{"report_id":"5649bfac-594b-4622-93aa-d213778baf55","version":6,"status":"done","tags":[],"date":"2026-01-28T20:44:08Z","url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/auth/home","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"title":"Relive 2017+ with pekora.zip","dom":{"size":10588,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (641)","md5":"5b16db8f80ec6dc0aacd53bacc855f17","sha1":"e5c7f9f1f3e70a4db198cd1ba8df1ccb95e48000","sha256":"0f9763b0df18eafb24b3dfa1cff869b05e40c24db5702731e4cbfd6d3299f689","sha512":"2f4dd4c352de5f8a93f49f394eb26fe2a18f78dcbce09ef99b3e6ed77e8d48d5d146da80ad724b1c1bc9f1bba2d7c7df939bab9d26ed4799f412cec8fbcc10ac","ssdeep":"192:RX4CT79LmQJpxZUbahePQ9Hp0u52nVAe8hhL306byb7bVZj2j:RXhvHH3LE6g75Zj0","tlshash":"ce22a52662f12167064342da37a5ab457fd5c047ca1aeb48b6ff53d88fc1c42ac23b8d","dom_hash":"domhash4c59f4d7557feed7a38740db0010e54c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-04T20:44:08Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":11,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"Client IP","port":36460,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO TLS Handshake Failure","source":"{\"timestamp\":\"2026-01-28T20:43:40.666819+0000\",\"flow_id\":586898506258457,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.67.144.192\",\"src_port\":443,\"dest_ip\":\"172.18.0.45\",\"dest_port\":36460,\"proto\":\"TCP\",\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2029340,\"rev\":2,\"signature\":\"ET INFO TLS Handshake Failure\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_01_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_01_30\"]}},\"tls\":{\"sni\":\"ephemeralcounters.api.pekora.zip\",\"version\":\"UNDETERMINED\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":3,\"pkts_toclient\":3,\"bytes_toserver\":723,\"bytes_toclient\":213,\"start\":\"2026-01-28T20:43:40.661529+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.802487+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c5352cb49b03181\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/?__cf_chl_rt_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":825,\"bytes_toclient\":1120,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.883458+0000\",\"flow_id\":1169732010832201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51364,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51364},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/x-icon\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":661,\"bytes_toclient\":5993,\"start\":\"2026-01-28T20:43:40.848201+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.883197+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/x-icon\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/?__cf_chl_rt_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":6194},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":23,\"pkts_toclient\":48,\"bytes_toserver\":2590,\"bytes_toclient\":62823,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.414124+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":5,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/auth/home\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/?__cf_chl_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":35,\"pkts_toclient\":78,\"bytes_toserver\":4299,\"bytes_toclient\":89883,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.542534+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":6,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/fonts/roblox-font-icon.css\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":39,\"pkts_toclient\":86,\"bytes_toserver\":5290,\"bytes_toclient\":97113,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.604222+0000\",\"flow_id\":1169732010832201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51364,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51364},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/UnsecuredContent/Images3.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":784},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":13,\"pkts_toclient\":16,\"bytes_toserver\":1991,\"bytes_toclient\":17193,\"start\":\"2026-01-28T20:43:40.848201+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.628372+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":7,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/UnsecuredContent/Images1.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2235},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":42,\"pkts_toclient\":99,\"bytes_toserver\":6224,\"bytes_toclient\":112884,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":58696,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.635780+0000\",\"flow_id\":672585251834881,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":58696,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":58696},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/UnsecuredContent/Images2.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":786},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":1008,\"bytes_toclient\":6196,\"start\":\"2026-01-28T20:43:48.543745+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":51364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.969795+0000\",\"flow_id\":1169732010832201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51364,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":2,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51364},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/i/do/not/exist.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":736,\"pkts_toclient\":817,\"bytes_toserver\":50435,\"bytes_toclient\":1186603,\"start\":\"2026-01-28T20:43:40.848201+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-01-25T22:30:32.196824Z","alert_count":0,"request_count":3,"received_data":344896,"sent_data":1524,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ephemeralcounters.api.pekora.zip","ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-12-16","domain_rank":0,"first_seen":"2025-04-24T16:52:41.92821Z","last_seen":"2025-05-15T21:30:03.65546Z","alert_count":42,"request_count":14,"received_data":18553331,"sent_data":9714,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]}]},{"fqdn":"challenges.cloudflare.com","ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":11393,"first_seen":"2021-10-20T05:02:03Z","last_seen":"2026-01-25T22:40:03.969478Z","alert_count":0,"request_count":6,"received_data":505997,"sent_data":4424,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3d8e56a3e415459e5d224bec9f237d58","sha1":"76402e798725218b1d8f9da9d37d68f742e3e2c0","sha256":"419a7aa7c4c2f0a8f966408c2f8ec8076c12e0501b28104c2c6f11c6d49763af","sha512":"49ab3d406f8542aeb303b6051df7acc9bbfa27e556693a4a70cb224e3d15adf13b5173baa4c0d4a1116787afd50a254810f3d60626c048480b9f6eaa7bdd5bab","ssdeep":"","tlshash":"c6b012406ab13000c3139034484bc808f008034220ac041c745957300f0045a49f95a8","size":87,"data":"","first_seen":"2025-06-09T01:19:43.901562Z","last_seen":"2026-04-04T16:25:51.843324Z","times_seen":3652,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f074199d71cdb60d7009742c5244e548","sha1":"ba08fcf2e6a82627f99020274c3f61c50ceac519","sha256":"d094d69cdf99c3757e56b1d3865408feb4b1d56e4e361b778ad02d92af42137e","sha512":"e6972b1db962a3e45177485030e12e666c4e0d8d4ebcb9f362d5f51172808b369630ce52bdc414fd4cad95ddced0890314202c326cc2f64ffd0630aeb6efceda","ssdeep":"3:N/BKL1Xo4:eL1h","tlshash":"8f5504c0544130740c50cc10d354545750454401501d4d07745d4dd517310004014740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.81062Z","last_seen":"2026-01-28T20:44:18.81062Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ea0eeb2f345f0283173ac98be3f9811c","sha1":"60cae175143e7503e821e3c867faf56e519fef80","sha256":"aeb52357c17bcfedde4627900b5caf85436ccf038b1f3e294079a72de5bbba67","sha512":"6a58ca539f783ece92f84dd36aa5a455c04dcd6c927b143a46c2c9c56950817b5a51cbf381f8d823ebb62e7db56315bded6f7e4f49afe789c4e6194cda5e8496","ssdeep":"3:N/BKL1XuDXn:eL1OXn","tlshash":"2e5504d0544130740410cc40d350545d50454411501d4503745d0cd457310044054744","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.811367Z","last_seen":"2026-01-28T20:44:18.811367Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"bfc894fb96ceef03c5dbed69b1789abf","sha1":"9000d0502b4795830a9bdcf56b1913db86e64b5d","sha256":"8f7e9178a15ab40d945ade6847ab5ac6e826fe20bf855a58793f45bdac9bd760","sha512":"8339b985fa51b55bc2c8aabcc3616214f2c77ef576ebafc445e2ed67f728b1c1d8b4d488306cbea7c0f641860de5454966ac9bf6d2fb794484ff0a4b69b98ef3","ssdeep":"3:N/BKL1XvnU:eL1/nU","tlshash":"015504c0544530740411cc00d3505475500d4441501d4503745fccd417330004414740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.813172Z","last_seen":"2026-01-28T20:44:18.813172Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8d76ad9ea007c02ffe5d59f61406b6ad","sha1":"b830e9659fc6594c856bf6c69fbf417af4d197da","sha256":"219c43c08554166bb2255acc92362c6ed192d64f18df9a17fb34bca017c7cf79","sha512":"30b5f0b50b533ac1282198f7863e3886fe18d0f13cead7900ad8b875418dad3453cc64657e22341d0ef03ec6b9e02b0331a28a3bbda2d40eae6c8d7394f7c131","ssdeep":"3:N/BKL1Xqx:eL1i","tlshash":"425504c0d4413174041ccc01d350545550054441501d4503747d4cdc17310044014740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.814241Z","last_seen":"2026-01-28T20:44:18.814241Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"3a2c6b442fc38981c34aa01a09fd6a5a","sha1":"264062e6f7da6c630ef66ce6e4db1545561f4f51","sha256":"f04474d47bc714cd31452cc1207c77dd3fbd5fc8ca248457bab1097b10fa2c9f","sha512":"3a5b7ca792af478b96e0f5a435df2083f273292d832a2d3a9bbe5f69d464b04b181688199908f7d0258a5c65200396c49b77e44ac893b5a6c27e4e932a288520","ssdeep":"3:N/BKL1XqLn:eL1Y","tlshash":"0d5504c0544130740415cd03d350545550154401501d4503745d1dd417310044014740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.815079Z","last_seen":"2026-01-28T20:44:18.815079Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/d251aa49a8a3/api.js?onload=cAdz2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a7db0e0bae22d940e720d06abf548f7","sha1":"e68beaeb9b7b3aa74a922a3df2d7294811b62e72","sha256":"1d8e9927430ea86701daa3074746758677a012f2ee4196ce60438b4a526ac10f","sha512":"d7106b476dc2ca5f6f5fcf79fe9e69d72d27b12decbac13cf20bbec28fd7c5e72a920802eea9b15e41803252471548290533da353eec5e66ce9211854bb72083","ssdeep":"768:/Cofu2DMaHL9VAQepxn2tSv+1odY+0rOF8msKULg49Tr7+CuAUyG13PE0okbsO10:Q2gaHL9VAQepFbZdYlrNRg4t","tlshash":"37332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","size":50453,"data":"","first_seen":"2026-01-15T11:24:19.542226Z","last_seen":"2026-02-12T13:18:09.210194Z","times_seen":38367,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e471dfa206b7038a02063c0ef3590e6","sha1":"3896bc81858228ba08c6163f057b7efea86a4385","sha256":"0bd26b1c4aa3c2abc4828e4a7f534940e550184f1c92875c1eb6112156178039","sha512":"57523607857f697a00d6d109f5cba34ed6d001af4155adab4dcf23c2bb399d2fe93614fbfb899719e971aae3f2b1fea1593f8f8f76bbf31a4101733e9bdf3d91","ssdeep":"3072:SA/aY8la1YtdBuA3LnUT9kCCc/tiiBvjNq9wgSThYUQ9VNQWJapGLuK7:EblaatdBuA3Lna221jNq9w9h7Q9VMpD0","tlshash":"32041b8e75de79a563fa2071002731ce71aa68997c18984de301e8e57ce135caf76cf8","size":189131,"data":"","first_seen":"2026-01-28T20:44:18.81598Z","last_seen":"2026-01-28T20:44:18.81598Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"152d3de3e24d53603a92a2b8851ddb72","sha1":"9b2b3d11b8563f528f0dd2a6d167993a9d3ae748","sha256":"639fe08f808197835db2a8369d7e9fd90f60c0fed752832baa63c20b8b035f61","sha512":"2d57d18eddc737f863805bcc4aeac98742a0595d1583a3cb7866f1199f21162f65074680556e3439973c7602809b5aa5baa532effbee116b8586e4b2b3d1e02f","ssdeep":"3:N/BKL1Xvcn:eL1/cn","tlshash":"9b5504c05441f0740410cc00d3545455d0054405501d4507745d0cd417330004414741","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.817023Z","last_seen":"2026-01-28T20:44:18.817023Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"5ab2ad183b6eff42916ca9d36d71f28f","sha1":"2e0ff0a72730b1ebf3b42716fd56499386eea785","sha256":"43c3320f0c23dc24ac42bc150ad440bb328332db2898ef9ace1e38a2c933ba53","sha512":"bf41fb582d22cc3ee288265c493fcaba802d1d6a2256abab5970a613e25b1cd6761f9f3c856efc4907950b3b86f3723dfaf48095de5b3f211079cfbe31f013d8","ssdeep":"3:N/BKL1XuM:eL1f","tlshash":"625504c05d4530740430cc40f350547d50054c01701d4507745d0cd41731000401d744","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.81796Z","last_seen":"2026-01-28T20:44:18.81796Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"c94c05b47808400a392b53eeac0ab6d4","sha1":"e62afe4cb2842de8579fb8246b1c9de7137bc817","sha256":"ea9d83d1e894a983c61f16b0bf0726af937e4b7983fab2a1535fd8eb9772881d","sha512":"ec0b99a50aab2267de63460ba1deca0294a5539084e36522807b68bf920eb835de6ee138874532232727e985b179e740b230c45e3cbb832f9f90e90bcfccb8eb","ssdeep":"3:N/BKL1XqE:eL1b","tlshash":"245504c0544130740414dc00d350d45550154401701d450374dd0cd41731104c014744","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.818841Z","last_seen":"2026-01-28T20:44:18.818841Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"259ff6e7c4d7073beb308de8dc33335c","sha1":"141b6b813dddc20445f40b45336e5ecdfe5bf63e","sha256":"d440d4ac913b2fb37dcb3b4e906d88933d9fef7a89c04c17a283b5f11948e59b","sha512":"a747484e18215aa505334282d61e7f68558bd994799cc685c1066cbfc2ee8e86234226e2724aec22eaca938c8f9edf20337657928f4e0ce47b9bec96de80bc35","ssdeep":"3:N/BKL1Xo3:eL1+","tlshash":"2f5504c0d44130740410cc10d3f0545551074401501d4507745d0cd417310004014f50","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.820007Z","last_seen":"2026-01-28T20:44:18.820007Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"198ae5e8e732bca03371036467939c68","sha1":"3d2084339b666f85eb2666f91f80e060846bd732","sha256":"6479aedeb80161762ea94a5bd525cac8db40566bd9be73f83e3518d89576b6ea","sha512":"a9a7d5229195e035a6be37bd36e63075f9b698cf655e621f88f4fec13d56880f1ef8d3adbe29980ca3a3326bd7366ff3b800e19a4d5b6e248f77e5f934ce1507","ssdeep":"3:N/BKL1XtUR:eL19I","tlshash":"6b5504c0544134750410cc00d35054d550054405501d451774dd0cd517314004114740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.820774Z","last_seen":"2026-01-28T20:44:18.820774Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c5352cb49b03181","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7aeb4dc29e486e13640e42cb67727798","sha1":"c88d278cc949059444eabf18dcab05034aa794cb","sha256":"795b0da855848bce19b8d50385ab8939e84349d11c043b8c2208ec265fe893ca","sha512":"d8b250866afae42cdcb1a7d398f2d56f17b622bf3f2389092f8aeb60e8aab0b159d5508a04a9f130b53183d20d26bb7474598925bd2c3aefd5f17b0ce35d64d9","ssdeep":"1536:UvufElbyvc4BwHXFaCEkXm4ww58tFAw/fWRikyBuxJk7nifES:UmMlbyvc4BCbNXD56tFAw/yeuwir","tlshash":"9cc3e88d79ee789413f650b1602735ceb2ba388434689d5eb60289d07cd5318fab7df8","size":127407,"data":"","first_seen":"2026-01-28T20:44:18.806035Z","last_seen":"2026-01-28T20:44:18.806035Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.802487+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c5352cb49b03181\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/?__cf_chl_rt_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":825,\"bytes_toclient\":1120,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d0fc1e482572f3c4020dbd451b55d1c0","sha1":"c804decbf9bf6e8b22b3f241bf5934e7d7269c20","sha256":"c4a255b477825bc1a2cda5c27c2dcdb58387a365184614eb77f3398d7e018267","sha512":"20b40f5f96f8a6a5e15e298f0bea1765cd0b019f69f6ae71c6d0aa8d7c734f95d29ab2524daf53c56978d9307700f806b063895e66ec3e380d6cb5ac88f6114c","ssdeep":"3:N/BKL1XuWW:eL1m","tlshash":"6a5504c0554534750c10cc40d350545d50054401501d4d0374dd4dd417354004034744","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.821679Z","last_seen":"2026-01-28T20:44:18.821679Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-04-04T17:30:40.24768Z","times_seen":15155,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"e8718fc06a9f65c01e2ad86ea8501323","sha1":"cbe9848e0869c1443c699dec6518564e238b5a34","sha256":"c04225351a1e3f8770ad837e987e8a50b520e7522b389d61e9fd60a59f6d9efc","sha512":"f827a4c516a7898bc145d5bae554e9039a7c1c57f4c70e6be05d25ec4f2bcbc751ad5791e22700a3b3485767ca789a9cb7cb0b686d953418f621d7cc2dd2d6e2","ssdeep":"3:N/BKL1XrSS:eL17h","tlshash":"365504c054433075c430cc00f7505475d0054401501d5d0374dd0cd417310404014740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.822594Z","last_seen":"2026-01-28T20:44:18.822594Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"2ecbefa496ff68f6abfb616007f79bbc","sha1":"fc51e950c8236d9cafdc143cec59b4917a6481fd","sha256":"62e14231b945b415d70d74e549e188031dc4213e0b8dc7c190a5f5a5937af5fe","sha512":"5bda8c62a8935920e3fe6d1c7859922bcaedb0281a8390c78007929d6168f0a6472a3bd45593929c2e5124116268f08a74d9e3f87a0b02ec2a27f17c08324a77","ssdeep":"3:N/BKL1XtLn:eL19Ln","tlshash":"a25504c0544135740410cc01d35074dd50454475501f4507745d4cd417354004014740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.823469Z","last_seen":"2026-01-28T20:44:18.823469Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/?