{"report_id":"52ef8e56-6edc-48d4-b4f0-950baf03ea6e","version":6,"status":"done","tags":[],"date":"2026-02-21T21:35:48Z","url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"title":"Soumission de documents","dom":{"size":15165,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15120), with no line terminators","md5":"471f0d5a9423a02dd983438fd49272ad","sha1":"2294c4e011edf69b514c54473cb57e2e0471d991","sha256":"3c1a4cf6cc5d6381e99ad3ae8dc9eab7d786c93682c89c9d048ea55a4cdf3410","sha512":"9e79b03b0f57ec759ad8a024cfb1b22696f4b6dec12e1d5da84e619ba9113f26d9bdd5cdeb99225c4276f8bd41f02fccd3bd1948821cb814d832cc196dc499b5","ssdeep":"192:0wMoG3oTZuDbI9Lncn5jzS4iLYJICeZ9WgyTZK5uKGKiXgnqzcpmtbsXq9L7GXmo:oroluD89Tc5v9iRTu+Qbt93GXmVS1","tlshash":"e362c8362c08dd8aa873cba8913bbf3f50dda35fc51ad49851ecca251781cf95a92dd0","dom_hash":"domhash87d6c96b97896022faf4f7bf4662640d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-28T21:35:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"client-cb65x920obpr3qs.com","ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-18","domain_rank":0,"first_seen":"2026-02-21T20:28:17.433073Z","last_seen":"2026-02-21T20:28:17.433073Z","alert_count":39,"request_count":13,"received_data":643387,"sent_data":6278,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-02-15T23:23:43.665666Z","alert_count":0,"request_count":2,"received_data":6035,"sent_data":972,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-07-28T18:57:54.380247Z","times_seen":205894,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/255-5d038f43a4c9d328.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"379cc1be6dabaa0765a88501517c28cc","sha1":"c054b3ec9d9a2dde6419a564f969a9a1bfa53c89","sha256":"7e7399dd35c85e55dd714f8f22ccec9692c9caea75757f438de76fd584888c36","sha512":"421aa510c1002e9c77bff38c45c3d536d68fb163967694cdd67ae9d391b9f2528de826f0e94a4894b8e81a12515fb523eefd15010e6cc861cfc7cea966daebeb","ssdeep":"1536:Ch7TNrI1z+cHq41hlHM0dW/7ZsyBPhsecqmMEsoM38uGym0FZ3+ureDhuzMcG:8TNryq2o0Mb5krwVZ37reDuXG","tlshash":"84f3c9b676d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975605dea1b3faa","size":172052,"data":"","first_seen":"2025-12-04T14:32:00.341809Z","last_seen":"2026-04-28T16:21:54.872344Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"aedba0ad56dee72d34975a8ec014a62a","sha1":"e8f61e1c2ac29b232ce2c28b01a0a2489e0391b3","sha256":"8752fc17530cb3de48b0152f48c0afc9e748795803517911392ec5c903b73282","sha512":"e9761f2a36c473a8279f3750a2399b8b5fda25b16dd96bcd4c25b5190c8fcd60606e305ae3a8f3085290b755d7d882a72164721538dd164c982d4ea9edc58cb9","ssdeep":"","tlshash":"d611ab8df245e8c1aca2df5f52330e3a4898fd3c5175a59862cfd96b02218bd5389806","size":1030,"data":"","first_seen":"2026-02-21T20:28:21.481558Z","last_seen":"2026-02-21T21:35:49.174999Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"680b6463e6180b85796cf78ef18dde4f","sha1":"a73083d3d7faa118a565b2fbdf3d2694974b4814","sha256":"d0ece9cc7e82f304ecf37cc289acbd502242f9847ad0a54bedc19c386023a5bf","sha512":"6428a65dc74af431d355be3aaa5e46bf2229ebf1b91a501aff9b44c104cec5eec8437348167ee4407bbca8f268a2702849dcafe4159b1d96aeb1f78dfc61e6b3","ssdeep":"","tlshash":"2551b73d6408dd4bfdae3d69017ead3a20cd456b43d4def886c8de100a8247a2792dc1","size":3122,"data":"","first_seen":"2026-02-21T20:28:21.483536Z","last_seen":"2026-02-21T21:35:49.175621Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ebedd94e0a64462988e521f367279054","sha1":"725fd14f3a5d1f727dbafd4ebd933aef0606d1e3","sha256":"f0dc71197c62afda63635b60a1b11a9c5b89fe75b9b5f1ad2f12d62568ee37a0","sha512":"8e922703dcb7bb3985ef2eb60a901491e247ac4f5102968b9032e28102855b483ea174869e16ebb5e3722911d6fd42be2fc01fbeebbae0d02d51872a1a876a7f","ssdeep":"","tlshash":"98b0127ce011fed154b72072613af0c6325f908d19b4106011137188060821a2b03fc0","size":91,"data":"","first_seen":"2025-08-09T18:50:56.226754Z","last_seen":"2026-07-27T11:57:46.980661Z","times_seen":356,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/app/page-0e9a6060d0d535d4.