"bbce27c9f7e67d54286e634b280818db09a13de8","sha256":"95575391bb55a8a178fea41d43dd09b1fddd957c6e6d49e9be9263e57092f7d6","sha512":"fd990ca8107b081bac7485242188dca4ba0549d9406fd3a0861999143da2d61ab70a65a41901e922e1a69fb4f978a2a1831675104d95d344169cafac9567d12d","ssdeep":"192:9TNSbO34o5DMTOB0O3/v581Tro9O3iS5lWTEv+O3RB5Gp:NvWsk1i6a","tlshash":"8a127b91002b6400a7a70cc277ce3f3aaedd6044a049da782ffd0d8a6cdeda953a175d","first_seen":"2025-06-02T11:49:35.475344Z","last_seen":"2026-06-03T10:15:12.971617Z","times_seen":272,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/css2-1.css","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /css2-1.css HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/00092f88ba6fa667.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\netag: W/\"698a4a93-4ffb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 96386\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivNDKVX%2BLZWknMBB7vTi8QEMzblzPQgm6BrOxr4yxF%2B%2Br3mCEvBf%2FJDUltw7okaKp0PxlH4oGs4K0OPLPX9bNzXhNBdWlg14\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cddcdc83cbba9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20475,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"b32cbdc09be8ca664e6523dd806d5930","sha1":"59a65cfd0f0be3e965f3efe96f3835c48869b8d3","sha256":"e524aa72cc77c4d0fdf460b495339b8198b5cc7c63414ba217f1cb049d845d7f","sha512":"b4b6ce137bef9724cd4771132014c74517e5b7e86aa1dc3929e6c3fe712c5ed6099cc7b13ea8ebed745b30ea15bee653b8aeece8deef1356ecf3aa5a6a1e545d","ssdeep":"192:WpTmpLpQpO3tpdp5YphTnspO3G25RyTAz6O3lV5iTTNSbO34o5DMTOB0O3/v581P:WxmtmCtHg/5aOkvWsk1i6kbGYU","tlshash":"2f927a91002b6400e7a71cc277cf3f3aaedd6044a049da782ffd0d8a6cdada913a575d","first_seen":"2025-07-17T12:06:37.52566Z","last_seen":"2026-02-22T13:55:03.281833Z","times_seen":12,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48532\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\netag: \"698a4a93-bd94\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5R1tZTZSwTRmSsqRJNoQNP2Mr5fMMsbnYQ82KXsNamC%2FDdi0Fb84SJmfoG6sVnkS%2BCFMLyO%2FbQF3qydG9hsIh6KY51zkRXjI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cddcdca4d15a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T14:10:37.947396Z","times_seen":204859,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/crew.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /crew.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-18547\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w3ds4w0IJyVV3DfR63zF5x8xneFaa0xUum1wIoyzE54eIJwIQX4VAKLD%2Bu%2BdW%2FRzj1ikeg3litEHK6bklcjxeQm55WPT3VR0\"}]}\r\ncf-ray: 9cddcdca7d36a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99655,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"37694d6fab328e2484a786f8ad57c693","sha1":"b1882fc143e876f2223cdf8f061180c34d8e034f","sha256":"0a530640e9ec134fec5ed2bbc8dead8d588cb12167908ad852f93e5da9c79189","sha512":"7d852a7c9ec1af77e8cee8b4514b6c49e64fe6e138daff2e3208e34533a9d38951fb04f69812831f8a3eacfc5fa46c506fdea966224bd43be8ca47a884b6ff2f","ssdeep":"768:HkjK2KNKIKmujqEaEv9dbOA91FN9ov9x/e2Fg2kE4WZOrt7ncRjrj+jXo3jx:Eal0lnzN9W9cpEzOdwjx","tlshash":"86a3a4967379ca77e196e2fcc91580b53a2920d7b58286b0c3f0ff1f192a1966d0e7d0","first_seen":"2026-02-13T13:18:54.390912Z","last_seen":"2026-02-14T16:05:24.079526Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/pearlwriter.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /pearlwriter.