__cf_chl_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"584cbb83074519820ad71e4d72b9bd4c","sha1":"96ec784ab37de9b12384fb573546bd37f580e685","sha256":"488f67c1035436e4e56ff80257bdfdc0879946266c428d01a40a3b6a2744b087","sha512":"a9b0b89e254579e11818a4de445c595cb118292f066f3322d6801184d8686b3444f04bfed3e63ecc2d71da500c4861518e4a01646663e597a2edbc61a927dd31","ssdeep":"3:N/BKL1Xjs:eL1zs","tlshash":"dc5504c4544330740450cc40d7d4545550054403711d4503745f4cd417310004014740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.824354Z","last_seen":"2026-01-28T20:44:18.824354Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca897fb253cc8807c5aafc947eb02fb6","sha1":"25137d68712ada7d3ad424c80bc0d688a696f7bb","sha256":"57f9c536daa79c4d770534dbafbe2e7b2b2aa48b9eb2617b4e670b8a78a4a4ce","sha512":"187200763128b83b777932b28834f8a21adf5824c5b9f8635249168aaefcc2451885b26da07411ccd56a52146f9b8cc2524647ebf2df4c1474f80d219d893f64","ssdeep":"","tlshash":"d96000030c00cc300033000c0003003f30f00c3003cc300c033003f003c030c0000030","size":16,"data":"","first_seen":"2024-12-12T23:50:40.144885Z","last_seen":"2026-04-04T18:46:53.619406Z","times_seen":246061,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ca608066111b4bb9998c708bc7679996","sha1":"7dffe6c92e6da910559b7989a6399b8510fcd3c0","sha256":"4658913677400346a10ac5d7a7ed2f5d8e7b569059f2cb19be063022fd0bc69e","sha512":"047719d658672fd24de07bd965c88bc7c2f3a6b48fee129b46ebe5c078b07682632ffd238b3cf527d5019b0ad608f05927b88bf99c0ca42557e50ff4e6b2c5d9","ssdeep":"3:N/BKL1Xp5:eL155","tlshash":"6c5504c05441347c0470cc40d750545550454547501d4d03745d0cd41f311005014740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.825928Z","last_seen":"2026-01-28T20:44:18.825928Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"cf58e3e58c390cb1ba2f786f376ed0de","sha1":"86ae4236a390ee7ddb4fdac10f6c7cf87a4e9af7","sha256":"1e7e963f077bd22687a08842dd5ad0004aea4b6b5da56c71ffa38f132aaaf7d9","sha512":"3f9798513e1f8e3fa56a6ddd8434a3a1465724e57b69fe7fc7e84388c7b31dbabfd1f799df32c85005a548b334e2aa2debb133ba13f76bb7d0028bb76458496f","ssdeep":"3:N/BKL1Xsb:eL12","tlshash":"9b5504c0544130740c10cc04d350545551454417501d4503755d0cdc1f330005014740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.826974Z","last_seen":"2026-01-28T20:44:18.826974Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"8a6f0a213ede0ed2ffcdf202a794d925","sha1":"8efc122bf522831589733b9ed5d2c243a84cc6e7","sha256":"d8710b43be38233bed9c58b76f5a1f97a2de0a7b658af4eda0350ffec27bd312","sha512":"0d608003c196e7df1246d65ee63cdbd11e43b4255c986ed17fa1e8f878d4dd31c5de320cb1499178c7b3bf6f5eaf2863dcdbb2d1bb1945c0c7ac4405a741cf75","ssdeep":"3:N/BKL1XtP:eL19P","tlshash":"a35504c0544134741410cc00d350d4d550454401501d4703745f0cd41731400401474c","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.828346Z","last_seen":"2026-01-28T20:44:18.828346Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ebf694fc60b944c91908e27dfa6c0de6","sha1":"fd2b05fd6e8dcef33099f2f07ad7e13db041b14b","sha256":"4a0ddb230c8b6c017554849e4eed1e04bb428c31361aefa8b0f4a1c451905958","sha512":"3e5af21a2e87628f05cf19459f8cd505970aee125724273eebcd21ebcbc559ca91840590765274a9e4577b64584dcc6327142f16fdad9a89c91eac356e237737","ssdeep":"3:N/BKL1Xvk:eL1/k","tlshash":"ea5504c0544130740411cc00d3d054555005c401503d4503745d0cd41733100cc14740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.829408Z","last_seen":"2026-01-28T20:44:18.829408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"1f91226b710718a9dd1778516c50ed45","sha1":"ec9a200bb4eba840f659c8f9a05f05f9d3f705ba","sha256":"8fe0cec432e836b2d1f7adcef9bb2291ba6aa14271c16f73d64d14a2fae6aa10","sha512":"419226f98a43968ffd00592bd94ebff00a27e886d286484aa86d5eaf440bd965124daf6a67b9625363505d918561830be51ff8cadcde3c08ef7fa5d7deae263f","ssdeep":"3:N/BKL1XsT:eL1u","tlshash":"375504c0544530740410cc00d350547551054405501d4503755d4cd417350004014740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.830282Z","last_seen":"2026-01-28T20:44:18.830282Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"33ff6022e88df59f8dfc9eb546435e9c","sha1":"7f2ad96c0a1276fbc858c652a6e2d0b3c9d4d3e4","sha256":"a1c845cab782ea7dec04543ec72e0b354cb8e9aae23acc02ee02b1832e3acd9a","sha512":"99820974c649620d8dfd487054edee4863ca41025de5a87fcd6fddfafbecb53668799fdde6f7b809112fec178b18f28a9ff8e190d298aff5a29c6795ad639c25","ssdeep":"","tlshash":"0c600000c0303003000f3000f00000033cc000f0cccc3003030c00f000c000c0cc000c","size":14,"data":"","first_seen":"2024-12-12T23:50:40.556614Z","last_seen":"2026-04-04T18:46:53.546774Z","times_seen":248397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ff03fc8f0c3179fb4dcf4389f88a1c16","sha1":"05ff911d7ddf2d7c14b4316a87fd08f42c618f9f","sha256":"025229ec6bb50e915572750c5045d22c5fe16851fd077f1411f41b19aa1dfece","sha512":"4acb3551ec49556a2a64f4a47e480df29f611f67d0ef4b2474e90f7b86caed3dedb0b56eba12e577f1401d4d701c9a4f0898a06eee8f6d7dbe3b4b5283a854e8","ssdeep":"","tlshash":"4f60000000c000000000030cc00300003cc0003300fc0300c30c003000cf3cc0000000","size":14,"data":"","first_seen":"2024-12-12T23:50:40.182598Z","last_seen":"2026-04-04T18:46:53.565574Z","times_seen":247182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/?__cf_chl_rt_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f47389d2f1abd47dbebeef3e2d3ae8a7","sha1":"dde5aa75f9a647e73d3e2d3fdda68898f850f72d","sha256":"30893b81b3c71cdbd5cf34b54fb52f8eef50b27d8a3f2498a28d2b89bd987fda","sha512":"3524a8ed2b83fe9d62a0708424707959d6cc8e89a918407da7c46540b5982fea9230792acffc47517cf5d009231375b00d5ec2ff5689bfb74ea6a3c926653318","ssdeep":"","tlshash":"56b0028869e5a404e21975a5495fd144f12cc802148a0515658885515f114294167868","size":94,"data":"","first_seen":"2024-12-12T23:50:40.522517Z","last_seen":"2026-04-04T18:46:53.590679Z","times_seen":245603,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"74f3d79adfe882b98e0bdaddcbeff32e","sha1":"ab6256f30b6088ba5da1e85b4d38f8107fb8b18e","sha256":"4af061d1098a4c33b3c31799b7674f42ad24a352db9512a2ba9b369b642fd1c1","sha512":"60f086232314f0950463d8d1a57504ebc432aa5bf8372d18b35aa4d1987d49b5547afe1959d19ee3906d87fa0278df9a3d5ed9957378c445d30e734c6da98b1f","ssdeep":"3:N/BKL1Xu/n:eL1Y","tlshash":"a65504c0554130741430cc44d754545d50054401501dc503745d0cd417310004014744","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.832982Z","last_seen":"2026-01-28T20:44:18.832982Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"12991194db493a4744d9ecef6cd22dab","sha1":"2253999424c0765cc69c2610c3f475f54f6bb630","sha256":"e7ea48c08ffc7aa4697d470c16ecec958b6b59ff00b2fd65c30595e22ce2c68f","sha512":"503d455043fba56601251fe0bd4da6af6b7b33d121f8ca631a24a073567b09f922a90b3f63550aff7c4e86b41f8db2419d0f57aeae2f56ee39cb1fea0b27db7f","ssdeep":"3:N/BKL1XvKVn:eL1/O","tlshash":"3b5504c0544130740410cc05d3505457d0454401501d5503745d0cd417330044414f40","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.844447Z","last_seen":"2026-01-28T20:44:18.844447Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"f84e9e4d354e36613be42569bc6fd03d","sha1":"b74553162d2d29b74cfaa11f93350883fb25cd02","sha256":"12f58ebd7cae1df247ad435bf8912971ef3ad5dee8a3eaa648ba56543e421a04","sha512":"a1ac007c82ee7f93d804d7a1a1502957c5cad3d4e801e332c2bd5e5c53075324dfe7f28448829fcf2fd0b6d7d2f1b270f3bfa4fa0959ac008fb189a61d6b6f4d","ssdeep":"3:N/BKL1XtNW:eL19NW","tlshash":"015504c0544534740410cc40d75054d550054401501d4503745d0cf417314404054750","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.845325Z","last_seen":"2026-01-28T20:44:18.845325Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd9f2d203cefc2eddef8462307371c19","sha1":"e9cf4b1a0b27dbe89a3bc197b01fd18d5c9f7de6","sha256":"a36d65010cc95ae48844244782db4e3aa6f37d88c76df6937a48fdcc8caf1695","sha512":"5470fd085dfaa32d834ff41e34bd12c11028fe617cd492b5b0d88491fd3335d328d16da54e772bfae3fd7977a2dc402a29bb77c685465ea75af142a6751a7896","ssdeep":"","tlshash":"ec712aee9c438021cfe633c5855b67c8337a04778da552265d60e40ce57fe8d826d1d4","size":3501,"data":"","first_seen":"2026-01-28T20:44:18.846102Z","last_seen":"2026-01-28T20:44:18.846102Z","times_seen":1,"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"96b8df3d72c2f8b27c6856660d95fef1","sha1":"69ed9c7ebd94d1b71174de81bf152bd21da7e5cb","sha256":"e2df7f53ebabcd767fb0dcb247c14de25ca9a6d996b038b322519968e2dbeb67","sha512":"2b5aa603f050f4cbc5b14da8e3e55572a7b50495665eb45c8ac4f556197343760e7e5a4ad3d4b079d2fed7df562004d2ae5b21ddd037d8d7ae5ff8deac6c5916","ssdeep":"3:N/BKL1XoDU:eL1UU","tlshash":"b85504c05441307c0411dc30d350545550054401d01d450f745d4cd417310005034740","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.847146Z","last_seen":"2026-01-28T20:44:18.847146Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"d9cd45c0c97c4981f229f034f9349fbc","sha1":"d08c934f05e234538edc4c2235f4e998594348f9","sha256":"17ccd7be968f5e3641e0ab35b669747058312894f280833dbcb38b624475bbfb","sha512":"c5855cb132f8f567314bdd0668945c945321a42a40551d82698ba86beece133bb20989e365fb96941c973c9cae2b036b66e57c2a9aff17d538eede44ccedfa8e","ssdeep":"","tlshash":"2c0168adffb8b4a7236611ec0c7b290ce222fc45984369418820d5d97d26ac5552fb7d","size":786,"data":"","first_seen":"2026-01-28T20:34:23.460541Z","last_seen":"2026-01-28T21:40:41.754575Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"9e925e9341b490bfd3b4c4ca3b0c1ef2","sha1":"c2543fff3bfa6f144c2f06a7de6cd10c0b650cae","sha256":"1eb79602411ef02cf6fe117897015fff89f80face4eccd50425c45149b148408","sha512":"1f4be9bd3c61e621ef43bb2e0a2d7836786f730e4e0e6aa546899bceab0571904dfc6efc94c1324b1a22ae446f0a995b533054b1dbd09d0cda03e0985786d59a","ssdeep":"","tlshash":"2a30000000000003000c00000000000000000000000000000000000000000000000000","size":4,"data":"","first_seen":"2023-03-07T01:03:43Z","last_seen":"2026-04-04T18:46:53.546146Z","times_seen":666336,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"892706188ca90fb3b376c7e048a5b03a","sha1":"8b6c6d17951ad5df7b176694fc9e84b007ef1105","sha256":"a40549c6877353a2e356e8be6c6d3a9ff1766e6187c1aa33054fd16284884b96","sha512":"89b97e69d3e13340c0cf56b325e7f53ed3264674e11c00a79dda9fb6a3724fb7f2bd6fdbfbbd209d8a973ae3c171e8c1cffaff32e9ecd395d6a78e1698be6a0d","ssdeep":"","tlshash":"18b0125896899941c74019070c0f5cfaee345902489c97c0c220a15be0c4ff041eef35","size":101,"data":"","first_seen":"2025-10-22T18:40:01.499879Z","last_seen":"2026-04-03T11:40:49.880488Z","times_seen":139658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"0f8a1bc3dc0058293ae7124b9429294a","sha1":"a0103a1c13aa3cdf5bbe9f4ba027bae82eba3e6b","sha256":"ed7709d2c88bccbc9a1131d8613c04d37ac81fbf193c3aab59370bca26b4993a","sha512":"c9a8847df0a84537be9dc3413dbe1709e994dd50600cd1423ce24b2d0a98813053d37b9954faddee238da21acdf8d1e59d5bc10d4f2356d45b74f98ff0d50e85","ssdeep":"3:N/BKL1XpA:eL15A","tlshash":"685504c1544134740450cc40d350d45550454441501d4503745d4cd417310014114744","size":1337359,"data":"","first_seen":"2026-01-28T20:44:18.848818Z","last_seen":"2026-01-28T20:44:18.848818Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","size":39,"data":"","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-04-04T18:46:53.62713Z","times_seen":747713,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ephemeralcounters.api.pekora.zip/auth/home","date":"2026-01-28T20:43:48.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://ephemeralcounters.api.pekora.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ephemeralcounters.api.pekora.zip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 20:43:48 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 23715\r\ncf-ray: 9c5352fc0b70dfec-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220155-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 2901410\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=k5TqqDDo8SjeUQW48M%2BHf382VVNN%2FuaugTAQk%2B8Vf6Beo81t8lVwKHAIyrqBEY8MbPDX7M0QmVKtW6uSF8LrwPk%2FG5pSxseWMhpuy6wwrHa5f4xFZIlinurk%2FwlbgsC4XYI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78129,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-04-04T17:30:40.24768Z","times_seen":15155,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":9,"dns":3,"connect":1,"send":0,"wait":12,"receive":1,"ssl":8},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/UnsecuredContent/Images3.png","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ephemeralcounters.api.pekora.zip/auth/home","date":"2026-01-28T20:43:48.471Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /UnsecuredContent/Images3.png HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ephemeralcounters.api.pekora.zip/auth/home\r\nCookie: cf_clearance=.Bn.21QdOlSWuGjZaEXmTVA1THylJ0BbDfit6eNZAfw-1769633028-1.2.1.1-dOjR41VRA2a2UR0OWqNIM9CyrsH8C3cPCQKYgqqlmpvMfrUDrM9pmQwRLztFJHa6MI43F70le7hJp1UJxZWcFLq24x3AippO98LPjHR4EVmy8d3y4Amnq7NH.H0isQdOciFIZu_1eyzfwjNM2WEhlWqOqqwc2uXLtmN3MBu0aAoTfqL3Md59jDKVrgdU5IDNDFdyjvit9XqtBs_qwjNFjX8kuHWcQ44pmlyBvhA07Jc\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 1348339\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000\r\nETag: \"1dc1544ae51b8f3\"\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yJ64rz7MHYcI%2FWD14JoFwwdwZHjS%2FXe14cH2EQnwnzGHCVMex0ZbfVqdyCg7PrclJDTY5a16YRHngq3bBa1Gy06825bFp%2Bjeazrb%2Fmlcl2Ovlv5x1PUuiTINf3DMcQ%3D%3D\"}]}\r\nCF-RAY: 9c5352fc6cfa56af-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1348339,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3835 x 1863, 8-bit/color RGBA, non-interlaced","md5":"b44a86284a96969259e22cca6b7d7c68","sha1":"b8d3e430c9688d839d9e03a04f3a323a0e5851c7","sha256":"8fbc9409bbc7c740f488e20dfb1a484c7436881f4f0895a3c2fbd2b95e15c64a","sha512":"d0da54ab3d8ebf2fc89d05f0bcf5e6297930ab8fd421146f58aed1ccf50bd05098d71b036901e4ee9a78bb0d03c9f8207c28366f142f1095d07408f200084d1e","ssdeep":"24576:aqWOw8peC4zb3f2scOG/d9P35pwbTCWEiuWnMs6F:aT8peC8D2VOG/dtsnIiuWMZ","tlshash":"a3256729c8bc8626a249972c4647aa03df1093d6b7d6d03f7610fba1deb5c9f5c21f12","first_seen":"2025-09-21T20:47:54.481415Z","last_seen":"2026-01-28T20:44:18.794508Z","times_seen":4,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":72,"dns":0,"connect":0,"send":0,"wait":61,"receive":65,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.604222+0000\",\"flow_id\":1169732010832201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51364,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51364},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/UnsecuredContent/Images3.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":784},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":13,\"pkts_toclient\":16,\"bytes_toserver\":1991,\"bytes_toclient\":17193,\"start\":\"2026-01-28T20:43:40.848201+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/cdn-cgi/challenge-platform/h/b/flow/ov1/273858410:1769631759:gPlj8AfxIylj64ytFtlGty9a76NJJozgyMlhitTemJI/9c5352cb49b03181/kODy3GhQ91GUCA4c9qcChg8BueXV4oxO73HzrsfZ_DE-1769633020-1.2.1.1-Onm8KAPRUpGKjjzU.lKTOfdp9MeFOhAmETCwfr5mneD38oh32M9A2OPNlkPjk2et","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ephemeralcounters.api.pekora.zip/","date":"2026-01-28T20:43:41.041Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/273858410:1769631759:gPlj8AfxIylj64ytFtlGty9a76NJJozgyMlhitTemJI/9c5352cb49b03181/kODy3GhQ91GUCA4c9qcChg8BueXV4oxO73HzrsfZ_DE-1769633020-1.2.1.1-Onm8KAPRUpGKjjzU.lKTOfdp9MeFOhAmETCwfr5mneD38oh32M9A2OPNlkPjk2et HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ephemeralcounters.api.pekora.zip/\r\ncf-chl: kODy3GhQ91GUCA4c9qcChg8BueXV4oxO73HzrsfZ_DE-1769633020-1.2.1.1-Onm8KAPRUpGKjjzU.lKTOfdp9MeFOhAmETCwfr5mneD38oh32M9A2OPNlkPjk2et\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 2199\r\nOrigin: http://ephemeralcounters.api.pekora.