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"108c1d4af30b5453045ccabeedea2112","sha1":"cb722ac01d1db7824c3db75d1dfe30121eb103b5","sha256":"6615b40f2142a1f8a2fe47df26a02665126f4870cabb89eaba4848b775b1a12e","sha512":"0088409da161e81dd53fefe698ef84cb70ee581cee30e8956e7c31f0293b4a5349bf33daa4f78641b3bae2ad3f497b919fc6c03820df7a09d7e5a9f865af8277","ssdeep":"768:0YBRXDjUeuh60SRxRZLkL/dA7+w8PdSWASSlAFk6Z3:Zoeuh6RqDdb3","tlshash":"f713429de480fbecb92742d9a99d6025b02f6f89cb1f8ca9b0f8b8111549454bb477cc","size":41927,"data":"","first_seen":"2026-02-21T20:28:21.466642Z","last_seen":"2026-02-21T21:35:49.165872Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/728-a0728c5670892b3a.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"addd20abd17003de62988fc3aec46968","sha1":"3d84040e7b90c7580ca6ade8cf4403e759e7db76","sha256":"22b04e26ef720720ce4bae5f33ec6ecc9d8b95fa4c5623a9df15c919874cd490","sha512":"a5b7197e9ed2320d4fa5bfbc51c8bf7c643ea174fb286f9f5673368b1986417804380f94021ffd2f2b9ae7f615b9f50c978b72189f60e93d905e4a28d328802a","ssdeep":"1536:FOjGhw1fuSB7uagaeBMDVb7wvQYJDQkeYCpSDsl/ZXJU7Oko5pgD0gdJbdTT3Wb:FOj/1qkeOxYDQk0Bp/Adw","tlshash":"49c33da632427174d7af82dbd07fd10db73e2615100e0024f12a8db9366dad5e2a7f7a","size":127839,"data":"","first_seen":"2026-02-21T20:28:21.462784Z","last_seen":"2026-04-28T16:21:54.893243Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/webpack-a881ab60b273ed59.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4adee18bddbae917440d8936a0765d3d","sha1":"37a48fb8e608bb43f4369fba9fe591529a575718","sha256":"d8c5476264e6bb90a57706f71358576c41735dbc3bee806028da2e4a147e998f","sha512":"a13a24959bca78346e7b4aab498bcad173bd188b34e762567dbd0815f8622823a12e171194f88d453e37fa94cb3abfdd10f9dd460b5c8cf08a5913f7de088c41","ssdeep":"","tlshash":"0f61b4a93625fab556f108c5887fc142f619603b052afca0e717dcb9b474aa20462ff3","size":3415,"data":"","first_seen":"2026-02-21T20:28:21.472926Z","last_seen":"2026-07-18T11:20:55.259624Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7b58bd6d8055ea6231f07522f243e766","sha1":"463393147fcfd6f9a726651c582e641afd74293b","sha256":"4d5ed3c096c0c5ca43b13548b9f288a31f93f705af7af2031d2c681f752fecd1","sha512":"8bee97d8ac40b2b1650392e6da42e7370d1dbb0eba8f41aedb32a2174b42a1aebc614d4b0d1514d5c58044d06dab20e066018f6ec8207d3bea364cba5e1f3761","ssdeep":"","tlshash":"fcd02291ec03cc1cc26a0f22283a1c2a21cdc9a8070685479c96da3c59c2a3049b4dca","size":202,"data":"","first_seen":"2025-12-11T15:54:11.609301Z","last_seen":"2026-07-23T06:31:46.801191Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"569595b0841b46fb6937c22f40c57afe","sha1":"ff49af187007bc341f521609def78293acf91269","sha256":"c1404bb0ce838053ed4cde719c4af6f6f5121bfa2ea3b01ea94bd3a251add199","sha512":"0120a2a6ae1c22b30acb29084cd5402d2c9d550d3c2fa88a612cf412ec66d1f881de0f59400f135ab40f1b4df94d3b7c745fa6f17254a0c6480c63a9e5238afc","ssdeep":"","tlshash":"ed9002a0d58a0d558032056254241c054398c46c11c85d8016a460c95061979a549d4d","size":53,"data":"","first_seen":"2025-09-03T21:00:11.465298Z","last_seen":"2026-07-23T19:38:42.926766Z","times_seen":123,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c00f4cb76b80f940766379a9fc78cf10","sha1":"e4f2de29752f521b902c03c4331f987d23f87325","sha256":"e577517624c8daf93256164b815b03a6a04a3a8ffff578c90e57d80973cd8a9a","sha512":"58292692dd0ba4304a0132995db05050e6cd116edc5ea6aeff0cb389bc5584d374d6c879f10703f560d974b0b5d233cf646c5a6c117564f4b2babb197b38c235","ssdeep":"","tlshash":"fc216dba6c09dc05868bae28197e7c6714ecc3929162a54ba1dccc2805d3d748bf0b31","size":1169,"data":"","first_seen":"2026-02-21T20:28:21.489304Z","last_seen":"2026-04-28T16:21:54.907968Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/app/layout-8e2ab9df402bca3f.