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-48da6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I9OfFPe1tYXPJ7pvsvZNkECqjiOtZtjDAn5AvXL5H1oMrrJ3jHTU8DXEJb5y00fP%2Fwx9BGr11UjUiqIZx5Wd7uzFQ8bR5Ce8\"}]}\r\ncf-ray: 9cddcdca7d38a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":298406,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"59ba5a297109b265e9a58278ec889900","sha1":"64d0f1296fb4e957954befcad382f0f052349451","sha256":"eb19248c6a5ab49186ffcdfee02e448f9a91e2281ddf594ee3c4ff9552c3a305","sha512":"e3d4fab75ae3868397e58ab8dc364bd95b90fbff00a95a32523e4a7a8cf0eca62f40142dde07d45098e27bbf2d348a6a7c7de142d072f29ca6344bc7d8aca1e8","ssdeep":"1536:qgl4VkTn2+h0Lb+1m53sS8MiHCCHb+dRJfdVknN/YgSJaA/K3IOg4wfFy5Pzz4UO:O8amtz7bk","tlshash":"80545284337ae679f444f9ed871274752e1528e7792380e593a22f1dac4888c0eadcf7","first_seen":"2026-02-13T13:18:54.431339Z","last_seen":"2026-02-14T16:05:24.081554Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/anchored.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /anchored.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-17f75\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2F9YJh%2Fh4z1AIbQKUp5k6miBCALrxixpWMJBp9SJ1%2BIc%2FtLb7xX9TqGZpdeYaTIGFyL7LIIOuJ0kAHQ0axGUTWNtyQtV0%2FbR\"}]}\r\ncf-ray: 9cddcdccdda7a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98165,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"668ba136a0943e23d2bbaea537d776fc","sha1":"50a739f36207bb5011e615cf0904bf1af388e597","sha256":"16e25b15dce3e0f821fa32735cb82ccf6e8c482c44cb940a11a3e4b6dd160a0f","sha512":"e69f7abfad8b2a0724faae616b49b358d4af303acf8412455c8579764956ca29de635dcc5b88334ac0a9ce13ba97e7d397ed9393b50926f1fb567bca51510d0a","ssdeep":"768:U0n51e1XVjm3mnawruAkdbreF5xEcoGegUcyzqhV9VyzufaATt31ClBAG6hA6Y0c:U0em3RZRuEc7qwtyzC66hA6AJ8fa","tlshash":"73a39559f3b9ca3ef145e2fcc605a870265519e77842c4e087f47f1ea8a118e1d6eac3","first_seen":"2026-02-13T13:18:54.42338Z","last_seen":"2026-02-14T16:05:24.083432Z","times_seen":2,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/Locked.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /Locked.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-4ee\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RyYkh0HdUD4pvnBKI6ixpRyFTMlY8FaVfiar8LF7RWR19ngD3W85x6RdG4eh%2BH0OPJJEfDwf4oU3KJCzYsTwoJqOY2q3Gxjc\"}]}\r\ncf-ray: 9cddcdca7d35a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1262,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75512d4767a08215179dee9e32fdfcb7","sha1":"03e3f6f22083e8e1d5edda35fde45757fd850424","sha256":"8d2289997e261a4d16fca40f5da6cc3ab6da3ddad08f2fd1d775ae4fcbc593fc","sha512":"5228e0ba0bee3f5dc0a3e058c8d8ea62a6d1690f01ad70e5c447bd89cd873f59d5683a81d7150b437de53313939b70eda4be5d7d21714d674d64d08d4b622586","ssdeep":"","tlshash":"1d21d5f4b29870606406c7b4d7362176e88a28fd1ba583544782fbe8e11424bd8afddc","first_seen":"2026-02-13T13:18:54.407327Z","last_seen":"2026-02-14T16:05:24.08568Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/zoctopus.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /zoctopus.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-13b62\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lgU5grA9dwpZYDkRX10flYL19kp1Tt29IHb5ZpUo4o20bJoF8hoC1rZ4bH3wlZF3EuaiFo09SaF%2B%2FcZ00daFgGPEYsxcql1M\"}]}\r\ncf-ray: 