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2199,"data":"i$CjtY2Bps6EEfLkTkEWKu+wxSelowUAcSUQpDWFcFHLWrOCljzHjtrVEYt5CgyfebmXwieXb0XKr3uHBbzGH7O-IbY8QA6gN12rl5FGjB6hQ-Fa+9wZG6niSWOyzTLrqF7jwUu3LSkSddl6k3L1rmZYOtGjEuBZLH-wL7j8-BCFck+u7wIUkAu4XRwxZt18QYBaYr07T+sgdM2Qh95+Dxz6r9YYHiYCHbpReWP6tBfa7-0W5aeqj+fBAfvbml3jtr7fIp4ardafFmVe+KgG8v8scZIc$UHo1MoxVc2ovL3ZfyPDXWtgaVPh2tMn$DVocD3uCAuYL5vYcuWK8s5ygpM4pANObeUy8PGLURKEudP0G-PaVm6o3gs$26f0W589jQwYQ3B2uY$HXs$iNRduT-4qj4WRdS0y8Qo3wUBFiX5c1tty09NRiRG5lLdUIcO3sv9s1fgLDrVjV$stLaROGzkyA4fKk1fZQc$aowx9fHtnXuzZ8tSB+EiKm0blNPjm6UC6QTnUXPoZ7d2cMiZ+4VvSkY$DNirmoZj1PLmbrztE98OBb$uer0uWH8s4z$b9hIvISkYng4n7eCpvBnli8T8epUDazoVhG7T55MracgrECg+Xa1evMcZg1jDzyPKFjBrRoG2u7E1O88LuRD2Qm6R75EV7fv5qm5c7$8jWEKEYcZ0WV5zbMA3P4yj-fkoTDQQjBnqDkiDVi367pvvl75vZKv3mwj9IkDU7SrD9TGIHiB+D6YneGDHDo+VRExbTyD8YFH6oyZyCaccBqRDwVK7vTfX4fI$pkgPvlcwiebwDpo+LqNe6feFRgxlnPzAWpCn-OS8z6DkErOt30LUtMu7ElHkX3ov23SHDKz7dzfeP+fTWdToWrm+VhujRxeciYAS2ODqQzYSXfrTGtDheSCM2TYgR3WHUi+-iOgfZzWURWut7ou9l9+jCOkxsT1G20g2cANjkx39dNLxqsMWrGX6Frq2Vg2YpXb0-n3B-+zKylO-oXbF5sIMGGoWG0ve-7ApegEeqjA6lARe8lRP+CxxA9Sl33h35i$Bv4vo+LZAgHqPQ0UBUKR-eZkMgDg2LpYzhqK6gjCXkgvYAZryWi6-74FvUEZ8eUVMXIM1Q4U7G3NMc9RaBaiPwrQCfVnKhYnArHsvT0GuP$PpztYFHxf5$NkTknPr+ILT+u-b-m+2VoVC4MA48TNbD+LGL$yMu4NZjzqG1YABOk41WHTL1$H8nCvgeHtQFsBOAbSD5DNrgs6++T+g-KDmfHkg8VXa14D9NfbyA6VEAN+e4R4+OBjAQp+6IQg99ibnfhD9a7Pl+Zt6wrhOEXXQp$cAnoc4PMOLNLFZeATwXeikpk2$FpnjfoqwoYycD8e7LhkzbULG+Bv0hdV-dqY8zuld2evTpj99Wa2Ta0B-Z36ZSFtLwd9Dghxz5W9TxctrN$s4ONT$aBYfat2MVFpXiAWxnfKE203ClrUaY4DyCkm+5EkEA3GnrjKMdEFo9Y39RAzDtpAtoteQDwU2SC6idxcrW3D9kdXGZBELbpdzFQkNPYU6qzbYG7ruXq8vXvY7vgBiRBohNwbLbM9k28BlUVgdDMHOngfYcZL4c35Rh4WqqkzdKN7hUhPX3VAr1iLkTOmMBj+7KI$5Xv4miLVmLMdm1EF3McVTqaQy2e+WbuVpSeFZD+mDr-BvS+4026aoSCAPi4UQKmp+$fxij2N0zx9DVKEicEK8i3IW2lxK9ZQb5519LSolzq4IznOblRMMcMQbLrLWZW2pisLocCNel1Eah0hkr2lqQc9hHR$jC$820Eaz+rtYhmWR6COTaCx3HwysppX5GkLqPqY+h7Ft9B6A72oaA4ZmrvpG0XBzFok1QSUD-bylzaSuTR$ZeUd1$k2TfwrjfvrNfyOqXF0UvEfTN$YyUlVbEV1jzMyzgw43NOoMzr1NM$zdow4-abc7G7oycsCblWei7D7pnXeGrss-Ezbym$ySly-4$1bKLjISLLbZZ6X+e4INPZxjWPl+IKd$t4gm5RnAKRrWbLFszuK6olIiAc86DlhZW9CjPOWn7rTbWVFhwZWendUHUkpvoagUOSPRIL0bgfdvl$0f42ZbnO70ZttlaD5u4W9-5guzxcvPNTwlQeb$q8Kg2S8yqwXrcR2XZd1NHAOuAUmw6Hq9PhC5Ph5gvmzGuzOAhyH6NpukzRKB"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:41 GMT\r\nContent-Type: text/plain; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncf-chl-gen: VSxiTnf9b2r2+KcGao/wketxm7xUtNmU9JFxWk3PWZo=$Os7xbto5dxDfHo1CBXGNpA==\r\ntiming-allow-origin: http://ephemeralcounters.api.pekora.zip\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=fSZfAlMe45Wap7ugNKz6mC%2BgUBMVXxGhIaN0O41yj7NQAPQ5UN7G%2BQWn8aTrl6IQuhmt57gmhJuJN94EST59oMERkq%2BsRdDqNOinvj%2BmXv%2FWTtkfxseuXWveWPd4Khrumwxc4qtZMthTqt30v4DH%2F08P%2BA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9c5352cd6af22efa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=787\u0026min_rtt=492\u0026rtt_var=168\u0026sent=49\u0026recv=26\u0026lost=0\u0026retrans=0\u0026sent_bytes=59647\u0026recv_bytes=4131\u0026delivery_rate=43152317\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17472,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (17472), with no line terminators","md5":"9299e1f4c1506421625b4d4a873f48a5","sha1":"6683ee05e65fc78c9dbb8c197f6d18b4c2605c27","sha256":"e964c893ce91fddd7474fbbfcf2bf3d4b1edfdf92b970758d7ca3070a1f445be","sha512":"5b4385a19d6bb2a5de3ae1ed04a4ac1cb39b4b15754e3b8a28df47b4bfb6f6ec97c1678826aabd28968a2dca8b22a9f530854334bd0261ea35c1e0923ff7c73e","ssdeep":"384:faD5+SpLu6+651yFHV6vGEDZzibTFnP3s5GWoqAn8r2y:fklz+65sZmNiVPcAM","tlshash":"f772e1b614542f365d1e316d15e1dd6acd862d0628a8ebc18874cf4eec27182f7a8adc","first_seen":"2026-01-28T20:44:18.795302Z","last_seen":"2026-01-28T20:44:18.795302Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-01-28T20:43:41.217Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 20:43:41 GMT\r\ncontent-type: image/png\r\ncontent-length: 86\r\ncf-ray: 9c5352ce9d4c56aa-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2 x 2, 8-bit/color RGBA, non-interlaced","md5":"70c202196187ab3c11b4e094c20c6de1","sha1":"9c52b959e74aee9d79cbc9f35d1f9f65a3b8c863","sha256":"6255b9231d09ebe6aa1ac19ba46bdd81f3df58989c9ef2e11d6cd6e2e7b21643","sha512":"7e6168e40cce79239fc00a05381e1e95ca3534905d3fc1467973927f317b7f12b6f3e76960d5202c40046618b51e0895082e22338b1b9971038fa0ba158117e4","ssdeep":"","tlshash":"4ea022f3b2203c3eeb2a2333022e8030f83020b803828e0c000eec332a20208c0ca2c2","first_seen":"2025-05-13T14:11:45.873663Z","last_seen":"2026-04-03T11:40:49.866694Z","times_seen":265776,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1810779419:1769631759:631HGI5oCUeMr-LSS5eU4M9Mt8slBLCQwsx6gaDCajQ/9c5352ce2ce456aa/mzsNCItteZQTMGn_MWCA7lepuiOVvk3wlHwKNRAE8DU-1769633021-1.2.1.1-MhnlWNaqualwl8cUEIWWAVanl8DB2_56LjvBKNC0OftLMz_SEHlw6h69ynJhF8IT","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-01-28T20:43:41.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1810779419:1769631759:631HGI5oCUeMr-LSS5eU4M9Mt8slBLCQwsx6gaDCajQ/9c5352ce2ce456aa/mzsNCItteZQTMGn_MWCA7lepuiOVvk3wlHwKNRAE8DU-1769633021-1.2.1.1-MhnlWNaqualwl8cUEIWWAVanl8DB2_56LjvBKNC0OftLMz_SEHlw6h69ynJhF8IT HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: mzsNCItteZQTMGn_MWCA7lepuiOVvk3wlHwKNRAE8DU-1769633021-1.2.1.1-MhnlWNaqualwl8cUEIWWAVanl8DB2_56LjvBKNC0OftLMz_SEHlw6h69ynJhF8IT\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 3778\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":3778,"data":"cRt49Q$WUwnpcwIwXoZjnTua1N0RCwygpo6JvK3rFZRCJMeWDO8PLHJF9+dcs7uxWPSJ$VpiL2ksqxvU-PiPFkiKG8HM$lrwaFy1Q9greY5XXxJm5oUacQ3nm-6+ojLX2JS7T9mnP64w1FoRCK+uk0jE5CDX+j6rXA$4yE9hUdkbnQ7g-R-jQG8HmSGtwgE-77jC+O4UyQ0YUPveNwWHlUf+tthXvkCevZ04ywro6K3smhSAD0wdLUVXu6GGVgaTCIvo1VPcxrX8BnT2152C7wkJ-7S1XfJnDGHWvm6DagAE0sXRwxlqaWt35L7cfyMYwPMXcvK3$Q7cRUC13PQ2VvSdmJV1apqHXyvxnPoHk-7gZA9B+r4cAUF6euL34QHuMOOBa1fWvxLAkFM7bHU$deNqiw5ZXgjOFI9DWW0xN5YI6LOwZS63+UOQHhUQABRnEpTBNVXM5Ho-Yrlqhnp6cdDcCbXdTRcF4hYqBx0TLa4r1D$RpsvhMvKEwAlGvARTPLNk9U03tklNs1RTSIDjYllG5Q2Astrskt$KlhKEY4jY1aH3qZHjrqxfGANPNHEy+3o5NUm8HWN2K+hSQ7eCSVoAyfiUBC9XgxhGNN1qLTIr0yoEK17xJZ2l1DkdeG2bQdJ13CIrVOvA9CgZ$qcF5iiTWx+R-sDl5FkqYtUAUcQU3FAcxUlO2BiWnGifIWyrHCJwYP4Tr1fZI19QblR$KaGgkVtaseC6YTq$SNHpp51ajEsY3v109a3+IcRS-2kqUCu$B9bY1BIPl0PK$K2PxrGpa6s-$NpIf24UIaCkxkVnGqoFem5DYghYy9w7Qei8uIMMN5Zn9hMGEQncvGym7jETK3q96AomBkJeVUeQPIQTYFoIOPrGSWFqbwF4L$bgQhdF62uPFeDfxSQGfKpdVcURG9CS8CZ0L4DJgBb8RYLuNW6gi2uZj-CyRVbUXgZU4FCnfkwf3OgGFUx-ahaDmX5T68A5$--fvI6pxp2ucJ-v0HOljfCHr3kECOIa3+K8SEMfWkkV0DCeIjCnPQKG3qlGiepL-$d8LiwPPCoXIANCYpSGSiyAQ$-0kFvNkPDPSwgE$ttlFWgucWnMShVNjg1xGO2txbhSZTuhdnV9rWCmveZ5XW09pVlYDjBer8y6qdxPXypml$1fej5dr0NULkBleL0br8qmS2MYsv6XojCxXUDpsnl3a0ZInBF2JE65i7jtE$71GIva8ZmKi3UpLFJNBct2UJoEZS++fUDFqskXa0UgigSTaQ1eZf-7AwiIcVsGthYa7DsNYMT2DjKVLibGcO9G0MIdnkkLb+WYVjmgxa21yqTHT6MU+StvtQ6f6vd5LP5qqCfljp12sWiIjBcB4klyp-vq6Qtib8X08p1rwagY72mbi143AgA5vlPtT-OACqyFtH0UgxxdQLkAItFwgOr$aYjp-i2LO4cnHcfYr-pn0Evn8vHiCO75BX7EH$YX+WB$tcw$OCd1Ls63FtLlHCiQSOnc4iMZnY04WkgFKQyv16R$95TjxYLJjXqYYvhdCQ+$VUY9b3N-6jPpXfFX5qf3527sWX8Pt6qkfFOGYyMQgobaCQJlDHnX+IAkxjrOobCYywwxO4xmhFCl70cFiPUQqpw7dE-lNA7BYvtoGywNJUwrAVTXKmquJVGduEHfvlHmmAYWnvt3$Yp7uVNsZC4NcIR9rM0YK5X7EacEIALPIt7NLNhJV4$v+c$aRA3dIeWqflkrIuW9fttlg40UaY7b0P1eUkceXRMSedVDUtW8ZdOgMY0HKCOKG03i$J-NnA1j9h5gAEYxA+rRf5o12SBELCkbRMxKEOQpgLStvk-xu3rL3$MZyc4b+F7$GffqRLHLqJ3PY7KQgri0MtjMN+f-1WT8IhsgFL8xObcwb59auJgFtjwXxq4RCa1oFLI3e$GfV+jsm0+a-i++KBaw1yGeneYj81XQpyZ7BQIXFdR3Mv4cQlWBP4+Us4jeu6de97Ikuea8HOiZLop1kmJAyB8blB67QPUGRln8FkWNe3hI$gWYo+lbKNi+Z0tf1v74ZXtiSh$JHCQH6H3CCRYOx1$HdGJ8xAjCCbBdoBsJYvHHAtNIcyX6FOoMJwkxpVkVBTWQKktXX1vPZ7OA3mgm37UnIauZ$hng8PqWMYVlcMxPdfIuOOL3cNEYLhUCT-ZRU+HZVL566LfglBh38MWWT2sc5GGYL2fKIaAU6n0quswxJpdMZTH3xxd-Dak07xiK5bGJKQo$LFY7WG3dnhNnU0644VI1D$D5mBWQWdnA-hUS-ExwUiWV3ArCKu-IdhMttt4IxnaA3pKgBayWLcu+FlMkHrHCa66aFoqmp1BKZO7$GbBth-AC-vGvVUtmFL6OEK8Mpyeu$mAN81edUAyZJOgKXaTyq+IrSQkAXHEK72YDKgF+SXC+dQisZmJmfdeGdEPHXYaRc6MCI0TfoMVYemrsbjp9g+hBBfUQMjtOl$8a$GfL1DaLvTvENtN8EOHAewFobuE1O5vN-mJMdx+SlxHvIfrJsaaxjQWVnkCAs19Bu-gYFMK$Q-6fvNXLqdG2eRgj8UeJghSdJtMJwr+aG2+ch6Dad2W1kd9LEahJCoKVHgNwUi0Sy5sqEKUglJDDKN+9hmlHNrre20BlTOELWmOwasPs6Ms$FjScXZJPG2tMft0FrcSImaFSdcK2v16KJomNKJYexFS0bLy$wDTxGtGe9CXvJL8cqj2toRuMtd0IEw7T-hbGSIrw$49glg+sm7OftlyRLFuy8aTfWkJee3y+YnyGPcyKuOOAaaryREDs7f+d4AUKuDPXtxZG-syCDHe4S310IkDI4H7W7WZG4+245nx+thCdLiAIqxebVRvhZYAGjB+PqjHvHe7$fgwNo4+lQCMnB6wYOU6VxpABvItsQIPxIhYMy-obPfl+qNtxJqonCwrbQpfVS3Fby0mPxrq+mKSrn5Vr6m98AMs0LCFBI8yLQRm5W3gPaXysMa6XL0rPPYYrU5ActPVgFZsWb0jfbW0I6i26JKRXCnrxJ27Hj3uPiAN3jc4uPcEo8f0OBpmv06ymv$c+qIM7QOPTK457iGKK-snEWfcdehZgG9s2qDmxkP7KBFob0p-l9oUlBb8RAIcG79EuRv3aI8AQx7rsb-UsE+3J5xFExTHoLVA02O+b4xn8f6wUuW2MUvRy-Xb9CAXqfsNRuN0L9Hupjms-T3PPWKnWXQnuxeYIgrRTeIDRJAxxoOhOrJsIncX2lBG+KMv6J73$dPO-6sne4n0BZUEf2er0EyY6BL0i39IGuAT5$wrgoC2LMQtvsZlo+IQGjY2QqdJe7JY4S0J6Xh9jC6KH7fZ82vyhQC$yFiIEB+C0b69+erJWL7WKCh5WXQUKrChVb0rdMVp3sYPXWfyy-OokTxZtUgHTOmSyKIhSCAt3-ISxjtBhUH-AQBu0o2V3bgIj3lKVaR64drp7TcMx3qOm4NkYiS1xMUlL4tf+sk784ULPVxra8bvkd1-Qs9EgVwgs3ULDw9J6VnHZ4L+lSwnwyPF65vYs-LW5LkqRo85HSuHGnXcs7F+9wEhwZgxq3w2$2GaosBBg9G0c5IEARsmxf3VkemViFQEv4hCGV3TMFRmyl0l0nYRZyuMcPAdWP+mfuynYXAQ$AGTvdIPEAIxxj0n70tRCe5aAWmTgKkw27pCp2ba6QjR1bLO8wm1OsVHl6OTBCTqi0dOGVQUX2GsYnkfvWXyK9FexEoQlHyj1AJTxQgr6MyJJdQdi8U1HEBS$BwVu9eJbxk"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 20:43:41 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: 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$wzUSzoX+02ykHwCfMbzN1w==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c5352d07f8d56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208112,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"22ce79946ba26dbee3ccfd9a1de2f9ee","sha1":"f8e82517f59dd0e81a7286d403bebe7e57b2719b","sha256":"9ab56cf0d423a940e456b461560a40a7347ff5e68d0a690b215a3c7d17066ad2","sha512":"2437186984d777a39d808922f56bb8a878a29e213cacdbbcf55051c173dbbd0b303b388d19bb144eb5a1be73d0b767dfbecd6373ccfb238fc3b06c26b8f53856","ssdeep":"3072:VsGyjHRzqYeRcmW/4F0yCAh5g94g6c4c3iBtXCSRyY9S+CvZ9ozBZOQGYxj5/DP4:hxYea5/8W3ifXxtbPvOb+l0","tlshash":"0a1412193c8e67b80209916cc360fc5bdb9313e60426f4e22dfc9799588bdc98571aef","first_seen":"2026-01-28T20:44:18.796886Z","last_seen":"2026-01-28T20:44:18.796886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1810779419:1769631759:631HGI5oCUeMr-LSS5eU4M9Mt8slBLCQwsx6gaDCajQ/9c5352ce2ce456aa/mzsNCItteZQTMGn_MWCA7lepuiOVvk3wlHwKNRAE8DU-1769633021-1.2.1.1-MhnlWNaqualwl8cUEIWWAVanl8DB2_56LjvBKNC0OftLMz_SEHlw6h69ynJhF8IT","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-01-28T20:43:43.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1810779419:1769631759:631HGI5oCUeMr-LSS5eU4M9Mt8slBLCQwsx6gaDCajQ/9c5352ce2ce456aa/mzsNCItteZQTMGn_MWCA7lepuiOVvk3wlHwKNRAE8DU-1769633021-1.2.1.1-MhnlWNaqualwl8cUEIWWAVanl8DB2_56LjvBKNC0OftLMz_SEHlw6h69ynJhF8IT HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\ncf-chl: mzsNCItteZQTMGn_MWCA7lepuiOVvk3wlHwKNRAE8DU-1769633021-1.2.1.1-MhnlWNaqualwl8cUEIWWAVanl8DB2_56LjvBKNC0OftLMz_SEHlw6h69ynJhF8IT\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 36578\r\nOrigin: https://challenges.cloudflare.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":36578,"data":"cRt49Q$WUwnpcwIwXoZjnTua1N0RCwygpo6JvK3rFZRCJMeWDO8PLHJF9+dcs7uxWPSJ$VpiL2ksqxvU-PiPFkiKG8HM$lrwaFy1Q9greY5XXxJm5oUacQ3nm-6+ojLX2JS7T9mnP64w1FoRCK+uk0jE5CDX+j6rXA$4yE9hUdklkwi5syKt8TQM$otoFhqr$2ikuG13+em9RvhhJEPxPwYsyX6taiF1gZ80nws6lTk8XfQfh51CEo-aZPk4fNsm0vNWJjK9wq2d+dE+wnySiJF3wDcw5rVF$VwQFtthPIKMao1PhSKM5h+dt6Pj+bD-JeBT+9vDqreZ0vqrxW7AU2ltHSM8Q07+PTtrUTJnX4ARckfth9faUSWCZsPYJChjY3owLRwN$fuWs4DNWQ9kZd47yHO9c$s4625+sNeeiLiZKEXfmZe8bY+D0OIhfCfi+k4ceAV+mL$9iOEnFtc-9VQQsGNGvQWLYedGbEPYTx8B+lX8CbacjjAB6$rIDQ1hmqpvm1BP81pJVObmw1bUUQW-TJn8U8IOgxMDO2R-SnOjHqmLtJXTFgf+VUDLDe8yTdeaYIlrEloo$JAwM4SmbZDnoxqWrIZ-9lFSa0GHTYBjSj40Fo-0kKagnMH5tcjOeb$Y6QIMv2l6ltb0$rZapIw7wdpG4W4CNZOsY8G3WkKiJUqPQ6tJlLqX6WdBNN-eap02agCme5Emy6ytnBmbT5YGcsDX2dRIfWGUBCMwcN6I5fxist5f7VVqcFJAqhmxAPfK4ejp5ORxQLvt8bbncOO-bugIp1$BRst9f39JVdBmUPgf3M3ZlrIytLZj0Ohe1StdbV6H$5OrZyKnGGg2fvIeS6kFm3hc0f42i7TlV$qH3gOywIXHgk09Zx7SPaERX9ICo0jZiVZZwdBcnuao1v4GSDefxru2SHw-saw+Z3CF89hL3YuV74ubteRZ4eJ3bK7ynwYyTqGpMvYdL0$jXF+m8sI5xeM5Sd7LmeBrOFDxmOowP+nDCwN4GyakLB46qOOQGDGF-VSWD79$4mquxR5lEEYRt0xyB9nY$OaKpcsekMHS3ReZAF9BVwKsfB7SK6uaj2bYqDy8H7tYZkYDm75aWwNTZTaj7sphAO3xntpuvEKkQFUfd7qDMZapiCZr04UkTqm72yVd1g+aKvv2md8y0s-BHQ57VrViLfFtjTppVyACiXwxD3D0tr0M3P-hpbc7CNIu+yWH3FxW9OmEi7c3b-c4826P4$L3xepcL31RWHVbSSR09QWLy$h51u4kqtvwmLWsjC6FUBdHSvumbe67EwU5iFp6SOJC3$t5aY1TSdALPB-58HlYeBQl+sw7W5yFKbmIG98LiMDo-Q1rqUnN16243pVbxrNnivACWVeswpWIM2WnQ+J2mA5Vmis$uBmp8NEfmBGaXN5qpiYOUatbtlsgUYlnPIPngIIB2Ulq6pDwqaY15-LN063synlcnA6QG6+dYlKD+dyCblksd7TCJtbnCYl+nYrRFQJjNCkk2G+JvIqAoi5WJIk1AL4B2EeO+65Tfy0uqr+7ZJ4N0tyMwOw6NqxQ0JjvxN+5bAhvVOVEP+UMkuIQev8EwJG2r0r77SFCHxlxnovYvnWsa22hnlxR8S3Jy6+GMD$RGTQ6rs+Vg6aQj33onwpI1XaREdvkMC5gVHxL9P2s8e-Y5Y0Tbh43SNY2hf7v2$BHJdO4Oakdm4D8I49e8XkSoIDjfkl10NYhGCv0jtXN$fDGd14E5fJYUL1fj+D+qpF1x2ggg1-sOw3KPlLQr0VXeOEYHvRjSk35AvPY7kmrNeV3w8pDc48RVxs39K+6E8DJEjqtVLfVK+JKbAXxPo6PZd680lU4p7HOZpbNAAFwvXav1YSqOywjlfpX65q5QlZv7qdVn-lk2JE3KwmF-VZY3b2tJ3LaProXKudfIju6j$Lgst3npPYI+4RdW6NwboKfthRTPm0uEO3iWFN9Jq1aQQSakJHw2Da36rVRtWLGObAI46y3b9TZTW+nTiFuqNGCVjimmMWjUqRTiTJiA6tK8bATb24nQuNXW9IMbNcOyc0JQ8-0L3ZVRs$c60d9GPe-7XTGcocRv5-5NAOW+ni+w-jL-takWd7a+3kA2o6+UDqKO80$PGq1J4ZZMllljY5nc03qYxJqUyTKL0TgsfmKt95O$Tfo1d3co0q+7ExOX2Cm09NmtWS9scVKvJgaaL1UqN9RtGi8so42YXD1uC5R5gBfnmOm7sI2ZXekp$4O0O$J6OnF0XOZbcZ9yjK+FgUc2D8CkP25ntx+eSMcbX8o8k763nlb+D2fAqWbGnZwOZFpuL3clJV2md2drjc96w4qhAgVgT8upsYG9Gda4U5ET3Z7eN7Ajhk21qbeOC$8FXvcrIlnt9qc6-9b4flY8JM5IGIp7hZiehrqp5u3Y6Vi6CpJHx2fQw13V1GXFNqGABtCg1UaQsMSGghteouxD0pUnDEvgurSUIAKMjDvUIAKvSjeukXou5pdCR1N1pv2Arh3X2TZ+kPLg5EppKJDY8GqYvsMucgGIh3T8mKi6HNr8AAnwKDy+DCdhuoOSF-pq-1DpCFWBHqT9Nc4Betbey4gtZVi1b$f8saBsIOYallhNeEaj44io$67F$y0a077U-HyTcocmvcJctN2iVsIMN+bNbKXGmOVoVQX+bWQc2y87$m977TPhIcqaHfYZCxk55H+lVtn9y5ooWa35VbsyqXuift5rEI1NHDj5bCgJ3bHgv-9xdKqbBDKY32dqAOr35lpw63B58qcYTjj89hO8rlW9HGSJpBnUsKf5JoFx+-A4w8aiNxkwZL8-rtsirQ2TLY7cUbfeM7CFGK5Qjd61MfnvKm63jVbl+phmZ7yep8DrvM0GxItvUG0sZ5v1$1PI0sEpn018HwjwykttSSxJWCmhYt2Pv5YT5o7ds0GlXW5epqFGpK1G5aiSHNjP1PMYn4+G8UKkm$KM0JsiPn55NiBoKXm30h1vv897YBWhw52k7FBfqyFF9SNBYOT73CVHwwHdYw9b3Rd+AYX5U-4LXltS$E9jHrw8vIT6Nh5MlAb+V0Tr7r0Vr2PJWgfBelIhj5t9fL3d50Pw6On9xKBuxvEmPYlNWsbWSdpyokf3vkB2uaHrXjLWhEP-mPJ2yNuy4Jhn6nX9LG4$3K-uYuSpNy7i761WIOZckgb4A5FJphQK7dh8a-+WmVo3s+-KYjBtf4EAEAgUgWQ386a94T0AfYIVjiWcTbYhVjob2fKOnmIf9H8TMG8M3GxHZ8UORQ-bflAMNW8WrD9QecnXKHyVYjuIh2xSl98NqxK-iMlguWd7kZZN6jYksojaKuriguLNAp3RE1lQOR5eU2ZOMsCqYMmgBn-3gNFGZ+qD2TNjiMjGA4lMHYfupciQS0n048322CJc51YX+OZX+hnjh78cC5CUKimWl1xGELN+J4O+CZonQtTQZl6DQ0xGJqyJUboPb01YbnsT-OLa32xUIFvkO2ArEkfb3QOvAEwU+s7Jam+AgjW6xoEPWh+Ji+XeylucxcoI8pRn8$7O1Euh-xGke$OeESJFHlmfNwDwJhUKomXLn8UOs7ADiJORYmjXvNo$cpie+dC298nr6wIA14m0pDg-mr7MH0GFNW5EfOlxA+HIkE46lbu1xDG3nUqIGZvFCRGUgdG-Zecq6UfgCsmDDtDFmx+JLHwSCLAei52EYk4R5$THg9JNsiYeQ4oGq1C$sN9nhsXpGka71YAOCi4mDc-OGd5-U1yxiyT5tOpV7HkuvBH15AyRM2A$U8dgfXZRxbpnp5dIMi688V+NoiuK3ltkOE9RSW4A4FAFowbmREgP0Uw$y8sD$$sfOmZu36J40XZNiG-d4Ikj$cwV5A2QV5Yc+ajnPKdg+fGB0N8gPRQ-lBFZSjFlM6hwsZJwjEZqlVsZm-4rG3B5i4bsK77QdbGw8Zly-i84c6+Dfrv$m3hEs$SnmUTakdjQ-qdmyq7weYF2wh5C66WHUqKSyKMXuFOCBML0+wnSw9p2RjiA6F4egkffua0SXEsRIEWjhF1i4+Umo$G$aWwohF+6xNPZewsdaxsbaxGMYJ1+HQMnuf6Yd0TS$OhZ00EqP$R1txX4WmlGXmyZNU7g6rkfqBH$l-oJ3I+o00PiaFxO4NVxkRKisaQg1vnvZhAhgJ$m$ZWqdNKXIrDR0tB0eWi0x3$v0o7Y47hgdXDHkqybmy0h29FxiLjaODM-