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d34528f43f9710a6eaf45b0406925b50","sha1":"0913e6430151e3590e7d1dc26b037a3d41a30210","sha256":"4d62d6d2ef8dea87c3982db62af349236942e48cd657a9cb5d5ffa8bfc7f5da8","sha512":"c9bbb5a7af8f815cf0bfafcc46f12f4abc6db4a2f5f592dd55a15fb34d04bd9a9f6ca7844994078d8dd21a50f02212725ba64fbdfcda9a3a188e5e7b36827368","ssdeep":"96:Ss/mUmzS5Wn5Gy9lVZsNQUbcr7BTg7BTVb9GC383nHd1MsY89GCcwi166:Su9mzolKUbcr7y70ib39Ho6","tlshash":"32b1e9e676c9fc35969689806877c29236112a33301f24d0d7f68ce921a9ec948d2f8e","size":5378,"data":"","first_seen":"2026-02-21T20:28:21.465697Z","last_seen":"2026-02-21T21:35:49.173182Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/187-fa1a62f492999796.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80f2205af7ad03597f7f9973a1c6faae","sha1":"6ce7b6af175af7a93e20bacd2166a431c454d24e","sha256":"04334cddd471aca025898cdb1650c256eab3258a3c125a87f5e27059e7338cca","sha512":"a50feebc202bed62ada2a08c218176209aa3b2c79452876cd0bb96d0a8ac3329c52ad17689cd80da58a11d8a0da99055ce21e0f0442e98e639d8f4e2602e71f9","ssdeep":"","tlshash":"ae4163f1e82279a51fd700ba90308503f0344038246d414ef3d0a93b6a36da5d6afe9b","size":2434,"data":"","first_seen":"2025-12-04T14:32:00.361189Z","last_seen":"2026-07-18T11:20:55.261788Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/main-app-6999c65ef80325c6.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"934ea0b2e820fcddc0128e0a33920236","sha1":"5dac857ff84e7b0195e9b486f9638ead919709ea","sha256":"0547d82cccc4234ce325397735a28de85c395f3d75397c396b2470f9dc1d1827","sha512":"12edd82f166977ba37757d594981f77a203f03bb81f576bc0a59d377ec70aab7206850eba44d4e272998b3d2ec6a786ed54aebaac11210c9caf1eaa33d0db039","ssdeep":"","tlshash":"dbf0f49a4f0cf42f5c26ad64fe97ace2285f4135302b4d647910eeb23c23b6cd670509","size":557,"data":"","first_seen":"2026-02-21T20:28:21.460978Z","last_seen":"2026-02-21T21:35:49.167639Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/4bd1b696-c023c6e3521b1417.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81cd3b2d7a933bcc456bfcdf03a6ba1f","sha1":"d2d83f54880bee55cee3e5bd30c9f02ad86c8f3f","sha256":"2c752a401191671d5bbbe7514f5828bbb0a7cc50bfbe77ddaf1b1ccba4412ed2","sha512":"5e2b3c516f1a407eff8c4ffd35d556cbef0ea9a9bbca5cb00f76dcd2f7e7c0a8d5e89736c596f434c84bd4b259516e51814873adb4c6d714734f4211bf86d84a","ssdeep":"1536:iWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:u9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"75f3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173019,"data":"","first_seen":"2025-08-23T11:54:10.591173Z","last_seen":"2026-07-28T16:41:19.381738Z","times_seen":3773,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dacfb4a810abbed008d0a3d74fdc3e9b","sha1":"3996c50fa34bc1d287566b7ad8d76979c980ab7b","sha256":"8ff0c9877b4e3aa0b79af940929496dd071b47df12b0104af8b3b0fb78bdfabc","sha512":"ee29bd34aafba27828ae6fa9aed1be1d6d005244731addd5940fcdb7cea9be12d34fac0c03767cea1da1ad82e525ca61d6640c105bbc798481b5813a78a47719","ssdeep":"","tlshash":"d59004f0d0400cd7443304131cfc7101555cd04c07510d401f51d4475c1115d7705dc5","size":46,"data":"","first_seen":"2025-08-09T18:50:56.231744Z","last_seen":"2026-07-28T19:11:33.487529Z","times_seen":1252,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/same-runtime/dist/index.global.