9cddcdca7d37a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80738,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cd46c8c62b90b74c78ab844252e72d8a","sha1":"13a8d1c6838f850ef676e70426dabf5367d69520","sha256":"56d087d9ffb8d7d194dfc9291d043e075a29bb6205df9fbef3caf6866c8d0497","sha512":"4f018e021222e9de8b7fae7a1a431ed349119a06a772122c2ffd65d57d83493689a5c82c2c51406729a2fb547f43269e36840a14a086d6eadfad8e8260884732","ssdeep":"768:XeRZZjLhhfP5vZyvjDmDo0gobCUxZjkWmDo0gobCUxZjkDxAR:4ZZjVhfP5vKmswLOWmswLOFW","tlshash":"e88351deaba45df5e4c2c3e9da0101ac721d90bb59c18f70c369ef1e382659d982edc1","first_seen":"2026-02-13T13:18:54.427807Z","last_seen":"2026-02-14T16:05:24.08735Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/favicon.ico","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.776Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/x-icon\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 336952\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-3c2e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=duuESN%2B%2FM%2B83THKVWCXWoohGdcYRoTrqufjCi4CV5JtkgZ%2BJxMAirPHxA6uIedK0KV9NKlAZoYU9QjQfYD6ugBQGehCVJ7qa\"}]}\r\ncf-ray: 9cddcdcc2d83a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"cd78bc0d6b5db46948ae12e46a0f4b26","sha1":"3ca44aded2d2c0b5c605a37a25e035b1ee7e13db","sha256":"d020d992c138c52f9db3858d3740f4abad72e7d8e81217a57d2393374278c940","sha512":"e0821e4c96762bdefd3143ba509f2f5d08fc6c39f60cfe86686ff5ff70bc0f43e4bef4653c636c6ee1958ad140f19f8c1d1478026084b1bf6abcf77f83fbe1f7","ssdeep":"384:0RkFwYVPEb/vuYzOjygeMtyrp8kXk9IY:0RkFJdE7mw9geMtyrp8kXk","tlshash":"7662d6357e9d8debc1e1067d86ace339907883f4bddad382751138e8ac91b884b46705","first_seen":"2026-02-13T13:18:54.37467Z","last_seen":"2026-02-14T16:05:24.089029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/thunder.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /thunder.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-52c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOa8rfOHLcglglRLcbBDjIpTUrwTkk1VFxAnnjhQqogXKCIZqj7jfgMlSX5u2Ztsw8aL1c5fH2iu8v%2BFH5S%2FpPL9eJSuhRSA\"}]}\r\ncf-ray: 9cddcdca7d32a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1324,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bbfe6f8b6b37be1d23977ecdcd84c567","sha1":"06fa4ecc562f97ef081ad4095d0d62fc53e210f7","sha256":"3ab2693814c2f5359be7854b122a6844012c76238a314c655a4a2244ff3d9aac","sha512":"fb51cd2613157979f8e8f0d79877c13dd2d5826c95eba6de395a96e258fbf2984e18adc4d83e845d4864f44e0270b87ed192f22c925fec8b74aa49c588e00c47","ssdeep":"","tlshash":"bc2172a5f3f0f5ea8585ebe8c6aca0666d3231f736c6c724b2e05b2424061ce1408cf4","first_seen":"2026-02-13T13:18:54.405654Z","last_seen":"2026-02-14T16:05:24.090517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/harbourImage.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /harbourImage.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-6136\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gMb0ph3oMYkJ7Yyx9PjMT5LTvKQmwFKf0NaLPp5RX14voD0J9kt%2FtQo%2BttBmnOO188%2FAZrEEJ8curSUsvDvxWPjqYNvD2JdC\"}]}\r\ncf-ray: 9cddcdca7d34a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24886,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"24ff4d02d8c7f973b64aef1897d8aad6","sha1":"1000337c2f5580ee52670ab890d32651f055cf40","sha256":"e04e5e64f72bf0cbd25838a3cbd3e4e7ae18283e880f5fb18b3b9d30355acd2d","sha512":"0b3273bcbc95cb376abd9c8ef9b96dbeac4313c62c8adfa14ce5953a7b4c0a9e50e506ff50411ae79587462c0dea77220c22319a1186d80875bef5746742c117","ssdeep":"192:airN6dMd94rkNib0bBOnIoUOnIo8YYCWa7lX/8c8QS7q7S7qRZSC0VGamTFnqcxM:zxi44vNE8X/G5G2GR8VkuMSevF/+7","tlshash":"4ab284fe275488e5d45ec2dfee1514a8711ea5bb6881c790c2a8ef1f38418885d2efc7","first_seen":"2026-02-13T13:18:54.426399Z","last_seen":"2026-02-14T16:05:24.09198Z","times_seen":2,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/bridge.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /bridge.