yCMFakBH6kjZ+byFxXYYt3ECbuKUm9XJ0JRHv2V+eecgLyT0AiM9j97BjtIs8H+CLKakICuTunE$ADoWjSs5-NBwngoPjjPjsWqkGN$eUA3bpNQGii9Eldrmq3Ty4MdET-dKSeUp6lxXRF2IIloTU8MRgNgG1WbtQZTca-MA5Gc5pMckNsTcjhtAjpBLrlqxOGRXk2WSmRi5+cbPo+jgfRXxXxdNMDBPJK4l5$OMVLmCY42tERTLTmHfEswVrMlQAgYUOSPVW8suysDhI9bi276dnaCkVxvx07HhLn$P6MpJv6E3taUUZ6mbd6fSvxtxdpdPPM55XyXYsCrxEIkYkS4w0hrNB8XKVByJbHX51MyWR4C8qnZYNmxUYSwV4WYHgk+524$Jo6SNoPG9TFtql9kQx16hjRrOjkZvxmpTDbVyHgj5Le5l+SOq0SRdo1+gEFXGmeP31etMbs3MdvdqRka2-sGmdBS6eFhDE0eoTSl5-HdUFus6ZRj84Uh85fCi66htahBrr1sLZNiiqnEPb6-9GKMaUKN$fn7fiTdTDMe$EBl6AfsvAQZ6NkBmosy0MhjAQ5f0xI6BWCjE9u$u5NVwwMVTYkuAp0P9FTBLq-psZAfmhLGGVbwsitIXpD9h0oUaqiP24m0R7+OfYiTTZ2MmitPAkPGOERERUYlBrP6bfKwO2K1VfHLnUSvTc1PEfLs7E6sUfdnNf0G19n1nPHFqvQfcahtnZysMOf1W8bhZFAh7ydIe2cQfsOtIo7xZg6+4XEwo4et7ZUhHc5Z$5PY+npsY0i0IFRQEPuBUGLAf3AWFqu7m39BNvXnPVVuc04WpLCZ1clbjEElStMhAvRJbTiSxWCSb4hnWs96IQm7DtInlhP4MtV5$h95P$8R0UR-Rsm1ujFcCm3P00o3j+SmkDIEAA5xci6K+PjH+LH90kGQoHa1Og$9MWgN7Lx5p7Xe0Z6NQQtimBhmhytqmk2s7gfjK2jN59Np5bYobns5jG$1og89y0$u60Rf6tURYKGWSLm-u6Pq55A1Y-VrZrrFjU0d4sj+k4w+hhuFI1i7NjrfwrFc7iVqfJ+MUqCOjEvq7pTaVBMZOvgdHSLVPErH95HN7N3xCg-ZZa4xOAi8emogD2yd3RiJdLkH4OH-anUKOW5g-PB-GHrhXa4rlYvZN6giS5ftxkR8aX5V4fCP$r-yWC$WsCbmN6dTKAUoscI2CYP0JaD2qSgSVJoWr5lq3e1i2de9d-3PrIquAlEy6N2Oy0d-syDn9oKxrIe91Jh3DZRdGJHBGC6LD8NhvDpyZdM2pdyrWZLg5ArpdwZnOgW7vABQ-BNErmhWfCq4O$00h+MsTBZDZyCl-Wo3sSNMGvYwSij5QulrdvUNxL$hxQAv7QGv-s66hgwbw4heKQ2oWAWZ-CfN3l5QLT3Z$h2jTIW6BrkY9EPw5PoEuAEvPTax8TyGHGVZo6n3nyQcHkIdfiJogjgNlfm$k6YiqXAA+teYNUtvPSNcNPtQHfNcSE5bNNMggD+j7WGovkwMu+tTScTrZ9u2UR$4tv59kp5AfuwO35vyh$3DFS8A+sddmwxK+wEWsm3RtBUv-It0HVPY81DBhO+H8qc5TcMr5$uue0kRgdd8Df1nIRRTt51peG0Gp8QeZRGpIItDiRsgSog1XaeTEvGKDDSS2V4jPfs6o5iJqSoPaGnqp$Lqx3bhLdwZ4KuWX8lfkt8fV6kXFaju7wWDl-FcVSig3VpubX4jWX+-aAm2rd9oPdsnEYTXQXt+Pwk4L6LNxUCmICZrN3SKi1uOkEynbQSf5Ry5B10oAkC73UTv6y7QnqA--QhgITgAimZqEXGOYmKqf25BiX0At8fCeZ$U2Ho8riWhQ9Kco+SaONowrHgDj7EVLGfa+$XwwxqW0qc0c3g1miCLdO4C5gmyj$3MSsMnh$74cC7tJkFe1sbaTrr7INndoerTX1M72GwtJ94wZdTp5nSqMDMfkegqn3WuEDeAGVPFfqpHLfSHh-35j+gqQuyxraDGHkA0bD66r36tFNOUZ2GqWBGqb1Em-aN0qb2EYGex27djPsyJ89BF56+N8BdBO8BEC6Erhp33qsMUpLJ9CPo-cpq8CX8YIS2Nw+WnAFtTfpA+Hm5HaySKDgyr6nYXo9tco5L5m1y28WuEQ3CMeVgaMD8neKdNThm0VtIdFjuW2RpajrxHYZwu2HRCWBknRqLoi7GoQ$ebyuXQ286WAmC2gPUP$RNtW9noPTHgdkHKuut3xR9FFVvNVHr0PN-MxdTpGMpXXY--cW3H8dsOyXCmaKVdEpse9+NmlSaPseedj7VaqW71RMR4aD-BgwufwAqUqsH97Wijb$VGmh0D90qMYXNO6jiV-0YksE+TmF6N3O-xJlaZnk8nF+VDTeHXtmhmanc+f7QKK7IX8kVw7iHw10-fo5X56KCwke+Qjp3Mjuf$jWvyoafSROmH7ChusxrOcPDh+dqNQHnlU78jliiN+Kj6oQ92qvvqnjTnswh9XkKyVRoXRVa8+BZUrlyYRyt0PF+XyigV$6sS74N2Fo9UcTf47POfJ-BR5hmjhGCLJ55wINBe2QfgdjJZ88x$SbPo2Lj07TokLtv5JNlP8+$6i4sYH2mXo1qfBbxfMa5E+ibMIaqxiXu2U$EhJUDt-a$VwjGBYjXGNFZ0+X2HCCC7dF$W+h0bdUFajIlxv$O2KEEVIsZ9oEK36R4B05xYXDnAI5pJY3QxLsiifBQDCl9yRvZyoG8-wveUHwa1oOZMT2YaqPST4TQYN3kdG6VATgj7KVagNR0TfTxLG6OuMxXnL05PcN-Tl7r8lsNeI1RnvMtbZpkao-4-KBsfM7ta7qcNJ+prfk-wUGUsthq8EylGrsjYbl7wXdP1BnYu76Ox2qQlcSeScoFDfSFxSiUbcKH74BBofXAW6MrvRTFr3KuMxOfqThel5un9r$PcH7+b5TJspVMTC7f9gwKZYPy1903rbFMEUK-XkMv5B4+WrZU2cJZnGC-QwtUqp99PUCV4E7NTEdSuQdJxCS3FDb2OC366$nQ7seKCVEBkivskYtbs7pAnFEIAHljHWQeRViZ0MtL65a+OEhVt9upmtlFaHKtJnoUQVd$p$CjHf4vT9Pvx+Hl9CEcv3ToOOl4M3kG47rcv2tksuqi0M+LjaQZdLPaXimOOpfOkcb7PTRDJGDCQ5VN1rsuiUb4Yt-WwKxGnjsm0YnIHBVjeSX30wbPXKQeU8fSXFHqyBh5Mq3gAirCAw838eFqiJZGWD2vH5Keys-b5AZo4Bk1UEPNS322Y8xwEvdRFMiSi5OZhaJEPe+-MxsChA1NGZ1dJc3tajgWZAyMHx0TT6NTPvw+CDJY81GNfhpjsfVouULf2uyITY-FFG8pKobkB8$e4ZjRigPmauCUuYacVDwN+QOZrCn3OvmiiAdVTDR83H-+fv6+sDsjs31ayEt2e-i1INyH2lLgaVZ3bGtp8$dTZd8ZLTQH7bK+CKXTtWtuNhH-xRUTdBrmXlAUOjdFDeCWYTqkJnwgF15GljxboUxe2HfL4xQd0H9Sr44RpfC$lhJKf$$xCUbTRmOF9Glu-dKUhGkw73akVl$8kEL1g0-4US7Em3XIF49Wv49Kn0jb3xAhTXLPboqYc-rM+j5tv4OWP9-AJSyw-9d1r1kMRuEB3XAOtiIS-hVZMH5wnLqL35LcaH9EkOME+I0BfHVye7-x10bcvxi1vrCBLr-vUGS8oFe8hos4M-0JvpoSLpjt3xa48AGG6iWOd$LIoZL8oPkEvoUEP+xv0v2QXCdS36dCb$El2GNjIeVYtpP+7R-aSf192xXOPV17KX$1unY2Niq4mvnvF6bGG4KmkixV-LEItlXI9UgHRQKpc7RRbmKgNnRWhVuZ0TANV$kKmbT7$DcDoPukJ3O9WGJ+Bah4pRAXDlT-5xjIc6JHQL5mK4bTIodJI$j5IOI83CrIBE1+W0gduRg0qK9kyRi$EpPOV6knK3bu0vVMjX4i1Fn$qd4HTFJcOB2O2DlP+2dijPTAVHk0U1x8hWcJhqSb-GqfcqmxxlvQ9yF2XLMUfK$UwxK-src1nnplXxtZgB7BEnuEC1+KwbtTvJB903XywS6GQoLuemV3tJUS5mLWhYU5GG+GbojNFpG$oq0tg2+89TGxsuYl3H+$Jje2vbMxTNI4lMWggx8Kih9YBEXMqhjEJasKKwVDnHZZ28eTtvX4LUu4JyjDmPg7O$Kl+m5yLGeUoh67n3DBQnUEuqyDGsVAitmnrngSeYcp2ki5HFB6I+EjYGHv4i8fBZRmdpcIJr0Q2pESWnym86O2EDLPDfcgjPZmYmRMKbWUlRZDCe9$5O8NRGupVTQyBwvcHDi5dtstys8skE4mw7q2s+hM7NHlAgoUNn3U19uUfxwJH4Y4q-hoXsvOPZNxHcuTVOv6iWUyIG9VmrauiBLHbirGb8Ff6Vmym9RkktlJXRCBjdjhQfcG9BjSUPYgup7f7dsFdf3P5juCfYLqPKp0OTvy1sgt4KTnhiSlsK6K9$942QW-sTQdIjESKZEyANf09TD2V3R4N-miLRMUEkM7-NTv+o+Xb4bPd+g1TU4fR3I3ATScsEO73ZLjSnIuUrDsSBZv3j5PU78aFRdcZJr3FQO4vCT7gqOo5mWXAFCfrbnTAC9t2UWewoxOv7U-H4TCZuJdD8eoqc1kJYjw+ilNPE9JHR1uc4hl2vi6iRFrKG0GOJxKKae62xdMmjInr$J-0BTMtWes3usGLnG23Spoghkv8F2ArT89a68DBNWnWmHsXZrHH$Cl+Lom3EFu3MmDuNcNmjJ1De6yVYmXGEWc3p+mwvsYU1Qp9eijIhNXc91fd$beePWYtwYgTyJ+l5pcvqF$merhVNJIEG6QgCVKl$4+wr-x21xcmjhU4HOukPPK$j6nor8r1$gnXkp8m-+FI9dUIhSBWXeXp1Bvwie7R3rl24BODIrw299NYqBAs+vrNg+GRHDElZnEQo9EqH7$ulHGa9ZSwJWtLoF0-$8-Bh74ERumG0mgEon$+wOCNhEIfUGbpkFiXBACL-xYWUejcOvvjrbU4YMQAD8A+cqGuv0IoljHjZ+$VGMiD40xxOv2hStP8N8EBYd3Lqotek3a5alEORXHQ-YbuZirXxv4JAdXDOCy4H3uyEeg5pYL-yq5NFqPY1LbmQpk8em6EvqI-xxFUCL2j7Zh+GAuLvkAgZR5-humMByQUGVpZEW1VwEqQ7mQ6NbolCLe1rBVlvY6FuB0l$it2yfb8Uldo5oBPN9K0MVSB9UFEK5davKSwFKrnBt4Jtlgvmka832P1pI1W-4Bw6Ath6$b$FBoFH08522PsSILC3gQPPNSH7lNWuX2HhQaG0TovnQQxFTn3nAEaT8fsV9kKZdARerXl1Wx4nFXI37vgcTUgQvF8wTR+deiPtAv72Amey2RkmuZEMXuTJcAaqeFVeHDsCASvaOVX+oGPblu+1lkI9wpXs5dhjMnAC2org2sBAG7EROL7CkNbbq2TTni53ZYqt$MGXxKE6HebHhHIcb2ZJn2OUNXJGt7SfwW1kOcyrG-5OAA3A$1YvW1h-iZNNOqt2LGlWYtat8Den286uBNNS80kuP0uLtyVBiaDgvc9ukA661mFE1Iu4RBBaiwuQgM8K42oZ+ZZI8OK7Xv-13NfmyOYL6oR5E+NgSry5BafuaoAQIUX$GNAapKdXq687ZTn5x-AReYZyPattFursK8UBEFCTBXodhnAXETfQqW7slQeQXwjydbbdVS4OFfERNfAZ$yZJherY8xtjadLofyL7Cvq3XVM4BJ9mNwtirAN3DU097+qA9seSibX50OCEuAHINY-uVRWpmpoepyXCqCxW08Cir5cmDQvhRu8GKqha-IPUuuyOelqjZwN3NnQbak5rGHKlJra5dC9qfMEBU8dqhOgPFGk41uaLUes8uvoPMmOaUJ0$-8t5HJDKYN7BCKPRvHdcwpQfhM9hFu9k3aqHLtklAVi4XDyxMlGn77Y44-bNSYjBAu5LH7GGfGa+cRdR+inYSUJSkt+jA9ciePypLpLxguCnK4eiy9L05tKh76RdPWk-TC-Qanc3IFQo8WgbKqgbr19bnJ7riGyB+CYUUBcZSIZHybsO4pc5QIZH25ewatdXOMLHBhINmrjST8N3dmAlEUHxBe0X3CqT1yY4cNlv0761y5a5vcWUvP7PBG4-FHw2tNOWyCVSQTp0ltP3Gm3E9NtHWpHbAjVXMygIh3npoPglRYYF$qmL37Ysc68M8coAQT1BOaiOiBbalcQknTvBVckp$yUdCONUJNO5dCkPJeQ94jLqg8YD3G1jSxPoTRdblqAG18bl37cYQwdH4eMV921P0atrqqJhANxWIOhjEvoAIjJEcCRJTRmQh01Ryq9l7P3vkp7KhQtpUihOr1ylkZDdJZfgHI+Twb-+VLRJpaaBHCevdx7qFuNarfNtIxQ2-W$apF27cR2bA6k1pP2l$6igOPDkZTWjqFHv+Q44cMExi2Em3UrgQp8O4TAkclHncQWG4lq3p14Of1PQXEX4hgR37dSjMEDyuQRVOClrbQPZ6U7J4o-TADwwctutoc-c4sIHuop0RbqXficZ0NatIh3+1JFvu840P42Un7f0ypQ$ufKtU2fsmy7QeC0s0hJ$oxXcjPXQ4aA$BeGPLApyX9k5xmYA$GiEw8ya-49AEK+$M20tEvwCK+yYAocwQ5GsqU3Ln+rkqkqhbsO69KWR+LMSPls5Vh0pLX+lqmhMK6Rko2mufrxSwIMebjSVia6sJGnMN1irXeFnSNnACDpPVc1lr70B2hOY-itpqq6n$8IGeg5JNCaNlddpuJr6Vsw5WvBQAcF5er2teHYcJCrLCh-+Ky7XUZhkR7-ieBiD2TOt$5$rCOnX+9KmU2drFpB6px9buhxoW+ygkdcvOLOfMYANjV$s-5UACG65pPepv-jg7rgr5Cg5y$$SBl3Zx2RyRDay7O0mEG9R7vVlsr9Bb8RGM1ln+MBE29SHO0qJKFmVaN5QaVYdOZu4+pul-oYZs1$ZBay8S7Qcj0Rwreq6-aZN7XXEI$-iKEWbIUyT-V8YVSUwE5rTDsRCsnj0XKSBAjlGRcNmjPm6SDBECkuhg3fwUXV9XLM+S1fcdDv2Lrw+-0ojaZwTaSMjo-iE1GW5jcM2y52rPXLw+XTQ9Upw96t8a3C6NnudkTuDB-SDJvwtggu4Oi7FQYwFnRkcr6+kZardBUy1Af3u9CYhtHOkT8H267NUs1JOJVNdPd9lmcf-OfF39VuoyAY1vEZTeTSLeSw-1aRyme6DHVhjcrFp3uiH2VsbxXTUvNWCa4fvXhvpYXrNQ8nIyxTKK36dF7wel2h+DwB1rRb31fYhM9t3qdaJa2WhXbX$gm3pY09m7pNY1g0Qcbt6BMvdyFG+yyjITXAQffZ2R7gQfq6EClpb6+OdxN6Pqme93wOuNnQQQYT6SYaFBNMVRdv6a5ELAjhN3NTjJnT4bLWYRq-Ggxyp-g0s1AEJNpiqRuEEeX2AUAf3Kxu-rKq1KPHbmGx5wkWMUV+HntjDtf5HBYy2IP-HLhidvgM8s9Poh1E0DdLI1diD2Ep$HT-Lj12inBMn1PwFLD$3FB+5BiuursJo5iaWSvO6ssbTkv5HTp7AxmIxy9djVBeYS8wcl4GPXtDJsDsriDEVgiITI+vxFwqiyxnjp+P-C0PkJ7Q4axRet9JRUBXaQDHWsT4phrmLdxlaiwLbHB84vSoGEB1KeHkdKdCE7eVHlwxcs03C7SNawA7n$23mhmGl+onRSeGGUHZ7QsFYk-r70qITwuvS8B9Rm7op7IDNlQXgNbDXY9+g1H74FLpw-50w7mhyKExJFQ9CA4aIIMC65sOYIctvsEMRQ1KMCeKaNyuJfW8T+uNvN6xLdFjkHU8ggObfXZyEB-jejVWVSQfi9-jMd9gpiI8StHiyQHYBWVNRoswD2ZmqpN9Jf3Veb5KLcZPr$iqRcoJiVh0vvXx3Pne0T6x41GNGjNvpvulsfNZPMmMe2jl3C1EiVEphYD2PpO95VTNUZdHAqH5lcnVtSTh3S3ASUgU30dW43VYrE126lMIdEg6eNhqVwgrib$FH7J$qG$acDB79$yjn8bvmBTn0I5nnH2g+ffn+8odVZbOgZLl9lCFRdXGMfHZtw8y+aeXTgAU9siaT-X1JByhCU2xecvjh3QyGdXb-BiFHu$ciDbOLxf22bfrovX+HKOiM+r8uXKpgyoS2oDx4Uwx+dW8Yjr5aAJjX186PWEG7bxPDkqbR34LTGkaRsYpSvYJi4ctsem36jTEvXgttYSqoR45OFXYYQ2ucOU6QV6rMOQHWuRgg84$1T9xvOwCo1ENAbqJ8iJD8aBxqLGSK2u4gy08A8dut9l627J8cAbKb7usUWZtg2okqErltW5YCE9xr9E4RGOVqR-ku$3x4qDDVXu1RSdolaU+DmjK9lTY2Ig4eXa-B5dGSYg8ZDysuytbRdSx4slrvQvyZVjku0aOj3GiBmEHyPWr8tqAW-oW-KUvno-EuwqqaaR1sHJx7VwmF6c$KHB20WYaIakYt8r2NA98ELDTUIRn5N+qp2hCDvoU2oI$IuTAN3+fAlUPZtasrwn$7Cs5$TaHH75PsRimEWswtm2oOvXvU174KrIhOUAZ1U8AA2B8GhekMU6cHIZmPdcqspHVyN3dwdvWh7tin-kXCl1+3pDRdr58VqBbe03evJgiGR7JWPLuh4EVyKVwBcahIaEpZu7QRAEqG2qH87AVsMsiy3GqFisxutIPH2vuB0Y+thO9QQqKm58VVc1lGWpd9o3OBXOU5YagJgn$w+KQ00PKrjBTb7Bo$Z4IK$jMPcP8$XPaIIk7OLE25oKgc44n6Anrcjw7hD5l3velu0JgH-T-dcZvtTAZjqKByWDgAv+WUTmIkULB5Udu1+c97wNqSMEIudBTqx7lwelNETZf9MtkYchTL4isBDqvCBHF9wfU6oe7n-Y1oP7bRDMkA1gL1+EqmtwUM+1cCHigAR1UU-HhBauoQ$k55WtmLAsH-69kLolm1b2GNOBJYuY+tAkdmdEE83Uv8orb$DEpCeA+e5pNOyFpMOgsI6Pa1JrZ5Iqmg1Z333aDqT2irOjAPtvmI+1MY3U6p9MYmqm-7d+WXi1Asvl9clWigg-J3Ar-k+Ey0bR46fbIf$o7-14OZFKQeSX-c+xsDMee-jZLDs2MEG6CeF7WW3r7X6my4L+K9J7ZXeZTlpsHwN9oNkC-0vExZYjKXLu9El3K+RI3Lv4MFIfMrqdOxKXaJoZT2fj$w5Av4$xhYb$YtcBX3N8OXcTujc8Jj3otbp0M24E1lwXwYGP9NtQd3XZuXxAXJ79DDbJPXg7lfvmuPH4ofnpGyJ70vvc13et0DDv7V+NoyLFdt+1mDdedv5GvLt19vP9$Z4XM-IFjEfOWSjCH47uSsL5ico$Vy0jUuKf02MecbshsDwwUwZFRNi9pa9hwSyuwgKLCIUM1Rf8aydNQpF-2o5-f8RJtbH1U5x8Jd9PS3cn0qF57UyBwNIFDExl30Fo6Ro+hRfjOF8KokkHogWl73olmb9hABBb0$XAWaQYsGqNXr6haSaMgbRhgt33DT93eJfrpPIVa7i-bfR3qkpnxyWTHXANlYKZRfuObVrPEraOWSs6sr-XSrFQH4HalXECXK-tBn$RAkEkaOW2U2K6$T9POmE0hgdgF7tAhmqMhU+GktrbOs2p3igcu+n1aJeV2W2lcXn+XMdortsucjP8jIDEGtPbWWG7189cQtTiDdtx0N7jIIHca+YsefNBQn4yUl7ixykV6gKLINsMEWiL+HANK5fTpoUYC6VndgLliSWgQUlQK-E1jWaoc5HMD5pY4TS5-FiX6lrNTVeTmFL8BOTUp24BNE$6$-DSn1ukxtZnyVaM66ldFRLR58nx42i3G6eb1MocM4KW+1pqN1C$oygvVWN5LFT8bdvdNuVQSU0wbAj2JbQudP9LPqOC8+bJjkXD6U8Ar6Gld6lQMvsGB4Wv5OoCsOOgFObobSab+DYcslcob5FCEwDNul6SRS0M3e3AtQ04K4m-B4itKEReMQYvy5aWfhkt93cgVrBN7+7ufigiG+1fRfuu1XPbSLntaBDKmMWuJOunpKGZbSxxEvKIG6VSgpruqiuwCY4lbeGuH-4FDdr4YW$a2L0SZ+fhtLam6M4cFhpvJajk5vocTy2TGSKGjWPFbNYItSQDG0soUHLk0nNtg5jSPDL3Gj7Os7Ye$3UEwmxbCJDJHwelLxgt1L-aZRbSPrusbgsOTSWQk$GhYcIWDHN9fnZ+hyRpXh5yQ2QgrCoghAluK+jASf1c$lXRREOyUay3x+o$MTHGbAoK2-hiNdtbn1MRjSWtRQ$snqms+be$Y-a4S1nnoyNdRcuI7RYoELLNiLTOsGTWJbjwMi144QWKZjXj2-YJbh2HQY9S9H73cHsTEG8k6COJ7YEOoT5dQmYd$3W6K5JHpkyBCnJWMKwnYge5ipc3xDyfUuSgqo+3yUoM9PrXwSWsLkK3ZdMNTaA411$-Mpc1+4kkEE4re6M5F8Gd0siXxS8USlKCcN+3L9hITw+8ZR-+K1I3hCKOsDkpuiCa-k4QogRI5xRJEVSQNq67EWMEOQuJ5nkwdghbBbZCM0P$nG9Y9VxDHSd8m24f3MinI6QZfTL+7Y8PvHOB-m2jZAD6OOicuEQ4fiDnWaVXfxcdm+lnWm0eudcluAjmxR$bKlC1$R4TLs+h3Z8UPWcQyKffuMWXIsaIIWIAWjg1a98RcUaw1wPsG5HlyUe6mNDGCkc7P1VrTNbUPEQ7AdV7NqRYCQeGFdZgtDy+67JJb1OtnyRlcnpVsoaH9tVAD9GF8QbpAVdkVeuf$wKda+sDgosk3Q$oDIlpax68wbh9TnQe-ULOVMLhkHVV$ChoOjL8S5e4j7EEIEYlRljGmq4W+UHhMmleIH$VhXHKG+7Xk1ouhQZhhpm+UxX7r$Xk0IT5YcEcobf8SFQBJUkAnVoGXP7Mcnn$JZmQ2$2Y9eMFCDBhiEUkneAKs6bawEPXH45xmilUnV-RkKRNUejqSFbfb2YgXup9uoa-3ak$NX9IGl9osPPEf0vLS4Nfb3L0OrNMQqU5Go9wSVtNoBVrMLowiACsL9a-+-v7WFG7QePIOmMwQoTHLFW-CitWFkx8J+re-N93erXYTgRqPd7lTpCVImIAwXw2TK6MC+TVQRV9rPpIKdTbWpX6vT3HZsB9UnGbH0WlQjTxibbuxhI9cccMdn+LilbUjFt831O9$GtmILLBZs9P2DrVcONvJ9AR$3ZGLgAQmc6hl7vfkOJLHAp9DGJiwRoCs4n8uW-vXoteDk4EpDa5gZb2sdJn5uUC-R9ub0ZRQEFXho5dsQck+CCbHUNo20q2IlBZqrvVWD7Dpuw2EXCISYaYridROfXYodRR1xtLrYOmZQt4MGbbmiUKgQnmKmFudtaUSyJjuu7oF-3LSZAM-QDHv6rUlEUNmwAps7oQq-M++sP6K0R5mGIwleiW-KE83FxsFQONCwGRHVKQBw26n1L08+p-8C3SHEkfBiKBl3t15I22Zl650dNE0jl2QDO+$617LpK0Grktmx-yQJmhKcUthDOsZClAbT+5b4DImbPGPYHhKObPbSwgKh2U+VtgK8tKTGufr-teES3$Pp0KB+-WnM4a77atIMg2kXN4TM1v54pNOpY9G8IVoIFJyhDVoPQqtll4kZrGAPFynu5IrBTESGcjXWc7SQGNd0+jlOYo5PNH3-BIkb9vZSgOZY8njYbmc3RQta7D7BEELeBe3yxaZ$R$0dx9GJNO272vfRMZejbx89xiYispBQjc+t+1f4tIuhRXJyYwJlcEk1HhEMxZSr8GLm692CGeXQnSYkWCp3L6DANKtEe09gutbTtZX$3wDXOgglaNcGZ1MyDYk+epsBV559NVavbTERvogqXVr0gogFCeXXvX82KJ9RAaE3wiLL9k2wsCuMTRyKyagyGqqxln2VlHqZQlpEbTRH0fBjRI7YWKK5yOIsQHQFfSMAKwfYne3sx05p18YBdOd9$ZWr5Qx6HGa6Vqt59-d2SJco7f1rqCbKZPQ6t1m8BitnHcq4IZIXbbxC80JMGWHME+M7FMXb4anaQqOAZ5mAQo8tgbSilDkHJ7gialSQI5COd1FhX46mw4m-wTwuRn4PUnjDHd+rRJgygBrR2FEW6$Fa9wPYea1yJ1+HWH+yi3nJKiH9r-tm$c72oogXeHIwThZwCrB+DxtDLDtE6kHyHiQ0kvlG$6+tfbQq5BGXsgyrwCdw1Ug1XilEBPGi$+sE-eJy0EWuYPMZKZKspUhCaE35dBgESu7+akecgL+Ke3r3-5iv90-j94+BBsZL1Us5Wl51EEmJaDLDLxSoNTIKfgKCtP3eZQB4LB0OqXL5IkkdQcuu-AhoZEUo6s0yA3M$bWQIuenXaFbrtwF3RHJQ43-XaG6eAljE1b50TkJQugE1wSSBgFWiPhrE0fhigcacHs6ccyfdNCvs6twhGXikhiGVyXoccrpB-YM5L8qHoDK8NULxgZ9iob0B7YKcXY0fGv4P9GLw6P4P7cfA2ei8$LMDH4s4q1-RV4CqfC9Sgvv7YM2lq-jrW7t8uWonthy9w1utmrALVqkyhO2AWUodEVmYFjw+Yt+FZb-F0$Bp096elmGhLHBBLpkIEWlx$lf532-Vwrf5UfWDfx-UFcjM0ui2QNFiICI$nyRDQemrCmGw-7j7ehomkeJgL18apQH8dLgmt1471mbx92BrmWZre1k2NmnWTdOdkqpAONCZdUvOrw3eWa-kApJ0HvaD0wmCMOiPFym0c$leN9+$7WbeSrCAR3UNZNvQtT9e8MoXpjcIstGOQDdYG7xCikV1dcwaw-I11vLvvcZpKjO5aK8yo7e$ylUelAKgqJY36o1sbgMpRikjLBJ2GKUjUmHX1g-kBu9T5a2genBy$fCY7+g-iVj3+tEotATjZU3526OEsmVq3XUZh3fUYbocLc--Tj9kngA0KZYiAP-tf3mj6OxhPu3SEGHcrXqHwtmq2aG2hDGiep5YGBbA9Z2PUy2WIjbCnFxJ7MAvSJ$WFt$L9jgqVe7mAKWvR-rJ1Gb4-blWC9Bc5cyQrLBortG8R00fJT1OJ2L4Xb6D8OJUQ3c8VXfZWF2S3eKqAQ4DF1ecSuN2IgEvyYaDQAdpJtbl8pJ7MxX-PRky23o4ypBlXW7SQfAVbCcWlsgo-o-5wgM517m$Rs1qoPGZlkl$w18pK3CUqXnfmG317aW1RTvfe3$gEv3Pf68ENY5koylfQv5aEcOE26v8mMgAc-QJN2GA++Hv7EI4LxSbIWNWGZMIRL$JbYfUKH81YmBDnFOmFdOoyPJX+SamO9NkB+67$hqnDhmqsIrWwdwxktlNDQfoQiJr+WuqOSNneXIPvnDP5kDOTwFnhswAc-p56cJ$kTXAN79bNQxcRu1Nr9GE0b$G3rx5erJGukdW68LjswXNLsi9WlUdKPacr-q3Odlh28Vn6WwFL79H4Z0t6jbRtXxm-RGEBeVSTofdRK-cW5cJUQrxww+VAOKJJm8JunSOISHKiP-$Sa+eppK-nRTOPHp$waRYiM8S0dSNkfDEUsvTtPni1Nu+5oxfy7iotRqAw6r8oWlwMOVdys7DVpHU-14L2MQ5vJI5I$nS-Ea7VpNAdcnFmrhn1+hwf1Zx5oTIdWJ6Z1W3aEfMjiLSXBoUk8ikJU49fkNGHq4-SPAh+6lup8yBW8ZUBmcj$ZgnQchZnl8RXvt5g3UgjDMkwrR3OgD-j0FBNQy1wYpt+yDdWd7CuB0HyG5fwEx2rUcc7t4e47GcGVPWds4FNtZhU+ybGZktW$Cy5b4ZsE$HZJSA9M8VDx8ybLujV-wLQYCS4X2P0blQWSew$ALaogguYPW5oDGrfhoDr9$t-2NFPBZmAv4rvYKcQ2diVyulBkLnhvBWffeXL-XTB2lCVHGI3f5aZf-$7wA+n8+DRLG7gPjY0ojO6RkrG4L4UMuXP9pBQJIVGCFCKm-IvPfKEPDUufyRp1Url4JnxROGDaVsPawEYY6Nh1svyPJ3FFEVavh78H2GosJikLGVpSxDecWPCFnYf63A3AghG6ttMc+rRPwbQimTuZ+Y3GkWbuJ-4o6imDh-m1uEoq8TxwTMGU33QThgW7gRhC3kA7TDGAwqeNMZfva4oVVIspQ+nMy84xmapbV9qBtbhaIuaV6dZnkfPuWjftB00IP$VqEgAAyED1oZAZTmV+3IdjarVgI2qGt9I8v3$XbOVtEeOaLPeiQy7Xxdr9$EKf$2GMAPsPbYmGHh8Mae47GLcqrk3d+G0KYO9kL3fNItavMvymRLfMRubxV8ErmCJfNb7k$VLl4noNaIJueiXWbmAXcQQRTLBPMYqnskwwEMlJ9+ToDtYekWiowLDpxmQu3y3pcpnOxM9yCeA9guHvANsxmA0KHaH-jund0RD7PAVHmvguEwrj2U00pICpNyS9Fm6Jk0ACTRO0uyX7AZuRlKp6-Lf--dy0S-bC8YtHRHvh4F8hpHbgmwW3dIxQjl6t9wQZaF6sftCNR2cIIn9PmHYJycbbaBlCV3py3vCaVNBPyLVK8IX8sHA-EgLoVafradiEHZWyO$ywgsoo7d7bqEmEi2v49$h09JvKYFmH3urvCwCbGPMosqVrAFQqLdyhpkZx9vh$dJG110n7KymviJQ78EVrhYFt2VmoyfaeKo2BRSEXfbvSJtVbwrBrQH2v+C9Z0ml2flyro0DkrS7n0ohms6MrTtPs9$R4bblbaYK-cDmdR3bG6-Yr9eaIX9hkuE6YdZ-HYt0wA5A9jrK87lA0aOh5X5IlwEMmvS$mtsbPtM5wNvCkp57hTRrgJOkNrGHrN3eOsu1Yu-jVuRDniIAa8bZeuXVEgmVj5FAybGDPybOS3iZkJ5-2Y5M8jMhUt$ypD2aM-w7WBPj87ZVOSj7X7oIrPrQWAyRhkgv1JsCiyS2+kJF-QQ5c-t$KtQUIQAMbX3g7ltS9eSq6Z2i0JRko484kI55wBBvaGEwtx6oi0Yr46NXbPWno+$ZrswjWxBTFJYKeVauqnsmYqI4SHW$wyxVEuntKcof2vRArR$QSwyM$uVI+WXASCD5BFp70qEgJW-Gt0ywC96YCo94ostq64bVlnEMnblHkGVi9uLbkM91b663$-1FkYp9qFoIsGUKloOFcog9ibgFslyFlylgJLrdm47UVl6egdslnyT9dlI0c+CZsrLSGNdOK-khdoQ97ZiUbjx6uOP1X9nYh6aORFNC2ZJ$8EMoKKqoohym7fVs$OGWoZYMJjh+A1+SqCTi8EnLbV+pkFkHe1$lI+3$6GHn2Z6d8CWUvnaus39N06CaUG3pY2Q5wLDbiRI78FeZYI3gaupKQ9-GtfGrvpRNMahl4oGyqYL3SVJspdL+XsNRXJWVfUJeJj0qmCsVhZ3eJvyu1kg+Wov3ugN6++kNaEUlrFX9cOP5dr7PWVk1uTXYDrmhR4J0dYuxy26QBbNewcpxc1sd+4212H5wtqQXNyyg-J2rEGpG45oLmw9OUBDDFbWogT6osiDml4DDBR94mRYntMTdC2d+w3qoM8tIVoK8MYht$3P63FV6xF4AMccwV5uGSTGbR5jfXAqPV6PH8WmZcwIFx+anYnuH5iGL$nKJvjXkfFp7FDSWjMXZjGXTZyaANhYqyT90dtpkRcgJHfuiQdQk+rZsjIk9A2JHUkaHidr5P$pDSxZfOf3YiixvY$TLr6DqQH0E$L$GlM0PL1NAWMU-Hum-lXjqWyl9RetqisVRaLp4E$+PK0vZ9-Ffyry1YGQti4rxEX4TJi8IGMgvyTOOZyuQ9eiyeKclxAGDbyB1AttO7G0h1sMJav3HvwcsZl24+rA$PBfriBjbDecmrk7WwE$nqW$oIof0dHIuEqB6$44xIpwfXm+mtyPAen9o8l5KB796$9+91JA-A6Xg0rmjS8dPhbl+CGNXwHeLLIb03aZNkbdppbjtn1EnpDWGOxbNZhXRvFmkNrNt22++y6pjHsoulhamQ61dJ2mJDQul-ohRDQPDjseftNA5$ZQxb5n2udtG3A41-BZ5buAsZNNY$h6dhFG6BOMfSt9l0iw4TX7RyuQ8QiZ6vsuihNZJgUfba1Puqxup2lY+fkVNR7q+O0XfAF07PH1W+IEILD28lMN30fJUISK5-K1KUA32E+FQZbFi8wYkXvAhhuvwQDu08HkC+dt5X30Y9ZVK+6DT-murZiGvXOILeLw5qiDCLeypHUhA-Lj9P-pgaXydr3hCCYjpqa2QZRqeOoVXHqiVwWG-SipG1jmGYW$0IjkLvjSBr9SH6Yj1dVyNX6rfKLw8NLLabcWY1ol5uMB8b-gEBvPMhmX8QIsyqSpapAlX8hq8wxiXr+cjegBGWolyR+v+r3GF$pPhffPP6b-rTOf4DnLAHE6393b4r1MqT9a7ygIP++vjI7TKuQ5VbkUJgneuZTOtU-gOW-9bud8HVl3CErWrsGK19OZuUJY6mGZEM7TAaPFVYpV08oiLS-d+d-tNcT2k83DO0MRFbas5PqOKGF+qLLXSRlYX-lwGaENAgAywnsDPZOsDBBIRtl-V$Y5irMCP8oXRm5YXHinTRJAmxfGr2+EqTTejBMg+$gwSRI$6djjFc2uTL3+ewZqpwCmHY+x15AfIBZf2XY7mxNtXX+cIYZd9kcgLiANwDVQYrJBA7REO5BFnN2aQhVxn-8-UKIOcZTVQyB7d6nY05K9mR7YnovabXiKsH$KaqbcrO-15d8Jrl1IUQGA5n4iAIDU3EvlAQVnscoCfdb-4+rnFMJTxG$xCYMwe0VOkFGm6HQb822lldXfePk-yiFGAhkJHM0DJgWnH3yaC9Pa2beMuQ45OlbC2QmxSekBkeTChoLbQCidsLTuq-F5dhVpXq8I7OcndxjcNXQFX+n4Xci+G7VdMZnCtZlGkGaR5Zdkla$Cu6bboyrcd+VV0IaPb3V$c04CuCoHeiKmMwysMx$-xbag$2iNqkyHiloaPcbZRNn0YV-9cTp5IhjClvdd2pWKujTegovk5T6JmK+TxhKZlRF81JOPLe$ZDUD7FbHM96pXEPbrtEY-L8RyMGEwUpTcQe7co9oQbOEiOtxYE7XNo7v9Uk-Lv77pQ03amKuysXHvm3y65Di9UB-if8loti3CLgebvoxA-TYXIj7DDDkx7KA6A6pAnfjYCnUm9Z61adRraLiNZSydO+V8eZFo6WcepBcqQhEtQygEHAhXw-b+1KUP$wc51qiMHlwBIXHyWykLd1Ux-UIA$fKC6MrFjO7j7gXBh$6OY3iNI9d8RHl7yOsSXDFfLi8AW5aT1EgPqOjv3b3Eu4IdlOriaauXP$7Ak9$vYl7vBaRxSBAODtypjL78IDa7vGxMqUnmXhHvnyhr-wd7ILlMt2ifJDJAhYHp3gM+5UNQCk+Ol09vxTfJ5M8BDEE31Pfm8vGLDhDLEAUhwVAMksiXq9IiKFfvj-T6RPAB+dkulWZfrdl74e9IkZZ7e3bqcYfZo5g-VcrFlN6O0EYvS7ieqTTQsXqy$osDqM4KYRQHGf-ROo-bw$IHcZXBu+Lk--AM85tBFWCNPl1ljHjR$UkMVJuCv1PliwvNE6j03LuIeX70DIc$404$bgqSX7mVmIAkc2shemFMTCE$aEL44FH01+YGRaTY4-$iscaQasCyj9JONm7xIyAWHIEyVQSfu5c$XdecrGdKEBcfBSRmqKa33DiWmxUgFoSyxT2kMmuKDJIe7NxCXHKEla+KAHoGu-+oR8OiTCVQKbXhNYCV179Y7gIWCNnDmTANSk8NJo86Yj0LO1FA$CKwfjvw4pQP4eQEFA8NONtof0MwwE9E-9ODGS9scuwbAhHUBXgN5vPCm6xbWMO2HbS71nqIT3pBuWp0iuLjcpMdG1jynUyJfd816StXqOGIfZdp0ZF4+o2NPP-KlJa2K34Vf2ajORORmrT$H8c5CqWJaJaeFPlJBeQMqT3DTKiZqwEARurb-bNmiZKAiV2Ipig8V1KT46kJy8t+6XdIxs17wZ0+A6qsWUtS$S0EFP88AZLW1RNXn5JaLH2KhqxiFnESEiGpjqYTXMqE7HJaIgBk+-gwhTp94W7FRjRrQGjMrATk9fTI0DZ0CKGF5c087XJ865GFbq3itypGlgt92eueMOs2EoAybGBXU6T5hafN14JxrTtq$XQd5KiIjRF$jdeolbSFcJsygMtf32IwdPCuG98jGWiBCreTKNgiGU-DiBuAXKBK1mED4jPIDRmVME2sAcYXgHk4cCugd0VSX0BRPwHcpMr1IFa2SF0TEyTOgA8+GBLrfox8qYxoayeDPaIN6w+ZeKDsPySF+u0HYfG-5Of1SGfPFytc9gGtuuF+8-KuB4SMYMwdj9we+p8ybTfBE7bs5GcNrJwmYBFLt3QcEQPKOr1hbhTWig0tsFnsDFM-B5$UYkqIW0Mp2ZPaMvynjDaUHpwigQOQ+vaEhm2LyjPjcqPwtZ3hXsCVVIcE14wmpUki$V7huyrFveQtLOcJlOCiiSkEcXriGj0idxF3OyBYJZ9YeOOP0iCtDnO3dgkhSarBabydRJs0RVZG$NarZEnPV52hSQdd1v$WLj8n0s3BhCKnCkx5q3LMxB4r+fpSQy4vxy23ZEmyFFv648q9GuuvSyFU41kYg3dgGD4CW$7rM2$9Ag8cyDhv13hu80P4E5$r$clx9lBBfAkSgjCm5uvK-ggoCD15c4TyDFC1lGLksySc347GOVa7mcxDeBXVo7CoeDrNefSL6bn295uaJ+cbbE03srWhBNUsSN3yH8NCilfEKYQwoaC9+uPMG3ep3Zuiod94WAwSbD203Ffn7WhM74xoefamDaVeuWdf62+Lw6YY5EE2jhbc7KUojnwrcmUuyU0nWvgLE-hO1fLvd29O0gNhEVn92IDHB55lSjIrAN5X+T6Ak2h8NfQ+VuKkP6SRBnsWhdUhpx+$LY5m2CY9VMyD8WQmri2NUGhi5NRct8KWHGxAPrL70HNWkiwpS4IdHUFj19KWiNYAfG-A0QF0F73ieg62E6dvJm9W1EB1-SM1VR$9eW1q$l$smTRte2Pv35caMhLSTapyJO32INg-g$x6Y2nMF5096bM6ugXi8r4pEx8TxybNMwFbVoQNA1Fgj4Gt$SeKOy5BGc2Z94vHdWAFNwfyN0TdDBWWhyuE7AXBjvrdBk5$MwHGE7SpSruaELh3xrWwx1r1VEeAR5hAv8T3St0U9IiLybxVhMG7FdfgYcm2gJEjrm7CR3MVjB8IykSBGpRdxJ9mx-vP$Yn7iNpW++-wNTeuB3li1GKRLpvZ9rQyPXQajynPOuUXTg6GR9u5ZK4c3JF6L1vJmgB40j4tv$5q0co$7+A33VftMfVRaiDk0+OiIjgGHYFjr6o96KGWmu$oEMt7p32xAOjUcH9MG1MiRaC-hPIPEyc8ReDlCKUmmldrGuwvFt5pZs4Y45TDqHmKCFfvO63JEaaCBECalR-8AcOY94SaaX3+wYKpDegDBBb4hXP5jOPLWqg5Lds4wnww9rJ6FapJdueX-xWsZ+8EIQpIq6W8pDoT1L-ZkwMgpXx0sr4M2+skffQ-K3v1eCPLGfepJBPZqSnLe8NWx12t2KyZDJ3RVhhh7TgbuXN+1kiEfU69fRjeuxA6bUITZliDdHL4A5UfYhKBtOPHt3nhDmPhYKo4pKZVEpNiyHpDhrFOlvewJIW96CGMoXOgsg$75a8OtwA++HbF-yj32M4URGgAYq$HScXHRVVUnS9ARKCn87PNCufvbTYvt63PjOmvDZeCdQ0mR8$McoW-GINPq1BxuIwAaAB4L$Tv5TlP1$pMWv21osTLbeVyHL7OZq$Tax7YG0Ds2kT4+2gRlKdUUsJApDytL6mUk1RhhMJuvWLmwe9Cwa3hnrPvxgIVAbMXcIVNDYtELVkOrgFcVonFUTVOyvToe8VZmDiERx7VxjCHpIm1O-Oceyu8YHrNZXjFeAeDHxZ7eO6cwZ4Er+EidK$mGquscqJZ9J1aaCtqemUX-Gl2bqpYQApnY3tSXlW8EiKg+DcufLw58QZa0kRchl6Ssn2blvHN0aAwTfOXeyxXk6TcRO1Jdk8bIIuvlc2I$DY4Qh4oi1Yd9voXi3sN0hpAK3DorM6oAd3ZboiPIUYfC7bhUI05j5uqxZSkKbgpjVC5bbHg6P4ewBTJ0dQCdKYaQ2G-t3tYj5kScOksh7lw3jVpElAOOQDq3gENRq2gwVruRTFXiyfuYPaIyLj3RJ5yNYuWW$Z6QGiG7T$hLcbwYNE7v3JjbLGg2ZHXGkf-GEkvBXsQId0g1bHkb+8INW318jnPLV+TOgyf-aZj05UZeDD4TC+VHO+huKww1siN86tiv8rtkktayjlctrjE1DXt-KZ8y1ehihFdnG-vugK9sBmHiSj0G9eYS5BmoVR1wPcVrkEo3NUJZAYSGUkRpqOBJjDODXWW67M1RMQ7cAr3aNOihv7YE1sKcPnPIpGW3wrBk5cpSdVGH2Vbb3JIq6VwPBnHr3AUT6Xn$8asC$VtA0CZJoBj5hw3r3PNKPMob7+FJ8mYpYyVfXLQMRso2rdP7BAhSuJY+7Y$7l3TueLaIEd$tp2NwMnQ+IRFraCrokaYos2ENWIkd+LUDIodcB-JMCSSEU3LixQG7NsGsB7nVA4j9vGNmJpdQiQsAxHHMVOD9XkiE9X8pjis0xQUD2MF5kqRm-NvyDYL+oXjQrG2fZ7lUBvhm9sQ-YnD9ovCioZu84OVQ04wMJHmTlTZtdwILnrXECdpK7HDiqPQhNL-3QQHgvLe9dGE5QtLs2+TJmN19LRhZYetN92uZW$-IxKR$JEk25l8IYP+c5nodNqQ63us9wNjVPKcOGK$fB1lrTFPQssJmo$x5sb-Zg4OdGveU1q5xCoSaOTuIdMSJPiqcU$DalCOk6VsfqXi1NDM6CNyksBVrpTS$YIIw98j68gORvx+t2j9fatbEgkQZTTJFuTvG2F3WMYminX2StqmMMSPSRDAfGJ4pGWoUjQKkExdEygJEVpkRyXYlgpM+rSwoAFMgbGNOrf2Fbo--7ZiA7js8wpx$fqDb1o4T5EHaPWQa8J6qN-BF+2tJw9GLb+Bh744ctc3h0M-RTAwak8frV4s1d3MPgsfv-4HI05RbVGJEPf2qIMSqPhKM58i2bMwMhKp6k0HjY0-vDnfAfEU-X8FF5CWyrNU9NKhGtQLcSAQ$aSYWV0VPxAVt-UGEOKX-XK3mNQVEw-YTfMq81+6mb1UyfEIGeg0gVXhrBOwu5o7v6MVx5+QAqqmSRmXB0L$0jcBH$YOmODbI+reTi6NZq2kbW25aNe2mlqb18kKEPsmf4Zpst6aDXjXtt$6f9ikg+kvUBcgsll1O9LYxbxbqyKWW728NWQB6bGH9F7dQ+eXmhd1h8Q-C7G4F+jPho8o3KktTZ66QMQ-E5SNxd4SGAx+gJ+A4C3dA2sjo4xubhXtj0vwiLPhhuJKLO+rJjubIsbRsNREryNgGhKOpJr7kbJ4uaB2ZZtS7Z1W9DLL3QP21PSSpS93dmZ4xgIjdx2f5778goMVDNQG3E9jwPukKVCQNaib2Li6AC+sTybQaJm82Ls7XK4Ll$1xmNEdCHcSAU1OxOnLQZWvtS$9QhdQeLqihhAt0aMtwrYxUWJpncXhTaSYfoqrdUYoHAAqcXQqwRcr9hB$PornRwGjUe+stGehrx-tBybq46IRohqBVv2rTZOceFbFb3BjW7l8pe+nu93K8hJm8oV8pJMgAkoZWK+lNxaWb3S7OpU7tcSZboFyTb16VdKN95$VcwUhGsX55JB5Tn0$ywCs5A+jVJHfFYVTrInuneSZXWp6UcxDXElnEgU1qjF$asLR792suo+JI2yQBFrAaePKWjY9UCM6-nBqsFPI7Ig$Ngq1qJX45pmBD6YLoTJ2r13lF4coIvxy-CueUtci$eFXns+ie0ZCgJhZTAsRoUYBjTLxfGoTYF1Nysiilcf32BrfwGtplpc+ogvAGMM3DZf5XnTEtA6sncYqiwVKSYu64ElL++AiLWHXNf95bU72rvAEr+E7Gk9Xdbjiq4LqYtCwI7jt+S9F4+1iNCcAZh-4cLXFnuKMbpW-qK6xVj4olW49keNScHUyyB1wA0fS1scwyekjj8dmuwwZwGTtnXQssO6G7rRwlK0VG6qPdH6GGj-MgTtYgA0fFWHkwX7KfOSt0DEcmF8rX3n4FxOARhyvv5UnZcJKyNPnnf28FoRGUsmGBBWbsma43aatRrbyE9fqO42QD9QMwPLTisDZ4aKneseLcgcD4xl$fOMP5t3kpwx0Lnw3HqvE37uo1eIITgOdn2duHoG4oGrr08SJZ7TG2XkmCmfx0AmjUP1GPJmMTKXtpAZPRMAbFOOcW6-k7GU4u-JeV$TOoT0K6W05U-E3QuFxD36XltB7wuUrYICcveqFj8Out65MFI7-SBBhwoh+W+c1AXtPkNg4He00soyERNSa9JVlYGOfDG0EqFQ6GTTU0k94l31xAk0AVIdxhG+uvA48iI16kTApYNee8Nm5Sw7fXVPsG2qbRsMt$4ODpQQMathf0yG5lx3NrWVxCuBEW3nT9OBBqyoyU3of56RcnBiA4mELW-oVnhnDLV6xcpbbPkyWli-vc$UJ4QEfp-3Lu39O$F0PUV$LIcjD4+bijx+Xs6UaB3lfEPA2uGjB-qDNqLd9LErSjNSBiHGRMlgmhi6JKTCW032UuPqTmS$3R-IJf+Wu1QMfIyklPohD6gaBdNnbD$rJPwhodEDrZE5WpsfT+qA+WAOSl+YT$yF2K1JrArTQpAvF3WtGHaw35oYDqt$BhiY+uPM4lRGJuZXsrZbsfv2IJ-mXruuxuMJwDUg+$fh+F-GsbuM-8SiyigaATQmQIGKMq4DJ32FAdMk1YVPeOqf2M$o434jnptWulvN$M6k77gDxGLOotRs8YbeB3DAc3uObf05UgcZ22sTNaOvdXowoIxKjCick8vjnY77sCAYVPRoURsethvgx3rH7Z+2bJ6-P3a$e2hhc4kGd0rCkRCvF2Yh+9xtn1gXFEcQ$vr$7N9DtLkviRU16owom0-xeJJEBCJfMe1VtBmEffwxIrX1tZctmSCZ7d1X+Aa3ccWBph+6GAbEg6NRrd-8td+yBKxGbcKcbjD4TNNE0gwB51iXOo7t3-iNETkCVlZlFbsXwXqPZvlo8JTCddUCTOXmg4TOIH5+pg7BUIZYdqVAlg$ZBYXD4js01ikNyLBFkEFt88Nlfx+B-a5a0rOP+ul$4TG5KTJIjjriLOKIt7AaZ-RR3xvQrFknTkcc8x3baR4Xai7EbW-kJIs+1pD69apY1OsA7+VhKyP8+g9Ch7FLGDUCGCHcCXpaYiH+EXd2f8f$1hDyuRpWDQaGi87m2Yi6PRT6b9DtoRh8kCj$wnlBdPwx+T8mm50441uyNDpOp4OSXytM9kuwretbqWxYB9d8JIV9Vvjv2UiIFbpB+I5pmXwjH31nQl9aFEI6Wv1d7Fes8466gFulb9yJV6BIb5jIAOlu$iIRm2$Cwk7BxMMxxRUcanAB4YbwjgYULv$qUU7k4H8dBwZCdJvoQ0QWdos9sAZXpA1va+KHQtm-43sFyHogjfK5aZl4Ke02HFpdF5f1Mbwgu2600Ap6aL$Lh4H445vfaFYlJlgQTWowfIYfqtmA30ORGE7xuH7pHJ4w48C5sNxP6LUjqjmCw6Lvn-T1RRPcux7AuyTiS21CecH8MYymMD45QaUJPNhgeyIr6dAcMggt3mg8up2u2sA+GBrrPw5ZlpX9$1f2+22WegZBJPGR2N5Y4YVpk7qkVdSHFt53IJJU$unMDBb3Jhb6Ktm0DDRDHdPv38bFRfcdnfoNZcx-mltHJ0OIsre2N3NjcIFVIjnVqqR0ATgKwaKC0RPGwpuYKLd0gdk+2S+ZYn$1PTJt-JKimIQXu301an7rLhy$jCksgg5hN3CNxZ26ZKVwxRVLtTmxq9+$3JMfbM0fHOSXHsTKOYYWPDbobyGLQ-Le2bAnuPqIHcB8+gOc5-4KVkAs0g6h4nwxoQvdEFjFHxukIrGJ+5+RNxwm21X-Iif-G30HJXnarDVydmf0Ta6EjI+qrq5qmJl3UQHEo7KvTcxT9xQLfhdMfwotfJUQuKUwQCy-AhGWv9vEfKsxWT6Oy5+a2ciKBqk6JG0MDvKysGcTy+Yb00Iu-+R$WcgMXLkliijgumo+mbuFvvYVFeQsG630u5xTBNCmNbKP$TToEbb+xB4yhIwRTiAiB5QX7NeVlsMeY3uW3lk2Qc1NeT90UMgbCiT6fF+$k3p9jc61eQT-Nj1lEZFP9eeIqkBJjuwnj$70TMgOSpQfFqMxq2eWcSWPjM1YsBU9a7xPNT0L5Ke20Lw9KJoRfbBZe3e2EESX+ppcqEr9r0UGB9n5OkFN058ImSgQ-b0b8WF2s6UoEoAIoOKLsbki58NE$oKNRTjFNC77qE4rwLXygorprEh6BhW-yFQosrv3Hvb5$DC8AWDvyZLlppcsW+ZKAmFxXQFjXotuh8pL5i6pCUhZ6uhi+CrQW53yuficOSxha9QdMfWV32LTuxa+syqiOLyIQNCuOUhwvp8raCwEOadpboLx-KBWrH-$TX$+5Ifu8gg2ca8VhVY-oyU3$4S5fSljbs151FT-iBwUHAY60I6xBWnJnHCi3gLaUYsXifamCfmCn2D8rArKBco$6cGQas$mEPKk5jSVUOHpYrE9l$6mZ58AXnnZiqQXvrSaBWf$hVS0S8kux$N$Ewgard9y74rNVjAeZ8JWtNeJ3CGbqu8LJSqD3U6l640EshD0RVMZgBw3IFqWRVfIq1aCmqxRj1Ndv+jXY8S5rDQSdU1rPS1mlX2tXjOwFiiLA$IgwVF93TsI$UU5k2gYLA3-RP6HV9nVn6HDBgb0GAP9IknCPQxjhbqNK9BsO28JJOiYYTKbZWF2$IkZhkpjs4DkZUayMSHQS8g5soeL7xxGhCO9Zc975pw5mn-M3jtQt7X2VsH5PTD2Rp-sWgy1PWCdJ-TSS0tg21ybgv2g1N8AxDISELUEmf2SmShE$F44e20WXeMXZ5a-6kqiw56uW$pUsCg-xGQoPvWbkI9yyLUZiWUaHwFEywmWKyt32FDYrR7FyUE-WlUKdU$Fonc6D5VPcVWEuNRifD9m8p7fsZ7D$Lyntx7WFaNGs98qWAWnL45JaNf4XLPSq+7qVpj1v-9bNyXXcg-ORFcHRRkgkl7YuuDaHHEjenv$nMUXTL5PYd9xLoPebUWLK6F2Ya9VRuqCU30JCUKYWsbsJTrxQK5Ms$aG1UpitV4WrEcIotTpMoLFN0tfDoYYkiGET6a75O-QssTmwSY7pULXL3fgx$Kh-f$CdHj9R+rBvXmg9psbZrUg3sqkUh4CwnbxttJC6Nj9C3KUFGlAEALWXJX0-pwqpa$O+NIjYuBTUP3YLbmWa9hUrvKC-$4--Dj7lOEImVPCW8EkZiIxoQrkxLZXOZ0RkiL89UHpVkeRQoGGvJN95pvWF0y2FKN7j5WkE-RPQu1DBICnIZAnkM$P$qfTbnBX8ee155HTIGVHCARI5XDsW1dQSmcxIKiZu$d4IuH4$j6089BlGc893NsgiKmw7CLxgxO4E84JoxRs3kKopwbDG0Lv0wVi6fAutbvvi96xBAREdLliX$C1cXn15cXuieiAYRe+DTtWt-9Sb7lat8bmUOIyF5pBufM7p8qTxJTmBHV3WW1lLFH1uRy6QyqRJtE4LC+B5diQ2mmPJu2kgf0gWJkTKD5j+XeA5p$0hA7SkJ7cX+7f+SS32x8UIA-+dqLwHPMBwD+yIv4RsahiJ157iiHyKaunMGoALS$fhJxYA1HFmuMcguNcXNl$JP6B8QL1mP8bbe6EkWpRoxK$O0DOEYB$VtvWNoB+VKIKFW3QMca3jx$YMAZB8Ai+KqvxK1VI1s5ey7CJ-0w$dUOavmxx2KueF1KxVDtbYrk4miMoLlgO82KHf1iHNDIfbt1+U4RvUgybbLufE5OwW$DiR$7XtA4Iynq7Wm+QwtIu5sSDGa+JNCXr39Eo5-xHjd9Bmeii7XnnD4VidnVLtMpabL-ni-LA9eFqDVcQ+PqKUGFJtepD53AG28N5QL9dVwRgpYA+LWTgYD14umjSelu+DFjj+PHYVT2$P188U4rMn0k7dbmg$0QmTkI$lWkJEd556A4TGN4on8XB5aOEO0AHQRqq3Wgd1Xf+cIYKIdcFkHeopD$fIc7JeUf$UcWkcQYfKcFQBHWRuv+atRmRv65sw7nZ4YHDRvwJ9adUyLjMYGlm7Y8UDX0Qib-M6L8gT$HKMTnj28oPNlAp2OPxVTEY9bTMxca1CmB9t$Xn$E7$mfyysNeoJuREaThGVvghb+bs$yGdtt-yT875vMhfxr6W11jfBSQgjlMMvoNTucxdAS0rmPCskBHi-dJMcParLnbNbKm-OeutIEy+ASJHc7uyt-tCuD8pleH8SFdD-u4pwfYMu9ySV0X$5PXsdGgRdmkYGX$ORVJSXb6ET275yBAp8367dF$O4p889dLtqhkTSJ5YYFZqNQ3p3LK3po1Zy+ESiB4kM5sBp7+V8vy6r2EsnT4dZF-3k4aPGuvF+Ahj4iDyAcwpO40IId$JRypAEv4BkVWAgYdvESlnM88dQApDO233xR25t1H3RtCj8CJof5vSiIafIOEtpc8uy6oS9-kg-FuP025IhVHi+gswP6DJgMem5feg6Z8u0+ygXeNGpo1RpLRWqySx5a0$dFT4XRq2rVNZ2h6p9H5RsvhV0OlCQ-yGiVmD4XNWTEMGKPH9AyoVO3dcqrBd1qE5cxypNv5D4ScT6o7ay34pJVO2OfaJl39Ajidm8ysIRnHgUuH3hSly0CIhnf6gHdr9pA1iCv9GZllydWnZmUjhSxb6iSN+Oh$82s++Up3wTJO7JFrmlcmkNUQ$XAqs5vKn5-HWW1-y2gydl6mJovwsksuKpgn1ANh5VoQyZ-Wo4grjYGhqT2K-letZkUpMaiYMQtcRdkpgtH8qgolD9dQG7dVatvgwAiB0pnvNA2ixYmD+Eat$0cXPOP4sKL4AROiyKcnYsVqwqug$eOxRMelr39LjIRF9fJaNu9nZ71vDd$TkPVwnLV$PO8v-fswHkMj9lsA9OJgIEoK5sO3cYcVoQVC929qOGftESoP0g0IKdVuU1eamtoH7yFXVqDk-rMeJqHL8qc2D97Ytv0PGSEvAxXyCFQMnTSBUjCyq8rUH0u5l-jm9YmEypQIv-5URx0TKIRyedmeniSc-VGyH99Cn8XI-Eyf6laTtvy2kLhXuyr89q74xOQwTr-ZcWYXXkYcwYeF8uP2QfZErBMIOfltc0ukQ+USlXbmUYwmr+w8JJh9DAgMjWLj7HVEabyEUI83MME-lnhRFgvviUVRhcKgGDXs6W20SaL-aQD5mknbjOKl3u9hBH4i4urDanwlG9$DBG5XHBFvwqY01e$mgfbM7rFlsVaden6uFlgSY5vVXbGS+$3vk3gtCGO0XrHQQGyACQJNbnK7RKv1EWgEUgZb0Brwr+5hc58X$-rghXeDJcGKD356emEDILO-j6n5Mo3SVCCByTbbsfKNGG1psFMDRK9qOC0MpvwYv8Ba-U53ifhhu+uM3qrSes121NyMun7Vm1jkjcm$w$WUOg2-GVq1chRFgnL+P27Elwl2OsY8vmTx8C+V-xfnw12Df3Cu7K7CNh3iceyiTpsD9Qhh9w0jZCW3ArGqVV+-IEIDsOeX1sFOAMna0EH4wodYSDAIGchLg6kcpsFUN70-vBDTnW+UTjPw-vGK5Ew3j8ePNp7RKI$krieGZLP2TYCvmnNjSq-0VCn9uYw4hPHxTZSPqIFx+e3kqMmW39uQnq34EkZAE-n8NwlEPxCwBd6q0CWMW+CoibkDA5AN4GN+X2NBxh3Zm$QAYDZ9hm04TBTRvqEU6Gc534voOfTJUtB4GF5O2dyDaQjxb10GI-MZ-L5J7WueRxYCywIFXdm-ANlB-SpiOGqU5LoloBceeqaGT$Z0ZGFTAgjB3nkQiFI$7-c$31VPpX+$mEw61AMoX317UhI6BMG+c$Q3jMfLDGXHobXsdL6c+LrMgSfTeNSWXgJcC03CsjAXTaF7smDbmUnL4ap+N7iNQnjJGFqFCJfLxp1QsjKnPDgpjJndeBOAVdAe-wEGfmwy+CvVlaXoBNIH44PcnBrq$kyTu+nfks0XwhxeMwcj3JpJu33kXh7gn5q$GIAbYcKNVOafI-exOQjFp4RCFmyhBCR5pBaxgfwcTcDRx2b84jSjGLiPf0oJaTuCkv9y4NUpoAXbi-g+VAOfUOjZYf9HhUWRs+rPT36tP7gDabVsKrIE+81uF1dP9qTkvtlTjx7HHgRwryDZmg022Iy0LfuiOsFA6aap1wO514T2V0ODRNDQWyWTdslUFgyqv-ZUILJbugEIQd$IE1vuYnC7QN$d7xkcCDeqwLFJYNAaMKOZGIBjO$tOgNinyJy0ZF5h$LwABv9eDb7-eoQr4KJBXl1GT18JownKekSq7auChZmRoUl3LOF6VnG9E4gAbSqwatdDuqQUZTr1b+Z0Xmu3L51ujts7P5xPo$or6BLqXHBVI+-PMwN3RDiTDh3brk$8jMRAA6AnU09-8rwBtedhSbNsgnLGT2MkPujkAdOPHkQXppflvh52HgQ$4RgQfIsnFKo6axOQDf3wF2O1q2Q8v8qvWw$m7FhJM7BlLG4qjKP9HlV8qAlKPb4Tfq67KRYFXwtaX$ftIDEdNukMkY9KiIrvCgCvWkT0e5eco9OrQ5BK8G7B$2hZpaEdWBp-Uvq+y8BGc-8SpGFVt31eSr200wUhWiJ1harq6VSQ1NWlTD1tiqafs3lVU38+kk+lGc+Y42L5+2pwwI33wfiahJTkORWeAARxklEH33$5jBJRAekQSWSQRPnqQLracE4xmDiC6mUI7VSSCfJmQdfHegR6YbsE5tL$ovFvoITw5Vp1vnR9iHWTIEO5CxdRJxN7vJMAwxyIH8QC7l7FdgIvqTEQqF5EUjWWTa70fXjou1WDbQSdh6MmYmauH0bPNNtuADr+WViAabEd4+TAQ1NV04sYdmvGmoPaDE95p3Iiawf+lypPdtiDOywE0GK77fbQSplymJ0$eQO2YP0AwGshYVGfj92+VwBYt5gXsccs$$PtOIoeNJoPxP-71Th04Owsqv8Y8lT8xCy8lFYyBFw$Hp6$3CVsdjvIFmSu1QkPZdt3$fP6PHAt$FrLNG9u9lQXE5UGPmc79w$rvpnKNwWhfpatcDVCgkbiFMtHUoC7HFZkV0DuS8hwr8JLk16sST1y7RHEd7LrS-o9Qi2bx8OTUT7wBCacGTWme4wnhH-i2yiAsUbtSQMJ$Xn9E6YwRw1EP$Ztidx7mDIb2i1SGfN$hW8D2fjpeE-ahsGCuEIcr-4LMUj94nl73BAmCIr1KSnhqhHm1iEwgsop$3RClBhXMJWgDelwTP$ls8mpsGiPc5e9jpbVhyp6C1m3YW7lh4TwxAUpMIPVAnADySNESoxfx+pD52WusDeixQeiNxrHAdbvanh$p1u2gyQRyGpwb14AZDUALQ6SiNTZhxru-B6eE5m5TTLW-6KjambHWVX0CZC3yH41YOS$+acQLvQLAD+gLSlcY29G7Xvop7IJkTKSsEFVdkIqHGl$fuRUdxfOeM1jPhOoM6b6ax7CDa+ZNRSUZveqmGF67gFWMPj86e9Y7+7LosJDoqblgOu3qCsC7tPa3Vb+KK$TiOGOmfceCNduyIUoBHSX4wQ-9I0yltxEMtdSqZ5lW7vFtbdBR7lqyu9jLnLAvKb9s4IX0K4+1UrV9C+BsZJ7K3+ALQL2fDmLnqO9WrLKEoU9jIwmCCMqDr3uykw3wEeC48IdtFlmU2VZONHOgx51JkMnb+2Ak3Li-YqJZ$76c7L2KUBB59DcWHxATxc8fJhlOlY+Gerw3GNuD400NYjpmDVhrCPaqRH98s4bL-2FgoTTtt0LrXlC1JF2onQs4vDOyLXFumGmxYePbTCoy$Ot39R8bICedx8QuX5v8YCe4XQ3fNRnCyYda-m3k2CV2Go52EU4E2AkQOhWB40-TJlX0D+jwkKtYZh+o4e3sYeWGIW66FOLe9tVb8tnoehluMJWU0Ojlc+ahtyO1GaJP18ExkTScl-0RINDFgTVXnJG7$mjnCixeA2kEGUCE3210IFOfVnY6JpO6LeYn$T7k-EVTpd2Z+ASibm7-aHvqwwKgDOsKnDW+DOjtPIeajqV7grfmmGXIsFubDblnWKAnMhVfLs1YTj6xj8$NofNtO46LQ3bwfXlxO+3wkXQOgwWKTD03-mZ79fbsQL5vNGQFjJYMHk2vTU-MLl538GSt0-3o95PlmTHMK0H+6fvf8Q7kobRvE6Yvf14DageO5FFgINSMHim06U5QcJTEFJdaAeQUpiTyu$Dhd8Revh+gKMEba8uoqI9Mf8X2DRDyFYIgCh54GSk2SJyMNh4tYYCLiKsOsGZaalkuFJS4tSmwbnaI0Yo1toM7anoyUBnuW6RYA--T3Ye60yG52y5IwAf-HW8jD2sCvb1M9RW3+gg+pwk3IaAAULQ6PwxPNxm6+4yG9l$w-h+U5cCURb-jDkNDo+BsltaN9P3QAHMldbVXZS6iO0uygJ4dHwOk6vNnCTt+rxB5ZeXrwD+sNDtakonLsUJjlSuJS-PxC6mgy2QG1UH7si-ecaxtW1L8j6jEhsj1LrcZfPawanGLqh82b49Gs5Of$cF4QoMG7n9+u+c6eiybtN6+LWmB8CbXbAhJUKrB07HI5S7JoGhhwL+Q2DFPyYVrGCuTN7$g3806+371qG5YmKqec6g9HTiSqrFi2ibWOJ7hxNF$Tql5gmMCMVoVwv$RrM4t0J2Gu6kOg6LsH8+vG4pcQ73w0fAbBkBvVBN$ucaoKE2UMx1NWGQVJ0OwNEPuDK4-66uGwBgprC4T+4Qf26I3OCOqhRe-gSJpqX0eo1qrAQyyv+NMWp8R3q7+uTMAZR$tGme8O6$TDxliUNka$5GZXOQuB85VddEqq63CxAwXqBHBivTAWF98yR$9GIkFyjbmS242GrOXBYFsDbqbxy5QR6Itd56DvF-Em8VrO0w3KWSi$1DoGbkjLH1MHZ0QAjVyNjL4wG1gLc1LrH1tXi+jFE+Z-LhRf0IIrVBGs3YU8CmD3mh+VUZ9akbKYFEpQI87GYtCBnl4Dhe1MQwmlaPVwA1DNkUHdEKMk9AWx1WclkT0lyP46NRNbWq0o8E7g8iyUYgAM2XTMmFqin0+MJGKMma2byNfwZd44geVLYRJMsOAx8KGFaXyu9JT086YnsDbucN7HjY8PkLMO9I9dTYyyNh3SX43liUNJv+WV6xaYfOlXuCgino73ZlZF0B2pc2H1m+I+6vjyjdVXlcUOlNJOjr88KJ7kvqCRWZKBgdrpTF7ju0m+ovuubyySZi9R$EEZiGU0IgVC1rxrU8Z7S0QyREGhgNiXeKeprJRE10yPP-pNevC6ZxhQAadAZHQ3XUkZh6bT5iexOMuC1+3XBAVAxoeouVoveU-dlYEJsCUWeINmg2RZEO675S-sil0XgUmCYICkNisC$vPUwM14oJpy0oad0dEIRj-3EE7OcIROc4L1-kpWHo0$hP2TsRKw6B2xWCOHiH6j26WH+CSMPUL59LvvB+fAhZWtHZo9M6ZwX+oAlF+Y1eR26HV+TW7xG$7qGETTuJ+hU0YUfIV0h-Jhj+svnHQ9hKlopu5onte$Aj-8fsJaVcWD1uKBjsiEO$TLIwO-JGfY7rP9CNjf0$$JnLV6A2QSxFPGiX+UoGLnHZnXchCh8MtNHj$MhFfDf5VNFo9fswLbuyo038vSeK2+CntOsjyKABjBtQm9pYK8Jp+kAsU3NWdyKvd08R+NyomajQ$-nfSkJfscFaIhQcGLlX9G2LGXDRLMkJP36r6nvh2NyG10Ey7rYU3IgiXxdJe0XLj52qf0cx$q6aqjNphkgk211auJbZxZBDwrLEXBkAA7S$171RsxZK8JuSvEA9V0akT5IHAjhmjhcbcH5Ki7auC-hhLvNb28C7MNi8-SlhOCn54KS3kMGQFcUJuyIEo5ISSOEGwQsjV8OWRkMA1+SJMRj901axt0B5rbvlPZ21y1IMLHnOxZnQECoF4n-XIxd-r-EjGs-DWDBws3-B-8seQnMwZJRD$BZImT7A+SevDwh8XomPGlk"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 20:43:43 GMT\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: br\r\ncf-chl-gen: UJG9bUfNMFvW5PdaDU10HCjFOr9+nF8o+tucYDrWd4g=$dOytxI62La368DiGspRfzQ==\r\ntiming-allow-origin: https://challenges.cloudflare.com\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c5352dd6e7c56aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29992,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with very long lines (29992), with no line terminators","md5":"59f3b0d39d80245453aa4e1c5f212b95","sha1":"5d00257ddd6618a8493b7b8baca021c558967842","sha256":"deff8a397e98df45b181b703b891d949b7081df6a9575958a06708441d2ea46b","sha512":"6b0292aed549a3dc71ee376b85f3ff872ff6eeb9b4677d3f6bb2811118d8ed4e2b42401652b2d1b4e3e132e6c41f7b4eab12470f39a85929dbdcace890f15c72","ssdeep":"768:1eaxoTXyqM0n4Nov5lJf+D4aYZrPAvvxS2FeUogDQaCJWt:1zxoTXrLn4CR+DRnvg0RokQaCJi","tlshash":"5cd2e143fb629f297eb6dd0f5aadd9e67a0003b91c4a2f60f5e4154e8916e7c890488c","first_seen":"2026-01-28T20:44:18.797765Z","last_seen":"2026-01-28T20:44:18.797765Z","times_seen":1,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/auth/home","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T20:43:48.347Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /auth/home HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ephemeralcounters.api.pekora.zip/?