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2165392d0b489588748cd32fce0ecf35","sha1":"87bbbe8e5e04aa8a5e461e6d081dcf6214a8f26d","sha256":"943c9c5221932f2d484afb427599a4a363e16a02b7e069628bba3741aac4139c","sha512":"87ce27b2f2f5ff3f55be2b72c76d7ccaaa8155af9d4664b73b3f1388d3784c9b52a9f756502f62beeca49ba43022e51c6ae0fa285aa6245b43deb084ceb3960e","ssdeep":"","tlshash":"bd4165e1e42578d15fc301ee60318903f0344438389a8146f3d47d7f6a2689adaaf99b","size":2329,"data":"","first_seen":"2025-07-05T08:59:45.379725Z","last_seen":"2026-07-18T11:20:55.286929Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-21T21:35:21.684Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:21 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mhGp%2FTEPxmEOhbjwnOLVHJkXzZ%2FD4nunhcrMmDWXFoIvzvggnOWXwNPs1w49QutimFicD8wV7VUShJamQJY5s%2Bk6VEHT4NerzN0MlJ0%2FJtnXHD5nXFizEfY8\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d195f80d85f618c-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14891,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (14846), with no line terminators","md5":"1a1d8b15ec56e9b453b2ffb48c2ffb9d","sha1":"d9ad78c79ae32917006a2d6eab25d0c691ada8d0","sha256":"e838771bcd46b3b45a8d7553ca18c790744761e1e158c3002bd886cf20fbeb94","sha512":"036649301536779f943f7e7b0c07ea60db30b1683fbaa583fdd8e2a435018eaf74c773f770ea1a1715ba242240f336a3e5c854b7bb75b0362a6ec4a3fa3675dc","ssdeep":"192:puoGUJTUOYbF9LS1nvS4iLYJICeZ9SPyrDZK5uKGKiXgnqzcpmtbsXq9L7GXmVSk:UoJAOYJ9OZv9iRd2u+Qbt93GXmVSk","tlshash":"9962c7362c08dc8aa873cbb8513bbf3b50dda36ec55ae55850eccd251781cf69a92dd0","first_seen":"2026-02-21T20:28:21.459082Z","last_seen":"2026-02-21T21:35:49.165207Z","times_seen":2,"resource_available":false,"data":null}},"time_used":153,"timings":{"blocked":49,"dns":13,"connect":8,"send":0,"wait":49,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/app/page-0e9a6060d0d535d4.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.118Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/chunks/app/page-0e9a6060d0d535d4.js HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrNg49ayj0PJo9mpKH0mJjcp23sdhpXyLSizRIl8IrBK7iybjpNSzSVCgFc0rVqOA8HInhnhYFu%2BUnXDGtxUS4T4nPdxPGAD1ELR%2F8BB3Sw5i6C1eKHSMDjm\"}]}\r\netag: W/\"8b06ec21cd06d185ad539932906ee0de\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: 9d195f82e86da3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41927,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (41763), with no line terminators","md5":"108c1d4af30b5453045ccabeedea2112","sha1":"cb722ac01d1db7824c3db75d1dfe30121eb103b5","sha256":"6615b40f2142a1f8a2fe47df26a02665126f4870cabb89eaba4848b775b1a12e","sha512":"0088409da161e81dd53fefe698ef84cb70ee581cee30e8956e7c31f0293b4a5349bf33daa4f78641b3bae2ad3f497b919fc6c03820df7a09d7e5a9f865af8277","ssdeep":"768:0YBRXDjUeuh60SRxRZLkL/dA7+w8PdSWASSlAFk6Z3:Zoeuh6RqDdb3","tlshash":"f713429de480fbecb92742d9a99d6025b02f6f89cb1f8ca9b0f8b8111549454bb477cc","first_seen":"2026-02-21T20:28:21.466642Z","last_seen":"2026-02-21T21:35:49.165872Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":63,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/same-runtime@0.0.1/dist/index.global.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /same-runtime@0.0.1/dist/index.global.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://client-cb65x920obpr3qs.com\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9d195f854cbd32fa-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 4047\r\ncache-control: public, max-age=31536000\r\nexpires: Sun, 21 Feb 2027 21:35:22 GMT\r\nlast-modified: Fri, 06 Feb 2026 23:34:49 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:lDycUiGTLy1ISvtCdZmko2PhagK34Glii7o3QarEE5w=:\r\nfly-request-id: 01KGTMXP98ATEK4JJ2F4G0ST1S-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2329,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2329), with no line terminators","md5":"2165392d0b489588748cd32fce0ecf35","sha1":"87bbbe8e5e04aa8a5e461e6d081dcf6214a8f26d","sha256":"943c9c5221932f2d484afb427599a4a363e16a02b7e069628bba3741aac4139c","sha512":"87ce27b2f2f5ff3f55be2b72c76d7ccaaa8155af9d4664b73b3f1388d3784c9b52a9f756502f62beeca49ba43022e51c6ae0fa285aa6245b43deb084ceb3960e","ssdeep":"","tlshash":"bd4165e1e42578d15fc301ee60318903f0344438389a8146f3d47d7f6a2689adaaf99b","first_seen":"2025-07-05T08:59:45.379725Z","last_seen":"2026-07-18T11:20:55.286929Z","times_seen":176,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/css/62d858f3f489fc2d.css","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.082Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/css/62d858f3f489fc2d.css HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncf-cache-status: REVALIDATED\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VIsDRhPQ5lX8QEOHDPsscdlWlp9PcIxT5UprOCWuziSZO5vRGhlI3cUARz14VEZIkMjMJVf%2FGDwRXvu2MYw7bpom8VkAgqSqwXFQARo4a7lGTzCGWvwv6g%3D%3D\"}]}\r\netag: W/\"a6a30fb77d7cb86d28b3c441f82f34a7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: 9d195f82d864a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31422,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (26755)","md5":"dadb7096b2384642dfd5ea226b09b817","sha1":"85b943a366227771851d65d3ca2aeaa87044365e","sha256":"8c62bd2d4818cea8b14aee81c6999d308aa28617e9363c9bca887dab46dafc8d","sha512":"2bd8ea3a4f9bc837f9d1077cb6c212b17cb36413b62e38c71631d7a21535f3aac180d59355b8eb967231e687f6f44ce3c5b3f3d66cf3293aa62ebae2408a92fa","ssdeep":"384:YHlRwn2wzhclmHghQ/fPQ2b5/hrTz9b0RrOn:uLwnrhclmMgr50RrOn","tlshash":"f7e2b71daa19543f7c23d4f9d2d8b99da11af0c0ee3a56e6bd8201109bd27f72d93344","first_seen":"2026-02-21T20:28:21.460084Z","last_seen":"2026-02-21T21:35:49.167029Z","times_seen":2,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/main-app-6999c65ef80325c6.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.099Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/chunks/main-app-6999c65ef80325c6.js HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FFO%2BbNm2e4BuMkXPnpFrusvSShgJ8bGotmcgYVUQ1NnNOfcpyK5MJSh1xyKhLdfCOAaUX6LxoVAq1U57lyPX%2BdrXJtit2T2zz%2Bpnoe2Fbmg2XMLapyUMO7B\"}]}\r\netag: W/\"65853aa603448d4fa8f3a33455b8e383\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: 9d195f82e869a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":557,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text, with very long lines (557), with no line terminators","md5":"934ea0b2e820fcddc0128e0a33920236","sha1":"5dac857ff84e7b0195e9b486f9638ead919709ea","sha256":"0547d82cccc4234ce325397735a28de85c395f3d75397c396b2470f9dc1d1827","sha512":"12edd82f166977ba37757d594981f77a203f03bb81f576bc0a59d377ec70aab7206850eba44d4e272998b3d2ec6a786ed54aebaac11210c9caf1eaa33d0db039","ssdeep":"","tlshash":"dbf0f49a4f0cf42f5c26ad64fe97ace2285f4135302b4d647910eeb23c23b6cd670509","first_seen":"2026-02-21T20:28:21.460978Z","last_seen":"2026-02-21T21:35:49.167639Z","times_seen":2,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/same-runtime/dist/index.global.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /same-runtime/dist/index.global.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nOrigin: https://client-cb65x920obpr3qs.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 55\r\ncf-ray: 9d195f835a9f32fa-OSL\r\nlocation: /same-runtime@0.0.1/dist/index.global.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2329,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T18:56:23.617879Z","times_seen":17584920,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":16,"dns":3,"connect":4,"send":0,"wait":285,"receive":1,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/media/93f479601ee12b01-s.p.woff2","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.073Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/media/93f479601ee12b01-s.p.woff2 HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 31288\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"9e8cfb3af7b622de5270309ea21cb80b\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPrGa5Hujl1LujyDbivp0hCKZugXonhmy%2FG8wZ4F9ytC%2FBs0PjmLxc4ei2EozmXFdn1Te3M49kL0xhrCp0Y0PBqMX1wb0Xucts72LFZM%2FmL9Sj0JAAp1NA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d195f82d863a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":31288,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 