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-30583\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tqTRArz4L%2ByOng8n4ghAjUEjYkszMHhGmQGuK43gr8VcM4hlTnGJdQgP0%2FRZEA7EYz6KHN2nv4nXTJUkcVgShr0HGn9ZThq8\"}]}\r\ncf-ray: 9cddcdccdda8a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":198019,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cf05889b6d9bbc460b33b5ed1000e7ff","sha1":"995f8258fc5d06f5350bd4ec819f99bff2e3819a","sha256":"3386cc26c800c5a1f6638af8447664c5b4d3c063466d04f30b816670e3e2d9e3","sha512":"5e6b54a8c3bbc8a02fb50b008a6f19da9bddb74f1fa6eee6227810715d79fbff3ff7e9cc5957dbdcc39ee80c89255a0419fcb3c94996a8b402004ddb16e4026e","ssdeep":"1536:+fi2uC+blbtblPDk8pIHBdycu9G6BZ5WItXE9Qm/FXOetwR:5gsXlH","tlshash":"51146455b3b9ca7ff185e2fcc611a4f0396614dab48381b4c3b0bf1e689218e1e5dad1","first_seen":"2026-02-13T13:18:54.394012Z","last_seen":"2026-02-14T16:05:24.093823Z","times_seen":2,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/schoolsage.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /schoolsage.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-2099f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0P%2F%2FYQjqt%2Bb%2BtQk8gV7JxrRpvTKp6GsUEtFEFtCBhm6siLOM8VaX1NDzQ6EWM5uLFINSaesyQ7eyIcOA9Vs06uqKcJSWinXe\"}]}\r\ncf-ray: 9cddcdca8d40a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":133535,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e5d8b4a06e83a4c82b48ee0327bf1456","sha1":"f54ec3b2ac204c11964b0ccc7e6f86730cf72d5d","sha256":"6d34fbd54e70e2864b9f079aab02fcc6a1f47b52c75daa81b88aaeb7a734839f","sha512":"38c6e4eaf0b5eca30447855466c22662c200dc5584a05a486e60352f122cb81651a02f35d124f94bf647001982bcc2f3235b687d9f9c7755ff77f02fd0691105","ssdeep":"1536:+tAVjHyEg3hZJ6A6EsX2CAA0XLMCtSVn+327ct:l+3","tlshash":"1ad36256b7a9da7ff154e2fcc605a430395910eba483c2f0c3b5bf1e696208e6d4dac1","first_seen":"2026-02-13T13:18:54.408888Z","last_seen":"2026-02-14T16:05:24.095462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/secureproxy?e=jscdn/getFile","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://zoth.cam/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://zoth.cam\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"fb76qpi1wkld8hph15pw\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VpCCqnQf9t%2BaNHB6hxWQgyLyMg%2BZ18NXN5LDoWDojUyBBg76GoTkXx3FkiavdJb2jRittyGOg7LKdWU19nIINbRPPmKDuqkdq8xyuFC%2Bu4GK5Q%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cddcdcaad49a9d3-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2939489,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7df7eaf64b84b6636f20a863b7b0e3dc","sha1":"27a4bfe505261c2dc956a4572abdbac472852bf9","sha256":"5cb74b7ff0ce7d328a45c581d89e7cf1b07873642cf28ab591fd2a381855c7f1","sha512":"3efd197621bfdc5c71a95ffa3f89296bbe8b90508fbdb1b0a8c1d4e201f2895627657ada0d7b578432ff434e9a2bf8492161a6da11fd121470d49d77fa8db316","ssdeep":"24576:AyKBFqoy06ALFIuElUmNE++J8weP2QjSZ51NSz:TKHmNE+JwW2QUSz","tlshash":"7e25238a4dd6f5b48f2845a4b2735d596c810d125ac4e289e3c4bcc336b9ff1c2f686e","first_seen":"2026-02-14T15:21:29.441447Z","last_seen":"2026-02-14T16:05:24.096874Z","times_seen":3,"resource_available":false,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":355,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/backgroundImage.png","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /backgroundImage.png HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/00092f88ba6fa667.