__cf_chl_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=.Bn.21QdOlSWuGjZaEXmTVA1THylJ0BbDfit6eNZAfw-1769633028-1.2.1.1-dOjR41VRA2a2UR0OWqNIM9CyrsH8C3cPCQKYgqqlmpvMfrUDrM9pmQwRLztFJHa6MI43F70le7hJp1UJxZWcFLq24x3AippO98LPjHR4EVmy8d3y4Amnq7NH.H0isQdOciFIZu_1eyzfwjNM2WEhlWqOqqwc2uXLtmN3MBu0aAoTfqL3Md59jDKVrgdU5IDNDFdyjvit9XqtBs_qwjNFjX8kuHWcQ44pmlyBvhA07Jc\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:48 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: cross-origin\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self'; img-src 'self' data: https://cdn.discordapp.com; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/gulpfile.min.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com https://*.archive.org; style-src 'unsafe-inline' 'self' http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://pekora.zip https://www.pekora.zip https://cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css https://cdn.jsdelivr.net/gh/AllienWorks/cryptocoins@2.7.0/webfont/cryptocoins.css https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css https://pekora.zip/fonts/gotham1.css http://*.pekora.zip https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/webfont/cryptocoins.min.css; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net http://www.pekora.zip https://pekora.zip https://*.pekora.zip https://www.pekora.zip/fonts/GothamSSmBold.woff2 https://www.pekora.zip/fonts/GothamSSmMedium.woff2 https://www.pekora.zip/fonts/GothamSSmBook.woff2; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/* ws://localhost:*; worker-src 'self';\r\nx-timing: AppGuard=0,a=0,ua=0,c=0\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Ip5smZAJL4aPd8rQN6KdxqWvIY7UejmS6W40ylAf4pmWGWvdGczXu8YuRvroc2PvkcfixwMWTOkbIvOqY%2FCeOuAqmmvlDSAnBJEByo5TaTwWHEpEKpg8shQHWVO5d4KNZrOlIAcppAq0tuZo0OSmXEIq2w%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9c5352fb29442efa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1881\u0026min_rtt=492\u0026rtt_var=2022\u0026sent=74\u0026recv=44\u0026lost=0\u0026retrans=0\u0026sent_bytes=81826\u0026recv_bytes=13989\u0026delivery_rate=43152317\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Bootstrap:5.1.3","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10870,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (641), with CRLF line terminators","md5":"f86b4246fd8e9a069869463808e5c5b2","sha1":"f00eac73311d170d792e3142e93317945bad897e","sha256":"ef34c01a6bdc2a6a7224170ad34eae6467813117c2cb9747f9458f25de1a1f39","sha512":"7ad1bc7bc219c4c03cc59d90d0133e3192098519322cc7c273d2022b65d7f633d91b31b141483f58e5bec264cc906a78fcb2d43a7463ee9ce4c00fab5ecc4a21","ssdeep":"192:sq4TCT9TDHcsdUpPH0tK2TMaAeChUcFR206b7b7bNZX2:sqgH9RuUz6D7xZX2","tlshash":"d622513552c02427027343ea6a91ab95ffd58087c70a9358b6ff63db5ff1c01a927e89","first_seen":"2026-01-27T19:10:17.615537Z","last_seen":"2026-01-28T20:44:18.798716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.414124+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":5,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/auth/home\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/?__cf_chl_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":35,\"pkts_toclient\":78,\"bytes_toserver\":4299,\"bytes_toclient\":89883,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/i/do/not/exist.png","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ephemeralcounters.api.pekora.zip/auth/home","date":"2026-01-28T20:43:48.873Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /i/do/not/exist.png HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ephemeralcounters.api.pekora.zip/auth/home\r\nCookie: cf_clearance=.Bn.21QdOlSWuGjZaEXmTVA1THylJ0BbDfit6eNZAfw-1769633028-1.2.1.1-dOjR41VRA2a2UR0OWqNIM9CyrsH8C3cPCQKYgqqlmpvMfrUDrM9pmQwRLztFJHa6MI43F70le7hJp1UJxZWcFLq24x3AippO98LPjHR4EVmy8d3y4Amnq7NH.H0isQdOciFIZu_1eyzfwjNM2WEhlWqOqqwc2uXLtmN3MBu0aAoTfqL3Md59jDKVrgdU5IDNDFdyjvit9XqtBs_qwjNFjX8kuHWcQ44pmlyBvhA07Jc\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 28 Jan 2026 20:43:48 GMT\r\nContent-Type: text/html; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nCache-Control: public, max-age=14400, must-revalidate\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: cross-origin\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self'; img-src 'self' data: https://cdn.discordapp.com; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/gulpfile.min.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com https://*.archive.org; style-src 'unsafe-inline' 'self' http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://pekora.zip https://www.pekora.zip https://cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css https://cdn.jsdelivr.net/gh/AllienWorks/cryptocoins@2.7.0/webfont/cryptocoins.css https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css https://pekora.zip/fonts/gotham1.css http://*.pekora.zip https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/webfont/cryptocoins.min.css; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net http://www.pekora.zip https://pekora.zip https://*.pekora.zip https://www.pekora.zip/fonts/GothamSSmBold.woff2 https://www.pekora.zip/fonts/GothamSSmMedium.woff2 https://www.pekora.zip/fonts/GothamSSmBook.woff2; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/* ws://localhost:*; worker-src 'self';\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Of1vLcALu9k0sDDHJn1RcbEwCoztMSEJ7MS0kjp8xa8CivwHMHa0OiYYluZGeXEU%2FTcJzOsJ5etvUEXYN57eVMDOYG7pAJ9fzagvTqFalz5pizcUabKSpbWqERcW0Q%3D%3D\"}]}\r\ncf-cache-status: MISS\r\nContent-Encoding: gzip\r\nCF-RAY: 9c5352fe8fa356af-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"dc.js","description":"A multi-dimensional charting library built to work natively with crossfilter and rendered using d3.js","website":"https://dc-js.github.io/dc.js/","common_platform_enumeration":"","icon":"dc.js.png","categories":["JavaScript graphics","JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20228,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5480)","md5":"cd631b0dfc323a37944d0931f6199151","sha1":"11632c5dd9c577389795073fdaa2e8a3cbcddefa","sha256":"c030bfa9da92edb1965de9fb7e16bee51c26fa0aa30380f446f373702f13e089","sha512":"629d9990ad723cd535916a859b46ad0d74e2e8bcb8d85f891e153dc1a1c1d4f113518ff2e5bc4e33f6ef35979f8d9801e884607d5122d5225322864f2d685782","ssdeep":"384:0himHFXmWF7uXF0ekopIlQTdAC9gI0KZ1PYpF531JgrjwI:0h3HFXmWF7uXF0cDeF5jI","tlshash":"b692b876afa24115312bb0e8376f772bb7558413c60ace357af421b8efc63e18521b45","first_seen":"2026-01-27T19:10:17.611135Z","last_seen":"2026-01-28T20:44:18.799672Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":87,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.969795+0000\",\"flow_id\":1169732010832201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51364,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":2,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51364},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/i/do/not/exist.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":736,\"pkts_toclient\":817,\"bytes_toserver\":50435,\"bytes_toclient\":1186603,\"start\":\"2026-01-28T20:43:40.848201+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T20:43:40.599Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":63,"connect":1,"send":0,"wait":0,"receive":0,"ssl":2},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/favicon.ico","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ephemeralcounters.api.pekora.zip/","date":"2026-01-28T20:43:40.848Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ephemeralcounters.api.pekora.zip/\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:40 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: cross-origin\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self'; img-src 'self' data: https://cdn.discordapp.com; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/gulpfile.min.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com https://*.archive.org; style-src 'unsafe-inline' 'self' http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://pekora.zip https://www.pekora.zip https://cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css https://cdn.jsdelivr.net/gh/AllienWorks/cryptocoins@2.7.0/webfont/cryptocoins.css https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css https://pekora.zip/fonts/gotham1.css http://*.pekora.zip https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/webfont/cryptocoins.min.css; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net http://www.pekora.zip https://pekora.zip https://*.pekora.zip https://www.pekora.zip/fonts/GothamSSmBold.woff2 https://www.pekora.zip/fonts/GothamSSmMedium.woff2 https://www.pekora.zip/fonts/GothamSSmBook.woff2; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/* ws://localhost:*; worker-src 'self';\r\nlast-modified: Wed, 28 Jan 2026 20:43:40 GMT\r\nAge: 0\r\nCache-Control: max-age=14400\r\ncf-cache-status: HIT\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqYcTKfHFacdouP2RcBG65fzpotEfCSjdzBkl3XyVWOtPyO%2BcCJr5Tt0vQDXKox4mIRTk9%2F%2BkwQ7MprWFJGLvXn2wfIog19VA7rvsM8fu%2B4Jm1pO1TUu9etxM8ZDMg%3D%3D\"}]}\r\nContent-Encoding: gzip\r\nCF-RAY: 9c5352cc4b1856af-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"677c40e1598f3740487c46fbc7cab9bb","sha1":"ba68f81e693de00e67877d12fe393c4636a7bb43","sha256":"5aeb4fa5ddd1e3c0e37c273478cd09f8db1315d09efad31eeaab5dafdda28b0a","sha512":"ab592e1a11d008634b693bda8d7e3841f20e8ed6dd8c5219e10a78e583410b4beef049e0d2d671c69f86a68aa2b61b3174c2a668204fbe41bedf1f657a76cb28","ssdeep":"96:Qis99Hyw9QNUv+fNRpxOsxJ5inKLm1VgaUyPGXOgAYcfnges8a86ujpflvvwfZeE:QJ9hfeIXQ5mgA3nhq0jHvVEd4","tlshash":"506207a7b306560ce93f5b7cc107a821a03a6d251873611192bf771b24336b7d6be1a7","first_seen":"2025-09-22T16:57:46.924306Z","last_seen":"2026-03-04T12:57:45.925627Z","times_seen":6,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.883458+0000\",\"flow_id\":1169732010832201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51364,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51364},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/x-icon\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":661,\"bytes_toclient\":5993,\"start\":\"2026-01-28T20:43:40.848201+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.883197+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/x-icon\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/?__cf_chl_rt_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":6194},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":23,\"pkts_toclient\":48,\"bytes_toserver\":2590,\"bytes_toclient\":62823,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"http://ephemeralcounters.api.pekora.zip/","date":"2026-01-28T20:43:41.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 20:43:41 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\ncontent-security-policy: default-src 'none'; script-src 'nonce-iT8ybHYAI5uchfkJ' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\norigin-agent-cluster: ?1\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\nreferrer-policy: same-origin\r\ndocument-policy: js-profiling\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c5352ce2ce456aa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":212765,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (65536), with no line terminators","md5":"e552487ace8cdf1b21fcd3958e5f2270","sha1":"3e358e145d05ccd7d5e055ff9410e01deb63a111","sha256":"c8a497ee48d9d24ce976625b6042fe961eec826c7b36ab6742e30f477b9d0d9b","sha512":"270c05cf66a8181f4f47786a17ec2a2a8b4f7600b525a74567401d6a1ba905c1f71dcd49204adb88b6e72af35182154fa2eaa411e9264b2da904105da74e36b5","ssdeep":"6144:wmblaatdBuA3Lna221jNq9w9h7Q9VMpDKT:wGaatdBu2nJ+UOD0","tlshash":"c1242b8e65da79a573f72074002731cd72aa68997c18a85de300e8e47ce535caf73de8","first_seen":"2026-01-28T20:44:18.801925Z","last_seen":"2026-01-28T20:44:18.801925Z","times_seen":1,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/9c5352ce2ce456aa/1769633021527/7YuaxmLiO_q_RRL","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto","date":"2026-01-28T20:43:42.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/d/9c5352ce2ce456aa/1769633021527/7YuaxmLiO_q_RRL HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/f/ov2/av0/rch/vv4pc/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal?lang=auto\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 28 Jan 2026 20:43:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 462\r\ncf-ray: 9c5352d84ffd56aa-OSL\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":462,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 5 x 92, 8-bit/color RGBA, non-interlaced","md5":"351eb405b751e417703e8cf4bc73af02","sha1":"5c743ee4c179b559cc4a2ea196b5f98ac61c4253","sha256":"72a730383cd98765adb38ef6cf0e41884fbd1ba4debdd95cc442c86040760e8d","sha512":"c538a3e314d171f9e2d554cf1ff28aa8dae44ed722b429388d7a609fea1372eec42a1196241a6c2f9bf28b83c03b9719825b0bbfe010f53068a2e93774106733","ssdeep":"","tlshash":"d9f08dc0eee8a42cbb28d9e122139e355ab21df4330034d8520df8f13ef28a340a7380","first_seen":"2025-05-20T14:57:46.33189Z","last_seen":"2026-04-01T17:46:23.548769Z","times_seen":116,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/cdn-cgi/challenge-platform/h/b/flow/ov1/273858410:1769631759:gPlj8AfxIylj64ytFtlGty9a76NJJozgyMlhitTemJI/9c5352cb49b03181/kODy3GhQ91GUCA4c9qcChg8BueXV4oxO73HzrsfZ_DE-1769633020-1.2.1.1-Onm8KAPRUpGKjjzU.lKTOfdp9MeFOhAmETCwfr5mneD38oh32M9A2OPNlkPjk2et","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://ephemeralcounters.api.pekora.zip/","date":"2026-01-28T20:43:48.111Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST /cdn-cgi/challenge-platform/h/b/flow/ov1/273858410:1769631759:gPlj8AfxIylj64ytFtlGty9a76NJJozgyMlhitTemJI/9c5352cb49b03181/kODy3GhQ91GUCA4c9qcChg8BueXV4oxO73HzrsfZ_DE-1769633020-1.2.1.1-Onm8KAPRUpGKjjzU.lKTOfdp9MeFOhAmETCwfr5mneD38oh32M9A2OPNlkPjk2et HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ephemeralcounters.api.pekora.zip/\r\ncf-chl: kODy3GhQ91GUCA4c9qcChg8BueXV4oxO73HzrsfZ_DE-1769633020-1.2.1.1-Onm8KAPRUpGKjjzU.lKTOfdp9MeFOhAmETCwfr5mneD38oh32M9A2OPNlkPjk2et\r\ncf-chl-ra: 0\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 4567\r\nOrigin: http://ephemeralcounters.api.pekora.