31288, version 1.0","md5":"da83d5f06d825c5ae65b7cca706cb312","sha1":"3820bcdc2e187ff5332ab0d5dc8529f8e10fd574","sha256":"b7ac144b394cbd81052d6397ec0c33397977b1d7e9bc095e744e652a378c6fb3","sha512":"c8b02f1655b30d6fd6e0b3ee92280d175fb0410938a71f625354fe79e009fb2928ed55b45d0000db9e527a388e8f3eb42875c6965c80eb4b03046c50f49ed187","ssdeep":"768:N4C8ya3ZZij3h4s0iIfv/x/tV3167X/27IwwlsUxCkegAeyTrJD7/kX:Z8Pzf3JF67eqlsZXLTrJcX","tlshash":"47e2f1e7f5578489abb26e7102e105d5c5ed4aa105bfd1fb642c70660d3aa0e0fc0b27","first_seen":"2024-12-09T15:40:29.87187Z","last_seen":"2026-07-28T17:58:51.869855Z","times_seen":25766,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/media/4cf2300e9c8272f7-s.p.woff2","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.071Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/media/4cf2300e9c8272f7-s.p.woff2 HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 28388\r\ncf-cache-status: REVALIDATED\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"a011ed8f74de8624e53a286819c1c610\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=56m3kkwyOYzuIrrIdhbyMAPVfe63d2YVddRpqE3SSFUvSl4cErH9Db69IFhGX1RhITCRZiVJ67Rn7CU8eDqAn3SYf5%2FsjkPXa%2BFq84afTnPqkYbUA8mxWGIB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d195f82c862a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28388,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28388, version 1.0","md5":"18bae71b1e1b2bb25321090a3b563103","sha1":"a636827d1fb47f9fddf94d55ed8f25e85155d1ea","sha256":"a29f900a6d603e989449327956e7ac61ea3e6b26ca7426f64e7cccf2cd4aed37","sha512":"e6560e1f68d236883884afa1fa4c2de5ddd6c75e69ddf1057c97f525015aa4306a14fb56c1526141bf2067d24b2ca72ea78e0e518b2bcbaf162056ee4a2b327a","ssdeep":"768:KD+2Y2za0bgeumM+doeWITKGOgUT3CbeZq:KDFzfKJ+SHIGGOh3CbeZq","tlshash":"9dd2e1a0bb98461d35fe1ba096ed42bf4a1d7f4ded7c1a65093b2b80174d4df20d8c68","first_seen":"2025-09-14T11:55:19.751418Z","last_seen":"2026-07-28T17:05:00.319494Z","times_seen":24410,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/4bd1b696-c023c6e3521b1417.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-c023c6e3521b1417.js HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vl8UaPi4L%2F7bNFOqOXPB5mwqxM6I8xBsSQgvLX9YtHwr8CxqFq9N5mvH14PuVgSwCHN%2F6Y%2FZkIp1ch2PTvsRWxjWyVspDsty2cjlfb9dfaCFerVIvMe9wtD%2B\"}]}\r\netag: W/\"0e232e1f8802fcfa861f4393320b459b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: 9d195f82d866a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173019,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"81cd3b2d7a933bcc456bfcdf03a6ba1f","sha1":"d2d83f54880bee55cee3e5bd30c9f02ad86c8f3f","sha256":"2c752a401191671d5bbbe7514f5828bbb0a7cc50bfbe77ddaf1b1ccba4412ed2","sha512":"5e2b3c516f1a407eff8c4ffd35d556cbef0ea9a9bbca5cb00f76dcd2f7e7c0a8d5e89736c596f434c84bd4b259516e51814873adb4c6d714734f4211bf86d84a","ssdeep":"1536:iWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:u9LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"75f3f8ec3d99e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-08-23T11:54:10.591173Z","last_seen":"2026-07-28T16:41:19.381738Z","times_seen":3773,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/255-5d038f43a4c9d328.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/chunks/255-5d038f43a4c9d328.js HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncontent-encoding: br\r\ncontent-type: application/x-javascript\r\netag: W/\"cd03f989d2b982e0205b0e78e201c391\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FeI8vHq03JYPZ0MnIBNlpIXsOM7B7MDRGRwhc88hup%2BWaIrfAXzEPulL0RI8HlqFsWglN4B27%2FsnAAO0YhiBu7VuO8AibshL7H8M8ch8envoOdJ9jYuFOQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d195f82e867a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172052,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"379cc1be6dabaa0765a88501517c28cc","sha1":"c054b3ec9d9a2dde6419a564f969a9a1bfa53c89","sha256":"7e7399dd35c85e55dd714f8f22ccec9692c9caea75757f438de76fd584888c36","sha512":"421aa510c1002e9c77bff38c45c3d536d68fb163967694cdd67ae9d391b9f2528de826f0e94a4894b8e81a12515fb523eefd15010e6cc861cfc7cea966daebeb","ssdeep":"1536:Ch7TNrI1z+cHq41hlHM0dW/7ZsyBPhsecqmMEsoM38uGym0FZ3+ureDhuzMcG:8TNryq2o0Mb5krwVZ37reDuXG","tlshash":"84f3c9b676d0f8d107a780e5843b400af3295c3b146f74a0a3e6dcd975605dea1b3faa","first_seen":"2025-12-04T14:32:00.341809Z","last_seen":"2026-04-28T16:21:54.872344Z","times_seen":12,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/187-fa1a62f492999796.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.102Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/chunks/187-fa1a62f492999796.js HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcI6lj1NSC0BMXOA2qkuNOlgtnucNPN8zVtbbwCRchLjuqO%2FrMMyI8Q9qk%2Fz8aq8Uce20bP1SCnUdyyyTQdx6bhKV1ms4PCyjk2VtU1I9BWFNPrHCT2jsd59\"}]}\r\netag: W/\"c412aa01af9f48da75588e32176cab05\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: 9d195f82e86aa3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2434,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (2434), with no line terminators","md5":"80f2205af7ad03597f7f9973a1c6faae","sha1":"6ce7b6af175af7a93e20bacd2166a431c454d24e","sha256":"04334cddd471aca025898cdb1650c256eab3258a3c125a87f5e27059e7338cca","sha512":"a50feebc202bed62ada2a08c218176209aa3b2c79452876cd0bb96d0a8ac3329c52ad17689cd80da58a11d8a0da99055ce21e0f0442e98e639d8f4e2602e71f9","ssdeep":"","tlshash":"ae4163f1e82279a51fd700ba90308503f0344038246d414ef3d0a93b6a36da5d6afe9b","first_seen":"2025-12-04T14:32:00.361189Z","last_seen":"2026-07-18T11:20:55.261788Z","times_seen":8,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/favicon.svg","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\netag: W/\"5e0d8de19607ec055a0184faa6c7995f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HW3ICmwkkac0FwzeAc4CMbf5dFDA5J1Qt4ZugcvI9gRL%2BZkldnM07jC82Kc8BjuO2JfLa2QvClUJ13IDEmdRTUiMfzWtX4IwHdAXyuIO63SHvRSbdQzuyeMyj3eTK2xLlu%2FDNmjL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=6,i=?0\r\ncf-ray: 9d195f84e8a7a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":389,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6d73e36e916341fcd6a200cbaa642b98","sha1":"256900bf22887d8073feaaa81ca8f4c0e2a3ca4d","sha256":"5453258664fe361d45431de65c05a80901130a20eb825f409b22ac3ad0ff178a","sha512":"133a783904124c01ada497bf4e5740b43c63be0ae31d810278419dae46bf76b66d0cac84abad8a99e3ea13666d11fcd5be32372204174f937e42d1b930a370a2","ssdeep":"","tlshash":"73e068e1c04d6405ce854be1196d3053e22ef1ec668000816688ef34702eeff7d93aa8","first_seen":"2026-02-21T20:28:21.467521Z","last_seen":"2026-02-21T21:35:49.171767Z","times_seen":2,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/webpack-a881ab60b273ed59.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.086Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/chunks/webpack-a881ab60b273ed59.js HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncf-cache-status: REVALIDATED\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uRwMt9Y0yZVzEPE0xjxMHbbon42N7LpVObWNNhrPLkBSM%2F7UEfUE7R3i0HSC3hMYxGe3ws6OtWyhrGJbu%2FFY5W0g6oXq3HkpswuPi3lPdh2kAFdaPuHnZkKA\"}]}\r\netag: W/\"5366b00e2916bb2d50310ef1d22fef8f\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-ray: 9d195f82d865a3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3415,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (3415), with no line terminators","md5":"4adee18bddbae917440d8936a0765d3d","sha1":"37a48fb8e608bb43f4369fba9fe591529a575718","sha256":"d8c5476264e6bb90a57706f71358576c41735dbc3bee806028da2e4a147e998f","sha512":"a13a24959bca78346e7b4aab498bcad173bd188b34e762567dbd0815f8622823a12e171194f88d453e37fa94cb3abfdd10f9dd460b5c8cf08a5913f7de088c41","ssdeep":"","tlshash":"0f61b4a93625fab556f108c5887fc142f619603b052afca0e717dcb9b474aa20462ff3","first_seen":"2026-02-21T20:28:21.472926Z","last_seen":"2026-07-18T11:20:55.259624Z","times_seen":7,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/app/layout-8e2ab9df402bca3f.