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 316729\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\netag: \"698a4a93-4d539\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pijPh0suRwwHocXLYbw36QuJV%2BUzVJ3zVlmAkh7wg8AwbimtDuu62qTGYR%2BV7hoiP3hhNy8L4Hm6iI9I8kmXG2%2BvzVEuyQg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cddcdc9acfaa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":316729,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 4918 x 1290, 2-bit colormap, non-interlaced","md5":"39c4af96513832270ec0d607ff1464c8","sha1":"65be6255cbb543c935faedfd9ee0b5cd46203509","sha256":"65e47f67e26c68e9adacab70fefeaf12a32b2f038b2d5e49d7b81057441154ec","sha512":"d38685b2e0022f69f7b08d67f83c6af83ef33240b4247ddb30ac4ce0ced565cad3545413df8c8dfe424402c65dfde9c2c5eede29885e2cf8be39fa201ac4b804","ssdeep":"6144:IAikjY1DOs8POinQNdq9Me3yBQyEtzcv8TfDtPOjUcRZ7LM/3If17vZEuq/OcLwB:IAikjEDOs8Pboq9MnBuc0RPOFc/3IflP","tlshash":"fe6423c7e8865a7046ee279788cf6638144335eeddfa02ff80d527f703a0956bd5a10a","first_seen":"2026-02-13T13:18:54.415244Z","last_seen":"2026-02-14T16:05:24.097627Z","times_seen":2,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/seafarer.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /seafarer.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-3edbe\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B53XdDADbMUg9xn62gkfFDA3OB0m7rcuhIhCce7xpzAXTHyz9AbJtUUiGIqJQJws2483JMex%2FNyHCSUxTGn2EEHwcRqTQJT1\"}]}\r\ncf-ray: 9cddcdca8d3ba9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":257470,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d38a68643ad29303fefe11b9c8ada3e","sha1":"6364006c81ac5eab354e629bc1c06d4f98aeff60","sha256":"001ad2ec3f8282a456e6008d2ab69c88e8baadb546d9f303096cb29d8c0b15c1","sha512":"cc9a94898e73354e3ac409a33c88823e6ecfba9e2ae7530e07fd615f0a04a3db7e3b6ba2528083d21b5ca9c8e3160dcb7e45adb029734e5632e65e2fc7832e67","ssdeep":"1536:Wz8nAMOv52liNGJAMwGbSVx//mEvmiSpxIerH0fkj294aq4HTOOA0F7dI9GJ5/h2:vjJryCEA9ui","tlshash":"19446049b77a967cf004e0fcc793e8713e926d867812c0a583e61d1be89445c4ebade7","first_seen":"2026-02-13T13:18:54.425014Z","last_seen":"2026-02-14T16:05:24.099604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/referral.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /referral.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-4e8e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PD8tQvPC3nTc7Xh9RQ8XT84roTrh5w6t4Ry8CaxuYAF8qoxgp8mHUiQcymYHnXRRP1uQ52q8Hg9g15kPMnrNu9t89SzNmcAT\"}]}\r\ncf-ray: 9cddcdccedaaa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20110,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7640c9f6754b2f8b10e5b7340108e31b","sha1":"d9ab3d7d66fb3b1eb28c766cb84e964d29df9590","sha256":"993b84658057722740c22ecfdad6858684fbc3b49eb801fd8bcddffcfc43f1e9","sha512":"db4022509d34b6e2417fea710ac5f6d3100ea563480fd4329024bc4dcac89ba751cade04ee8d03d4934ee9bbbc588a810efe7b35ca36b09d0923fec6784650b8","ssdeep":"384:iQc9nyCvW/w1T22KQfBkpVCSFTkt4b8PkbPA3+PIa5MQShQDn:jinKyi2KAwk4Yi4hQDn","tlshash":"3e9262de7b644df5dc82e3cee70010ad201e94bb1dc29b60c26daf6e3856859dd6acc1","first_seen":"2026-02-13T13:18:54.410376Z","last_seen":"2026-02-14T16:05:24.100906Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/refers.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.895Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /refers.