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":4567,"data":"i$CjtY2Bps6EEfLkTkEWKu+wxSelowUAcSUQpDWFcFHLWrOCljzHjtrVEYt5CgyfebmXwieXb0XKr3uHBbzGH7O-IbY8QA6gN12rl5FGjB6hQ-Fa+9wZG6niSWOyzTLrqF7jwUu3LSkSddl6k3L1rmZYOtGjEuBZLH-wL7j8-BCOvGw0gUAmQUzWicdQo$n5+zSDaCCOS7xicvF2bwA$v7e60A0EhRKAkkz1WSjyGXrOUsh5q2f4+9vkA+5rlX4Ix6IboevxIoOYXpmHV4XX5l1jhlYbYUPvuQU4E2qXKt+aNr87p8WckwASSavlup9BWhqhQrjZUqgTfhYcZUdjCENPzSjwrpKUQ-Sbfv8y+2HEUKWlPDinlTO7y$hjz6d2eN6isEuGyKwbrMWYdGwZXdRmpevOv8FT59ngwDIwyxBdNw5zLt2tZDrUwVEKHGVZOLX$DUWGZqS+REjc5rmtGwqaE9IzH6QQHbpzA5m3reDukQ9WT8-Lnu+4UxjcoT$nlTr8dGeuzeO3XZ5OqpN4g7LN8$q6EPvVQpAfNvQtBxO7xw9BSb5GSl1W2Q7GOwxG11QoVSNNh+Tn6FyBSwWlNrYPVX+gOvHhfFR5yBh0PxNcRrupwC9gRAxB-vKlMQ4L4s95xaw31DwU5h7ylCFq1zgo2-9KprKRGVLQP98XEkqqgezGM6G-wEEAQRATj+a4rUihY-t0i6G35XYBkBAhtx+eS-QylStuwHSwdf-0K-5sgprmg2M6KMfk5qvHv+FkGyV3SkHn+orSlxq3tb5$d0BBBkp2FvIn-fIf7bsdOPHUrYMD8Fpd823VC764oc7Sei5xma+nDsHxtrKas+s3tMM+wY4ZHa4OH7uReYU+Brmi8ZkI1vuR49jLO7RQeGVwMMhSg00a$nX6u8S60jQY8S-B1P4ba2QMliZwtviMK7bORcuZog0trmBjLk36egbH6zATXLhezQrfPbVC3shpgzKW3I+bCV+kAgRC1zvDmDZTMePM1qS6$CSzsPOen3iyyKENwa7Zm6$FuE0TNEerd0n710olm0-UACIFpMtLr+f-1gGeD$vCUwzRU+AG$qcRxRPlvunDC4U38G-SwZuLDerxvRo6IDltVsqeseQq7nvTTv$Sxm+YKgj6u4Xaagk3bmvY3QUvxIc4gMsdN5l0HX3IPXOOavMEauxVWqVMjaG7ztA$agtdf32sHCKvGl79mFHk+r6zhwPbhAw-4Qf9Vlnpb0Os46d4EQOfWDUM5EtM2FtfxeETQjn-IjhomyOUZFzQVE7lS$6X-MllIuQlwGBVsCEHpK0T81TvgVOS$mpm59eF9+9LmyTGh0ShX8n2hzDEG9hc32BF29zzQ-fkAX-jSrQvwK-C4Bhb3-pSgZzPK0KFdFOLPZHAA0OhtxV2iYiaejbtSYUjN2ptZ506$wkWpTD6DwbIYRioWArbIMjf-LS8qbd0Odm6A16$ITj+4p1OePzLNcz3d1z9rDtap6MtmSNDb$R2t3b538E4TMVum5VG241Q$yAofQawjLQKG7ghtzhPy7xdoDO7rzHwgystgn1W1Vvv-MfpZz32OXIlNiyhgQ9sRRNYxhhu2gfZzUpg4a6y8OBPePs6urHrDHT-047qvO6Le8CWDY3XpM4v+e6crPHSdXMyBoKL1g7lw7vExghDI2CiUdf+cISydRAcztepNkCNVxE1i7yo7u4M1Q9xECbsn-$cpZhM1slSgZURPOUYHPqWmXK$y-r1vmW7jfTK-l+0Ad7O9DvYatkAmtchV9u-UGaESrWE7AELMTUmUjvjViI-DN9yW5dzGkxE+0kFTR+FDkDaK5M8pjjS$gGSHMPAaQ5SM7Ov7C9t9Y168ZpYdR-RraTA7uoOUccil5URUu17i0VCmzo6TvRS9eahReOWEydD+m5bRTxlgMy8bY28GfO6kd9ropqBxjiHV0+NGoH1B5K9RLAPtgrrGvqclIpEGCLIIwqFue+4PrWNlyedcydoMiUYalsEpPOhwL29e1qygSnE8T-QS4HnikQ2AaAfhUkgyDxZ+p2XSl$LRkgH$HYdZjRZqa0$Hir8rv6e1H$fy0YP7fgFRu5qQvPAzG+vUaMfmV6$dDChkcZEI-HiP4nXg5+pjiI1EHPLFFBBEm+2yybPsxm6QVpBp6ASPFhhi6i2XUwV4v+p-X$yw6cH$oauUBEB2KOf76VEiaSOD3-8-D6aTIV6N8hEv86SQnn66Qc63Yb5Ueh9Apj8OK+ags-$M2U+ZKzc$A1dUt4AcUqZrf7M+Li4mv99NlPw$evx4pqIVBGbgd21oOzybYupXl22iOBq4b7OOUxjGaKKNBlrgce0nfC3A$LKWlijroZ8IpZ7SrFgEHTZ0QH4Feb4ZVqsGLE3oLrUN+Bpu8rNeoBToMfP0OwQYyQP5mSTfEbHjaX33qGBEdxAar3huOLSmSDBO1aBUmyC14iqk09eoo0tgMnK7W8LBjE723QBHEU-OfeG8Ex5UjPlnHqxL$EdNW9ciSzfeGTmOa8sqnULTwSCk-KpBhWCg3KWk7K-9WXVs41Va6CiV$BhD4ARBxpGtaO1j42RDUsFAG59E1sQ68Ygog$vQYN6U9rXxjygeRfin1tX54PNo+QsO0XFUZ-50G80TGs0TGDDrwnvpPVlgNmWRWVSks59Vl3gdH5eAF9Ew+UQRB++TrtYVrQXuqFKvGUZyxe7DQLqe2jUSv-p3siwbQiuBnkPsI2K9kA7X3ZbXPLZNo+uWCyegxWdxfpE9u8EOBiCQgdS7+1iF6DjS7mvSUvmhZ12zu$AX1bRcVXOVbMUB2FKGIXkntpNfvpngERfDNRIAY+IZuS0e6op6jX7KXaLvnZWu-2AiFGh6O2D7krIi4S+FrAtaUNmbqt3Ek3-Zck7Ky2cFw7rRPXgMABdrHD+yfpBU++zzPTRkXfuGnhqkQ9Uh43XqNGzML+Q7w8FdWuKwHqlE8p-H8rrjnznaPybXh5C16IDD5UgVISfbqz90-ANED7c9Wk42vynAkSmSQoA4UM7LaodRM0v1bq$Oto3I7RIes8U65QnsjYkaq2WlCpA+Pr2xDs5Ve6Yer-HHY77WOETsjqXauNF2hLoLj7rmp0hDy9XgeGeagIP+OKbOh-u4llQ8fuWia7aOph3RDcO3t0Ejb7j+SBOOM3A7jTrdabXDT0r3HzflqBn55Zn4ug8eOAFKT+Pygq$hd+U2a4ai3qZe1LA+sYzK6zw1tclBYDKaPUBxkm5fC99tLI4Tb1duRI7z6Hn$mTdympKLWV-Zxn7vz6M1yo-OVWeYuSkVkpNejZVzgiVZfZqC1hcT0Orx02BpUEhOYu3XWTyRey-OKGkiIkrDeG1qhMI4-NGUx8D2uEM2EmePccIC-W0L8Z1b2F8GwmBDOhWzLLkTiyOXhWdCAgkKwE2S6ATuoDLVAzAn3CU1gFGKbRQkwPrbDOQyxMuVlgl$rUFoS6CHLofulPN0-DbYuNKe$$8kAUyLzs0530SD2+t+jodmAtTEfHV+w6wNy6$EO4YAnSxTXSnbZP9BaG1KTIpYvbi7kgy7$nI$b5Fju9YOchSKeVbIjQlKImBA$U+Nkphn9EvPNon-GUCMVAVg$$QgRCvAAE6O$TM$tc16C+C0+NCY5Aici3a+Rcj60F$xUGVPmCeAWeP2Pg6nNY29i3RQ1x7e--f-C$ddw54xHavtFmCpq8N7ZuaaeWe9IqZYr4o8wV7Wn-uRnKb4ZA8Y3syCBUQk$+MrWDaPc-GzqM$k3EgIesel-kecLnTxhRyCWcAo8iB4kYvOv9xqQioArI58IfQ-r9wrp4aIeO-B0N0DAs$UD42eK92lEVNsfYqZwSxGyl2NSN-TUk$fl5ksMaxv53eALYnPdgMf462hibn68oteTRRvAQBphsCTa3D2xlEaMmW7mRaV$Gc9-L0zruU1s8rBEV4UZfOgmOMCDcWvc8WQSlUpG1lKboZj5AznemVTReQ4bIPqRpjn46eHXsC6P03TcUGylvCk+27oTf3Tkfu+aOlLkSvypFm0DhMMv0qKD-8DZzQR-wFHqiG$ZKM+a+uyftlBRvmHXdRHrfZfTWqOTFSj4U6idkFA7wewHT-cssAQUmzKsnC2Ziz2iWEZ5iqHph$WgrNwiPEDUQKaC86VfiyXl+d23Pk9SscQSbACw41VyhRyMHnxz$Mg1493vzKZy+1parp0mYwKz6hmS4HrK-$SEAz$Yv3Ol10iA00G4vYYKAXODq-bbRftRwIdxy1BpsdDAuoXoEdjRxCXA$UZ4RTb-xFubIC$0KOd5t5ggeq72GPREGB$WxfCMqXp4HTvu7c2joUrMxsWq8VlE1TUlbPjX0D6L7s5i+a-KsfvPFWPuTpNq7ptr7BS3CkSs6z4a7oN$IX00QKldgG49vYrz+UjUyRfLdqqBFxLdv4h1CD4zkReNoCbhnIsdWpxHub+ZFTB39xUz60zjRkXS87nuSwfxWowQKpPnLwZ1dWTmIQ+3K$zQ192DellIdxlhA3n-AGKXqzqo91z8Pt5EmuyfbrMHzg9TEAilGbxXwgqSwsYZGodOL1y6E"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:48 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncf-chl-out-s: ucT3N6N9sUroREI/rVSsZqBS7Sh44ZFxoY8byUpseKC6v953hV1V+/LbnRkhHt2Oe+WpeXq4tjsi6Rv8oqENpsBUdr/QWdawmQlwCF7Hx+1YNyY7OboDQ/+9xKX7CN955N+sh39/h6bgb+ts7ZbJBp4XYV6oHxwXDk7T7jw6T5YkLRGbgalHEI27JQn5+JE4iFJ6wdvYr5/KIYdlRy1F8v/iahx5XoHKUqo0JlFbia8eB/3yVkRMTuAzEjFWzWbiillGExr9qABRGX552yYArFWbNU0zKKIT8f3/ky9BR/X8DkkMs8o55qGy84gI2coPbvmgr9EAtpBWAxDxxYGkqqx3b7HsoJ3lOYI8VjVFRmO4mH7pru+GjDuk9icmJzvKDpmdEshwKryVuDFNbmAbSTwXbR3GOqJc4U9M0FN+7LjfT2TxQerMj7Fa6UAd9/tA$GGAJuVgSErmY1uUDFdBtDg==\r\ncf-chl-out: 4OlYq53rV9Cm+PP5dcm+g4iuGVpS2i2wDo+YNx3yStBZjld4LH/Icd5mX9gLjk/ugQRzvZwECuckM64HSDW/emeJLjR2oxAMDDFYsnPgV/WWzNA6TZGX+QkLioPrwwvHOJH6TaXvJlMamqhW4TvHlqLta8cASzNnMPSnxOQTiFQ=$T6UFPtJiiHXdcqDMV9oLjw==\r\nset-cookie: cf_clearance=.Bn.21QdOlSWuGjZaEXmTVA1THylJ0BbDfit6eNZAfw-1769633028-1.2.1.1-dOjR41VRA2a2UR0OWqNIM9CyrsH8C3cPCQKYgqqlmpvMfrUDrM9pmQwRLztFJHa6MI43F70le7hJp1UJxZWcFLq24x3AippO98LPjHR4EVmy8d3y4Amnq7NH.H0isQdOciFIZu_1eyzfwjNM2WEhlWqOqqwc2uXLtmN3MBu0aAoTfqL3Md59jDKVrgdU5IDNDFdyjvit9XqtBs_qwjNFjX8kuHWcQ44pmlyBvhA07Jc; HttpOnly; SameSite=Strict; Path=/; Domain=pekora.zip; Expires=Thu, 28 Jan 2027 20:43:48 GMT\r\ntiming-allow-origin: http://ephemeralcounters.api.pekora.zip\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=2DYePl4P0NngJaMQkEX8624%2B5m03P7f2JeXQ1uPhsVgUu6FJBOChVhdXo19unaY4q%2FyFo6qwKVFOzv%2BnHsXl0UU8csDpSE%2BvtbvRZvsbYP1AT%2FDYkFEEceNnpOhljg%2B%2BoPgIyRNrFG5sZQ4fJCMvh6Fvlg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9c5352f9bc2d2efa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=775\u0026min_rtt=492\u0026rtt_var=120\u0026sent=63\u0026recv=36\u0026lost=0\u0026retrans=0\u0026sent_bytes=73836\u0026recv_bytes=9566\u0026delivery_rate=43152317\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4080,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with very long lines (4080), with no line terminators","md5":"7b5520360e87ef24e1dd6bb33fd91e4e","sha1":"c6c6018a9cd0308c9286dcf8358ca5afadca23cd","sha256":"cf434b3e2518d37b3cac114bf692b44ca0c80516b3f63e89b4c189b5b9d99563","sha512":"e1a89b17df453829d445824be05ca5b6cce701b283ded5bf17209e4d951a5d18e718f4d1347b79367c9a07a6ddf531694a944b0aaf976cbfbd047c768d8b3482","ssdeep":"","tlshash":"72818e8d30f096379a8bc973d22492b8df73400aa4dd91691b15da9e26e1cf91c543bb","first_seen":"2026-01-28T20:44:18.803228Z","last_seen":"2026-01-28T20:44:18.803228Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":57,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ephemeralcounters.api.pekora.zip/auth/home","date":"2026-01-28T20:43:48.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://ephemeralcounters.api.pekora.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ephemeralcounters.api.pekora.zip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 20:43:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 25229\r\ncf-ray: 9c5352fbfb50dfec-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230146-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 2597736\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=rLNxZ1AicXRH9eyC%2BrQTF5OdqcKjWjIdfGjIR5jgcl%2B5xumYvmMR%2FKIxtNo%2BdVlb2oMpEym6C8RbYe80ysDc84HhMwbPiYUHhM3vlrrgx56Y4He3Ha6Vseci%2FLANDbW9txk%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":163873,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"94994c66fec8c3468b269dc0cc242151","sha1":"ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad","sha256":"62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab","sha512":"190194d1f30c8b6dfcb80f9afdb75625fa5418a52405d81f15d8019bbd92510e817b25a3a18feda27d2d1231fe3921fd88fe037e1fbb1ccd08f5fe5e4742ffe3","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM","tlshash":"c1f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-05T04:27:21Z","last_seen":"2026-04-04T18:24:50.442516Z","times_seen":21779,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":10,"receive":3,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ephemeralcounters.api.pekora.zip/auth/home","date":"2026-01-28T20:43:48.463Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/bootstrap-icons/font/bootstrap-icons.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ephemeralcounters.api.pekora.zip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 20:43:48 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 13832\r\ncf-ray: 9c5352fbf9d2b28a-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.13.1\r\nx-jsd-version-type: version\r\netag: W/\"184e4-ptHboTbR5gcHjbMAMHDqs0tR7FA\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230042-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 6610\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=gB0535EsH8S6rk%2BLQqPwjB46iyMw%2BDaUDzkDNppOqq3gFS9lxo5VmK3EFRjaHponUXfuMMJbBucN%2B1ga%2F480My%2F9K%2FshSsblB3w6vF6rkP%2FzNvz1%2FaS1f77TdqTZGmYj2EI%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99556,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"1f041c852155e417017372c978871d14","sha1":"a6d1dba136d1e607078db3003070eab34b51ec50","sha256":"004322721c8557331759bc6ddaacbb689b0f0715d688aec82bd056d2d5b5cc3b","sha512":"bd61eca743ee4f1c1130bb464e76d2ecf0cdb48ef21669a216adb886372aa6ea7f28aee2c7159d5f04667ab1bd82eee979a491215c6915c7c1495ac6cd6705e3","ssdeep":"768:vqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMZ:mOocm4FJwZ5ijINRDlIiw","tlshash":"6aa3efba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2025-05-11T00:31:32.601303Z","last_seen":"2026-04-04T16:13:18.204006Z","times_seen":1188,"resource_available":false,"data":null}},"time_used":43,"timings":{"blocked":13,"dns":1,"connect":1,"send":0,"wait":13,"receive":1,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/fonts/roblox-font-icon.css","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://ephemeralcounters.api.pekora.zip/auth/home","date":"2026-01-28T20:43:48.467Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /fonts/roblox-font-icon.css HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ephemeralcounters.api.pekora.zip/auth/home\r\nCookie: cf_clearance=.Bn.21QdOlSWuGjZaEXmTVA1THylJ0BbDfit6eNZAfw-1769633028-1.2.1.1-dOjR41VRA2a2UR0OWqNIM9CyrsH8C3cPCQKYgqqlmpvMfrUDrM9pmQwRLztFJHa6MI43F70le7hJp1UJxZWcFLq24x3AippO98LPjHR4EVmy8d3y4Amnq7NH.H0isQdOciFIZu_1eyzfwjNM2WEhlWqOqqwc2uXLtmN3MBu0aAoTfqL3Md59jDKVrgdU5IDNDFdyjvit9XqtBs_qwjNFjX8kuHWcQ44pmlyBvhA07Jc\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:48 GMT\r\nContent-Type: text/css; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nVary: Accept-Encoding\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: cross-origin\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self'; img-src 'self' data: https://cdn.discordapp.com; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/gulpfile.min.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com https://*.archive.org; style-src 'unsafe-inline' 'self' http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://pekora.zip https://www.pekora.zip https://cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css https://cdn.jsdelivr.net/gh/AllienWorks/cryptocoins@2.7.0/webfont/cryptocoins.css https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css https://pekora.zip/fonts/gotham1.css http://*.pekora.zip https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/webfont/cryptocoins.min.css; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net http://www.pekora.zip https://pekora.zip https://*.pekora.zip https://www.pekora.zip/fonts/GothamSSmBold.woff2 https://www.pekora.zip/fonts/GothamSSmMedium.woff2 https://www.pekora.zip/fonts/GothamSSmBook.woff2; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/* ws://localhost:*; worker-src 'self';\r\nContent-Encoding: gzip\r\nlast-modified: Wed, 28 Jan 2026 20:43:48 GMT\r\nCache-Control: max-age=14400\r\ncf-cache-status: MISS\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5YOPMWbARxQbTuyqCWFemZ%2BWt9d3alxoZC5MGUL9oYP9kDQJXjFMIi9xPwsq47gQ3V12S0qqmSvR2oQoUBbvIBpbblcVQqga9R7aXy%2FxFzrQMgGAjOR8hyd1XalDdbvQ\"}]}\r\nCF-RAY: 9c5352fbebd72efa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":1816,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"ed74b69e563596b78c176cb5238c75bd","sha1":"2a3102d0adea7ffcb84d8bfc4bc2b5fb8c06f2bd","sha256":"cf4914285972beefbe3abd5d6a8dec114e41fcc1d5aa6580bfc86bea0ab79278","sha512":"0901f5db4d569ca1c4b96adb1822cdde410127aa916a35e19849ade106b6d020eb85a94702fff9e861cf58c16b3b92c18f42032a1132f81791ee36f2fc4d4c6f","ssdeep":"","tlshash":"1f312254618634923b308c59771a3a211f1d911b6a41b0dfb6acb138aff5ae603c03df","first_seen":"2026-01-17T22:17:55.94588Z","last_seen":"2026-01-28T20:44:18.80508Z","times_seen":3,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.542534+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":6,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/fonts/roblox-font-icon.css\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/css\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":39,\"pkts_toclient\":86,\"bytes_toserver\":5290,\"bytes_toclient\":97113,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c5352cb49b03181","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ephemeralcounters.api.pekora.zip/","date":"2026-01-28T20:43:40.789Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c5352cb49b03181 HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ephemeralcounters.api.pekora.zip/?__cf_chl_rt_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:40 GMT\r\nContent-Type: application/javascript; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nContent-Encoding: gzip\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=hKrd5Zw06FTMHnXzLfbPFMZrKpZwBmb6I9AeH4pJBPMnX47D8fFH8K5T6DQsG84t7d0EzmZU%2FsHzS7IZHtKFXL5R%2F4ANPjTw85DjxbXDBpbBGONs%2FgpGPwVH0ZxD%2FF9NIYBnfbECsLPCODKaHsj0fb5qHg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nCF-RAY: 9c5352cbfdd72efa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=492\u0026min_rtt=492\u0026rtt_var=246\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=553\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127407,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7aeb4dc29e486e13640e42cb67727798","sha1":"c88d278cc949059444eabf18dcab05034aa794cb","sha256":"795b0da855848bce19b8d50385ab8939e84349d11c043b8c2208ec265fe893ca","sha512":"d8b250866afae42cdcb1a7d398f2d56f17b622bf3f2389092f8aeb60e8aab0b159d5508a04a9f130b53183d20d26bb7474598925bd2c3aefd5f17b0ce35d64d9","ssdeep":"1536:UvufElbyvc4BwHXFaCEkXm4ww58tFAw/fWRikyBuxJk7nifES:UmMlbyvc4BCbNXD56tFAw/yeuwir","tlshash":"9cc3e88d79ee789413f650b1602735ceb2ba388434689d5eb60289d07cd5318fab7df8","first_seen":"2026-01-28T20:44:18.806035Z","last_seen":"2026-01-28T20:44:18.806035Z","times_seen":1,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":1,"dns":1,"connect":1,"send":0,"wait":12,"receive":4,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.802487+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=9c5352cb49b03181\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"application/javascript\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/?