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-8e2ab9df402bca3f.js HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncontent-encoding: br\r\ncontent-type: application/x-javascript\r\netag: W/\"eaf81194486ea9fd44bb39ea1cb40a94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9YkgQaH3JB3yT0c%2BXlzXIWhWE6HY9KENGXpclMp%2FZHwxmFQkSUNTvSnMTFYUnLqael9qqMgi%2BCGCP7NS0YylsC%2FqCfFuVMbPn%2BlqzQ5S7TMf1julXvfbbg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d195f82e86ba3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5378,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (5378), with no line terminators","md5":"d34528f43f9710a6eaf45b0406925b50","sha1":"0913e6430151e3590e7d1dc26b037a3d41a30210","sha256":"4d62d6d2ef8dea87c3982db62af349236942e48cd657a9cb5d5ffa8bfc7f5da8","sha512":"c9bbb5a7af8f815cf0bfafcc46f12f4abc6db4a2f5f592dd55a15fb34d04bd9a9f6ca7844994078d8dd21a50f02212725ba64fbdfcda9a3a188e5e7b36827368","ssdeep":"96:Ss/mUmzS5Wn5Gy9lVZsNQUbcr7BTg7BTVb9GC383nHd1MsY89GCcwi166:Su9mzolKUbcr7y70ib39Ho6","tlshash":"32b1e9e676c9fc35969689806877c29236112a33301f24d0d7f68ce921a9ec948d2f8e","first_seen":"2026-02-21T20:28:21.465697Z","last_seen":"2026-02-21T21:35:49.173182Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client-cb65x920obpr3qs.com/_next/static/chunks/728-a0728c5670892b3a.js","fqdn":"client-cb65x920obpr3qs.com","domain":"client-cb65x920obpr3qs.com","tld":"com"},"ip":{"addr":"172.67.213.42","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://client-cb65x920obpr3qs.com/","date":"2026-02-21T21:35:22.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"client-cb65x920obpr3qs.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 18 Feb 2026 11:02:21 GMT","end":"Tue, 19 May 2026 11:02:20 GMT"},"fingerprint":{"sha1":"A1:DC:CC:49:69:9F:04:E5:3F:61:A7:5F:16:F4:B8:63:51:6B:2E:3F","sha256":"00:79:A4:A3:99:EB:DE:FD:44:EC:FB:E8:6B:63:7A:CD:56:2B:86:D2:2E:5D:30:E5:D3:9A:9E:54:C1:77:4C:7D"}}},"request":{"raw":"GET /_next/static/chunks/728-a0728c5670892b3a.js HTTP/1.1\r\nHost: client-cb65x920obpr3qs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://client-cb65x920obpr3qs.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Feb 2026 21:35:22 GMT\r\ncontent-encoding: br\r\ncontent-type: application/x-javascript\r\netag: W/\"0bb693f0f8f8f2138ce108da519fe946\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\ncf-cache-status: REVALIDATED\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZwNS5v80tRFRhRsw%2BYoTaCQNf9QafVLjCJpgpBZ%2BoBf7PSa7B%2FsPH7qayvWWEoSZ1ce3AhIs%2BdMkbaGnd7dp3nqxi1Eee6adAuMhN7qdr0mU4eR7r16gEA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\npriority: u=3,i=?0\r\ncf-ray: 9d195f82e86ca3f8-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127839,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"addd20abd17003de62988fc3aec46968","sha1":"3d84040e7b90c7580ca6ade8cf4403e759e7db76","sha256":"22b04e26ef720720ce4bae5f33ec6ecc9d8b95fa4c5623a9df15c919874cd490","sha512":"a5b7197e9ed2320d4fa5bfbc51c8bf7c643ea174fb286f9f5673368b1986417804380f94021ffd2f2b9ae7f615b9f50c978b72189f60e93d905e4a28d328802a","ssdeep":"1536:FOjGhw1fuSB7uagaeBMDVb7wvQYJDQkeYCpSDsl/ZXJU7Oko5pgD0gdJbdTT3Wb:FOj/1qkeOxYDQk0Bp/Adw","tlshash":"49c33da632427174d7af82dbd07fd10db73e2615100e0024f12a8db9366dad5e2a7f7a","first_seen":"2026-02-21T20:28:21.462784Z","last_seen":"2026-04-28T16:21:54.893243Z","times_seen":4,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-21","alert":"Sinkholed","trigger":"client-cb65x920obpr3qs.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}