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:54 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"698a4a93-11fa\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gflz%2BmFmyIVQlqgu730O0NiE3ppuu%2FF5vaawolG0mEVuDDHKfn6Q1u2MlmqvhK6loS2S4j70iIEx0imeayQRQ14umx%2BzCASf\"}]}\r\ncf-ray: 9cddcdcceda9a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4602,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ac43688e25a8b3ab0e5201ae6436f584","sha1":"8b0c9c8817e34db88b49d3ff76af6f841dc219d0","sha256":"fd53030dd5d8aaa44b140b0753268c0fd9f67aaf8c8711b3e88addc9c0355fe2","sha512":"7f112202e23da9b903ddbc61c5747e219d58278080944c5c1afb2c120459a08831332db7409e612a5a99b333a741d09ed9ac95d446f0858ec56ec5ad37da30b8","ssdeep":"96:lk6Ak6Fl87BqBjBOLr8C4tSlWVk7u+MQ3zflel+:A875LrdZWebMQrp","tlshash":"3f91b4e7e3ee2190f814e7f4c32ed4a93a1724fb3522cf5982c5ae58e5221ce445d4d4","first_seen":"2026-02-13T13:18:54.418951Z","last_seen":"2026-02-14T16:05:24.102055Z","times_seen":2,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/chunk.47.twgtub9a.js","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.079Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /chunk.47.twgtub9a.js HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\netag: W/\"698a4a93-1ba0c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 96386\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ai8O21A5JFpJInDKYv2Tl81ApK74vMe6T4pX5vwpKkAInJIDVzrf%2BwQRG6bWTpfx9yaN6%2Fdm%2FugNZx9J1bTN6mW0NIKTVays\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cddcdc7bca4a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":113164,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"8357687e9ef8be402e9aa558d1f15c8d","sha1":"fb6aed25a1ab0a066a9466cdab98dd8770580998","sha256":"1c37be2ceb1e5c6f8aff0f0349245d33fcec337edd9acf8815bc1243ab341ba6","sha512":"a5e59249703d6679053d280b1acaeec9c696625afd73e2defdcb7cfa2fba2ff999535cc82ad95604c8206c2a100d371f0f5e208f00bf969f161f73668e364dcb","ssdeep":"1536:73+vmsE8UdcQYvRCLCC8n5O2lj2thu3P/JKy03:73+vmsZUdcQY5CLCC8nQ2ihAJG","tlshash":"58b35fd9980b80d09e2511ded477ec15e0284a63cdacf1a3b92cdee1751dfa2c587a3b","first_seen":"2026-02-13T13:18:54.379981Z","last_seen":"2026-02-14T16:05:24.103563Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48532\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\netag: \"698a4a93-bd94\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xBhZrGs4VOlGInVPqCbDTxj1g7ZsvDmXaSxre5Uc2o4gGEIoda%2BDqlufcWdEmwh2pnmIadBZQEYG9VtbtPbluPowfJDYjiI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cddcdc9ccfca9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T14:10:37.947396Z","times_seen":204859,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":16,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/css2.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 48532\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\netag: \"698a4a93-bd94\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BLKzcywMCcgRmCL4dlTWSIa%2BxM1qk6aySoCw1ebAfX2CY988rIPjNcilAfFjlI3FcjFfkmKDG2PLDjsGZWO5kK%2FWIISYsYFg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cddcdc9ed04a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48532,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-06-06T14:10:37.947396Z","times_seen":204859,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/zeusd.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /zeusd.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-c611b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1mlOLEKWXAs5vZdGhkHmY1voRWKH%2FXnqzpSIG3FKo4BFlT0SB17WXRxqoiDAUNJcnM0k9bmdUyQ8s9Nh%2FXodvcAPjTsyNt5r\"}]}\r\ncf-ray: 9cddcdca6d2fa9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":811291,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0457ad5f583856a2b115338707e939e8","sha1":"7d688e04233f8c16fd12e053e4bfeb376b5fb4d7","sha256":"c255ff582dfd68435ebb95966fbf0d91c83b3e669dd58a3b96ab98de6a5259b7","sha512":"b2e96c5728a9c16c0afe6db89ee86265561c3603b9fedf4494559ef73dcec852f00162942ed2ca19ac41249274fe38a66f8417a06de71c6dbf507d1507b0ed68","ssdeep":"3072:N8elJIS952XXNcpPOjafiNjXYg1d4yYzVnOn6z2De+ty/rqWVCDlxBBx7x51IYoz:rnI1Cdlm5UcLjOFO/+S/u","tlshash":"600522e4af3550b8d56a13408ef61c692b2fa6fd3b03ca25c55eab715c33d4dc2ca885","first_seen":"2026-02-13T13:18:54.397503Z","last_seen":"2026-02-14T16:05:24.104593Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T16:04:52.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 16:04:52 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YNprOec5O%2FTRDBB5NLT8BfJWGXDN%2BvJ3wPJ1p5vInjAe5eXSeneidPX7WayausaczuR0pcEbhQtEwAaaS5lA0p%2BePLCcY8ME\"}]}\r\nage: 96387\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cddcdc68954c124-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":102428,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (549)","md5":"7947f937525e690d8c8579d9b3291675","sha1":"f3516153caaf91553b872869aab0d704226bc757","sha256":"382d5633dfa445149670afb614a5bcda50b188e177b61ee4aa462ddea972762e","sha512":"9ae8ff63456b3a359c7973a240415d511c150e140badd74d9676df531044b726ac6d95995d90464f519d1d41ff125b6db0176d70813a0af1de0e0be13d234e47","ssdeep":"768:L+zy707sXaHK6N/QNtRnZ4DENYGTLa2Ql3a23vXoWFih8CV/uvPCdqBxhqVjZ+bb:StKJRbINJ/0wkCeY2vpo3j7yMvzoC5","tlshash":"00a3b760a5900a7f744382eab7e19e0e97b4a553c91bf68d72fc90821fc7cbacd67504","first_seen":"2026-02-14T16:05:24.10794Z","last_seen":"2026-02-14T16:05:24.10794Z","times_seen":1,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":100,"dns":71,"connect":8,"send":0,"wait":30,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoth.cam/magnetYellow.svg","fqdn":"zoth.cam","domain":"zoth.cam","tld":"cam"},"ip":{"addr":"104.21.58.112","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zoth.cam/","date":"2026-02-14T16:04:53.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zoth.cam","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Feb 2026 20:08:58 GMT","end":"Sun, 10 May 2026 21:08:48 GMT"},"fingerprint":{"sha1":"F9:C2:3E:82:41:C9:29:6C:9B:FD:3F:71:6D:67:BA:26:03:26:13:B3","sha256":"BF:4D:99:F9:EB:CE:40:3C:78:52:98:96:15:1C:D1:56:DF:86:F2:FE:EF:09:8F:04:74:1A:B9:07:80:B9:A6:64"}}},"request":{"raw":"GET /magnetYellow.svg HTTP/1.1\r\nHost: zoth.cam\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://zoth.cam/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 16:04:53 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Mon, 09 Feb 2026 20:58:59 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 96386\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"698a4a93-1cfd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZdI3DA3DFY20UM8WS9AcGMrHgezfbbF6MNLVt5LW445HDJP%2FruUuorB82ClWnJZabA0LPPsr%2F3pmlfjgkykvPLr%2BZU872XC2\"}]}\r\ncf-ray: 9cddcdca7d31a9d3-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7421,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"354c3f8150c81360805c64218cb0f315","sha1":"433776a587fd7ffc5703ba90e60109ced68701f0","sha256":"23f0034f75199362bb61f9f36423c0874eb605ce802ce6480a0f7ab09f8a4c61","sha512":"4ff3a17088dc8e610e3ce1d23adc5c15ae25360e952d3bd37fb08c12a7bce44f2c519f5b17a817f445d9a83025343c595a9eb4a0c0baa4ca0560958665869543","ssdeep":"96:0JRvGElrPwpv1SkDLpgv+yIEbIOCQCT76NyvH2/lNys5WT3G1sbkbK+VCBWdHziP:C741RgLMQm+N+4atUsY1q2iLLstz49","tlshash":"5ae197e6b3c871e0d442d3f4af2ea071b52f28f92f95ca944ae55fa5e55140e0c6dcc4","first_seen":"2026-02-13T13:18:54.412582Z","last_seen":"2026-02-14T16:05:24.109333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"zoth.cam","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}