__cf_chl_rt_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":825,\"bytes_toclient\":1120,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T20:43:48.219Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"POST / HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ephemeralcounters.api.pekora.zip/?__cf_chl_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 2477\r\nOrigin: http://ephemeralcounters.api.pekora.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: cf_clearance=.Bn.21QdOlSWuGjZaEXmTVA1THylJ0BbDfit6eNZAfw-1769633028-1.2.1.1-dOjR41VRA2a2UR0OWqNIM9CyrsH8C3cPCQKYgqqlmpvMfrUDrM9pmQwRLztFJHa6MI43F70le7hJp1UJxZWcFLq24x3AippO98LPjHR4EVmy8d3y4Amnq7NH.H0isQdOciFIZu_1eyzfwjNM2WEhlWqOqqwc2uXLtmN3MBu0aAoTfqL3Md59jDKVrgdU5IDNDFdyjvit9XqtBs_qwjNFjX8kuHWcQ44pmlyBvhA07Jc\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2477,"data":"c44c235216b043695df8653df66f061fcc85593dc623693aba8c323d9b9e6204=bGxCJSvA47uP7p84wnxVXzjLZaWhbqrb8AHV7DgHOZc-1769633020-1.2.1.1-8l47gC8.pi6p45FOiEnMSn9tRyQMBdYRh3HavjgoDNJLBPkqWNkb1TWXIORJXY360Q1PPy..CSMk7znGnDD72qV8rQGHV1s8x7_2cN87_Rr9TtlzgZxIU7MFLj.3ga6NqA2QvNdOmeYfIouAclu2zzwKyfZ.Wk7T9zZPSa8XQ.wE3OZCjqWRVChDditG.qoa9wIFa5YDbHWcZs7cC2ifwp1vKbehyP1dt.uc6o45Tm_wSiBCth2b9Bt2444_eewzlloGamIgy7utGDUQ590SGyx4zm2VLFP_4a7Edy1XurKM6Y9N2jt0g48qGKxCGTI2cUq_1L.FF1ksaNUZBtF_krl5qqACLbbcNTAzNGfDcILQO3vA5L.lKznpJjQ1bfHAzupRp98JjtbXnRGsOlA.mI6fC4SnPNq0fTj0a4ysTQkJj8.RFVoxHwzMl1Sj4Q_ObhJg53mu_SejJOp.SqM3PciGiXq5F1qVaYMxC9ZSrpGrVIuttuIuo_QdqQKKVozcgoKkkcIalRFFbuoQBe8oxzOn2sh1.vZREki1.xhG7Ex1uftaQMpKeA0HiH4te26fIyEzRMhLH0sQYtfa3FHtbwLPkoj4eEwb4ghNYu5B57CAxGX5a.4iozBldVmk56A_nmOZH8Lcqbiw8mD_fpOBXO2a9BxjrUBlxG16Wzo_cXE_0YNlrwVQdLkobDN9BUrRHRIcMrJh4Sy6uXQjdNCqdVyOpBvNcPzlzGb0YqdUQAIt.V0dPP3U_DBqzepjQZELKezpYpaS34Sk4uquUSNDP_T50fEpkPd7K7Hb.G80AYNUyBHRtxcXu.obmjdSnGikh95kCS.9VRy6Qo7DlPhCGmIokzKsc22eMea4eEipZnr8ex76cDN3sStYn0aS5mtb_4CPzqCS3ljz1i0zxSjpAdIxnXOL14EUT471t4DpLsjfmuDLR2ZchW16idFO45SYaKfdRIeHgs7PcnuyFc1Xa6Jhm8yw1BvvAIMlHC4vtkIfLk2PkhuqCjyml8NOA3DJ\u0026ab7cd35eb778c920bf24f0e50f175eba072807fc473362474c31ef4bd232b58a=fkG0qnIgSRmM3zvKrVvIkScpv2YHUgOdOzJHzVnf7Dc-1769633020-1.2.1.1-8p7ntzSAPIrzEFJ6jXhH1rzl0J36Cys81n2Q03_qUBIKfDbnxbzPF8YhUYIiUHCLcgu4hzksHOYQZnPHDS6jTFJ_h8jOLou7lEueYjasfv9g77ZaaOqbWAj5Q6DUFUGk6Ojl8Z1lYFYZwea38lFyvDUSFBM3nJbPmBzpqO6nqkTd_8Ijc.27zigXSaM2pQCmhBIsI5_F3tKP4F7O6vluMoF0z1JAsBPEeqpSiuGOP8O78s3qrfOf.TAhW5RonynDrxWajPKOszhpfkb6ArnXg4pwo7nEBIiYsJB1PYPHzdDEJvdTD84waSpUMFW4hz41lyJ3mc9yMZd3NfP2ZuPjflTryd6kGtx6MtA2NRBYDE5iT6EdcxJ7VNymwnPD64XTsmu43fQt4anwhh_U66U215vRZ0uAkZ6NLXSxAi33zbCI9my_t_yOzv3JwYZZmzYavdHECL0QtAk_Ra8q4weYc724rQ_.Lblhx22jqeEDAymLT2kIdkwxMj50kFH.MEhnPeKaMTuR38mES_YBpPT7haxDiIaptoV7BNvruF.nl1Sg_kUrPno0FTTR7Whz.I9AbLVLYk_EhtQsByjkyn1gKihS9imoCkrnt3eInkdDWjDaJ5jUnbCeFGU99WNSb7hJ91kDe.yq8XOq.bhh3TvLI.QDOF.NH6wlXSMDRNuGoov7MknGmfmUk7VEA7RfBGSX9mhapVqD8E7pw0UXrLNcwFJTVXWG7K0dW.CjbJuGZaljF1jYYVb1gxmOIcgTWbPatbfByQ6ueV3HDgxkxys0tMOFp7_Ogjl0ohVWNCkEhVIt2dGLFiJ0_SIgs_zV81y5HCKybZIVkjTlBwwLtRO2za8kOZT2_X5a_SuqLCHgew8\u00264bef44a6bafcd2b08b0f9aa44cc667996007505e7115bb43cd637b8a59b4ca41=Xu2_FDvQVXwYDSf7zS7cC_KVqsbs9H8Lbqy41ljkyWU-1769633028-1.0.1.1-UNy6qqPG3Nr7VOtOyCw8o_6tkZLad3dlJgnL25cbsQ58ZhPwJDzlgNn8tZHXabht3EJ9vvH0.Sz_l0RroFN6mKhcqyY1p7zDEKxSq9shahJTv0ElFp1O_OzwHFAVjSxrbAeWXOWdkaudzJ1fK_7UFYucz6pnYycDbszsoxJRVUuAXTcSnsPb0GdDD.b8q7m_"}},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Wed, 28 Jan 2026 20:43:48 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nCF-RAY: 9c5352fa5e6d2efa-OSL\r\nAccess-Control-Allow-Origin: *\r\nLocation: /auth/home\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: cross-origin\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self'; img-src 'self' data: https://cdn.discordapp.com; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/gulpfile.min.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com https://*.archive.org; style-src 'unsafe-inline' 'self' http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://pekora.zip https://www.pekora.zip https://cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css https://cdn.jsdelivr.net/gh/AllienWorks/cryptocoins@2.7.0/webfont/cryptocoins.css https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css https://pekora.zip/fonts/gotham1.css http://*.pekora.zip https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/webfont/cryptocoins.min.css; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net http://www.pekora.zip https://pekora.zip https://*.pekora.zip https://www.pekora.zip/fonts/GothamSSmBold.woff2 https://www.pekora.zip/fonts/GothamSSmMedium.woff2 https://www.pekora.zip/fonts/GothamSSmBook.woff2; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/* ws://localhost:*; worker-src 'self';\r\ncf-cache-status: DYNAMIC\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=TuTid6gaZtQrPRkw4BdQ7tY26WpixO34jA23eYfIZsnuH8gT293MynhCuLM5%2BfbeIKaWDnYmWUaf54iN4IcUkKZinB5cliJX4iMYpeXfQsPBDsKzfKwlnGpbmJCS6EHKb6K%2FH2QLDVhI2859NgL0hU3eBw%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nServer: cloudflare\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=1255\u0026min_rtt=492\u0026rtt_var=982\u0026sent=70\u0026recv=42\u0026lost=0\u0026retrans=0\u0026sent_bytes=78964\u0026recv_bytes=13072\u0026delivery_rate=43152317\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10870,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T18:47:00.89111Z","times_seen":13342615,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/UnsecuredContent/Images1.png","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ephemeralcounters.api.pekora.zip/auth/home","date":"2026-01-28T20:43:48.468Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /UnsecuredContent/Images1.png HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ephemeralcounters.api.pekora.zip/auth/home\r\nCookie: cf_clearance=.Bn.21QdOlSWuGjZaEXmTVA1THylJ0BbDfit6eNZAfw-1769633028-1.2.1.1-dOjR41VRA2a2UR0OWqNIM9CyrsH8C3cPCQKYgqqlmpvMfrUDrM9pmQwRLztFJHa6MI43F70le7hJp1UJxZWcFLq24x3AippO98LPjHR4EVmy8d3y4Amnq7NH.H0isQdOciFIZu_1eyzfwjNM2WEhlWqOqqwc2uXLtmN3MBu0aAoTfqL3Md59jDKVrgdU5IDNDFdyjvit9XqtBs_qwjNFjX8kuHWcQ44pmlyBvhA07Jc\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 12113767\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000\r\nETag: \"1dc1544aefdfd67\"\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PDgVLMXHx1zbM2KW8JdwU0MmGu621Qs9mUPaaEPllIBL%2BZIcKPhjJoe9pHwpZSaOSBtCQDlqL7Cw%2B8QsuRzgkdq9B%2Bz2FUdNz2IBbA6v%2F0jtagjuAivVeNrzbB0wgd7S\"}]}\r\nCF-RAY: 9c5352fc6d882efa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12113767,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3698 x 1935, 8-bit/color RGB, non-interlaced","md5":"6ac5be97bf78c3ed04b2f275b1fe6070","sha1":"4fdca0038841e6b5eb644a88e6b278881de21b82","sha256":"90236d40573532394ab0fa1ce20e723b99ab8ae42c4957b947c9980c2214ec68","sha512":"62d90c5cdaf1de7f71d1d3314b302ff9ac95f2c4feacf70c5b76a43b291cbd6ee6bef2df19b84f88b7ba596c13ef706a04e3b24803cddf64e77bc8785e427c11","ssdeep":"24576:PxRYxnpetLk0IjWvjUjEnzpGfnn7Va+8W1ED:ZMpetLk0IyvjUjEzp8n738W1ED","tlshash":"662533e1ecc84f34e9db22b8dd07a85d586c74eb4233c5177250a6e87a2b2a915373f1","first_seen":"2025-09-21T20:47:54.490345Z","last_seen":"2026-01-28T20:44:18.806858Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1089,"timings":{"blocked":75,"dns":0,"connect":1,"send":0,"wait":85,"receive":929,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.628372+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":7,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/UnsecuredContent/Images1.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":2235},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":42,\"pkts_toclient\":99,\"bytes_toserver\":6224,\"bytes_toclient\":112884,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/UnsecuredContent/Images2.png","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ephemeralcounters.api.pekora.zip/auth/home","date":"2026-01-28T20:43:48.470Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /UnsecuredContent/Images2.png HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://ephemeralcounters.api.pekora.zip/auth/home\r\nCookie: cf_clearance=.Bn.21QdOlSWuGjZaEXmTVA1THylJ0BbDfit6eNZAfw-1769633028-1.2.1.1-dOjR41VRA2a2UR0OWqNIM9CyrsH8C3cPCQKYgqqlmpvMfrUDrM9pmQwRLztFJHa6MI43F70le7hJp1UJxZWcFLq24x3AippO98LPjHR4EVmy8d3y4Amnq7NH.H0isQdOciFIZu_1eyzfwjNM2WEhlWqOqqwc2uXLtmN3MBu0aAoTfqL3Md59jDKVrgdU5IDNDFdyjvit9XqtBs_qwjNFjX8kuHWcQ44pmlyBvhA07Jc\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:48 GMT\r\nContent-Type: image/png\r\nContent-Length: 4837713\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccept-Ranges: bytes\r\nCache-Control: public, max-age=31536000\r\nETag: \"1dc1544ae0cfb51\"\r\ncf-cache-status: MISS\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qKKeXzPB5U953FIiq4s%2F%2BrePyhrBMObt1t1ZWkTI%2FfCnk1HxS45UNHVh9Ee9vrcNlWNVX5MOecARn8ek4Rdk%2F0PEq5HAIHBHF9Atw7Tgwb0WPXRFbu3%2BY67FEesKjknx\"}]}\r\nCF-RAY: 9c5352fc6f2f4e4c-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4837713,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3698 x 1935, 8-bit/color RGB, non-interlaced","md5":"4cf1ac93615c80c4d08c986d4c04b5de","sha1":"1c4c25a754b8971d5759a79861305544d22a3bdd","sha256":"b9ee908e1b4528ea1db0bb8d13358f8292a7cfbad4b8621b760a969339fcf412","sha512":"49a4522fde3abd4f853f10df0a25dd8dfedb64b08e8a619f7750ab2e0b1233b08374bf76fbfa648ad9e38be3a29ede6ca1441093701b065bfc94b69657db5c30","ssdeep":"12288:W0GQD17imgrzAvBJZ2QkEvuAKE3W+FaKEaGqcDcn/ZzDodpbQ4i5ACq9X994Qg1B:DanAz4NCuI3WOaK8KN0LbyAx93gNbzp","tlshash":"08253325d78ebcb811b54b90c06886003870fa6f36666bdf0644aba8753d53fedc6e4d","first_seen":"2025-09-21T20:47:54.463183Z","last_seen":"2026-01-28T20:44:18.807685Z","times_seen":4,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":74,"dns":0,"connect":1,"send":0,"wait":137,"receive":201,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:48Z","timestamp":1769633028,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":58696,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:48.635780+0000\",\"flow_id\":672585251834881,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":58696,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":58696},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/UnsecuredContent/Images2.png\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/png\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/auth/home\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":786},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":1008,\"bytes_toclient\":6196,\"start\":\"2026-01-28T20:43:48.543745+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-28T20:43:40.677Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 403 Forbidden\r\nDate: Wed, 28 Jan 2026 20:43:40 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: close\r\naccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncf-mitigated: challenge\r\ncritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA\r\ncross-origin-embedder-policy: require-corp\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\norigin-agent-cluster: ?1\r\npermissions-policy: accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()\r\nreferrer-policy: same-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nCache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nReport-To: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=Bb3dtOzq0zDvXY5hX7dKP6yRHBHz3iGZ6s5uCqw87lNQYM1hdtb0vNFqO0U8GiSstGD%2Buf5g0iLsB1VIUCmtnkgbzOIipEz395cRemRkYdaUXQbVzNHWBVHWtvf5tp8gHa6%2FaDdG1t%2BPHzInfK%2FKypVKug%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nNEL: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9c5352cb49b03181-OSL\r\nContent-Encoding: gzip\r\nalt-svc: h2=\":443\"; ma=60\r\nserver-timing: chlray;desc=\"9c5352cb49b03181\", cfL4;desc=\"?proto=TCP\u0026rtt=448\u0026min_rtt=448\u0026rtt_var=224\u0026sent=1\u0026recv=3\u0026lost=0\u0026retrans=0\u0026sent_bytes=0\u0026recv_bytes=417\u0026delivery_rate=0\u0026cwnd=249\u0026unsent_bytes=0\u0026cid=0000000000000000\u0026ts=0\u0026x=0\"\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5503,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (5503), with no line terminators","md5":"83f762b85e5a45de14d7711c0016cae2","sha1":"ce9405cf930496a2c623c33f6afba57ec077bb68","sha256":"d20c0ca6522f1318e6e8a4d9c8f8a10fddd4bc3a95e3872559e907ba9b8dfb7c","sha512":"a20c05b1d4562fde2918fbb9e36ce26f906fd5a477cfa83f5c8707863980990eb531c02f3113abced4131e25dd1b25d99764b9b84f79d88be71f5b6a65746a65","ssdeep":"96:PNybXZtIEb0EFW87IbZmGPfDVeCPylEJ1Z5SC0r8YkshYzueh8X0mw:PNadB2l3DVeOyyZr0r8vs2y5w","tlshash":"2db15cbf5c43502bd6b717e6806b73c86215d066df158265e870e50cc6dee4e816a2e8","first_seen":"2026-01-28T20:44:18.808241Z","last_seen":"2026-01-28T20:44:18.808241Z","times_seen":1,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":2,"dns":2,"connect":1,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"172.67.144.192","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":41164,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.693593+0000\",\"flow_id\":239107087030989,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":41164,\"dest_ip\":\"172.67.144.192\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"172.67.144.192\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":41164},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":403,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":3,\"bytes_toserver\":689,\"bytes_toclient\":1654,\"start\":\"2026-01-28T20:43:40.678605+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"http","addr":"ephemeralcounters.api.pekora.zip/favicon.ico","fqdn":"ephemeralcounters.api.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://ephemeralcounters.api.pekora.zip/","date":"2026-01-28T20:43:40.812Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ephemeralcounters.api.pekora.zip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nReferer: http://ephemeralcounters.api.pekora.zip/?__cf_chl_rt_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\r\nDNT: 1\r\nConnection: keep-alive\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 28 Jan 2026 20:43:40 GMT\r\nContent-Type: image/x-icon\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nServer: cloudflare\r\nNel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nAccess-Control-Allow-Origin: *\r\nCross-Origin-Opener-Policy: same-origin\r\nCross-Origin-Resource-Policy: cross-origin\r\nX-Frame-Options: SAMEORIGIN\r\nX-XSS-Protection: 1; mode=block\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self'; img-src 'self' data: https://cdn.discordapp.com; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/gulpfile.min.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com https://*.archive.org; style-src 'unsafe-inline' 'self' http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://pekora.zip https://www.pekora.zip https://cdn.jsdelivr.net/npm/bootstrap-icons/font/bootstrap-icons.css https://cdn.jsdelivr.net/gh/AllienWorks/cryptocoins@2.7.0/webfont/cryptocoins.css https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css https://pekora.zip/fonts/gotham1.css http://*.pekora.zip https://cdn.jsdelivr.net/npm/cryptocoins-icons@2.9.0/webfont/cryptocoins.min.css; font-src 'self' https://fonts.gstatic.com https://cdn.jsdelivr.net http://www.pekora.zip https://pekora.zip https://*.pekora.zip https://www.pekora.zip/fonts/GothamSSmBold.woff2 https://www.pekora.zip/fonts/GothamSSmMedium.woff2 https://www.pekora.zip/fonts/GothamSSmBook.woff2; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/* ws://localhost:*; worker-src 'self';\r\nlast-modified: Wed, 28 Jan 2026 20:43:40 GMT\r\nCache-Control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nVary: accept-encoding\r\nReport-To: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u6d6ZCNJ%2BtOatbv%2BEeIVtGCa3o7vJrli1W19Uw5JfLv%2FNnkgtxzLuUM7W5QuScaAwTXbeVMOEMlmTF9U58J4Q1I2%2FLmnka3xgm2pF%2BnbfjvPrUf6mOayB%2FOotkLw5Nq5\"}]}\r\nContent-Encoding: gzip\r\nCF-RAY: 9c5352cc1e372efa-OSL\r\nalt-svc: h2=\":443\"; ma=60\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"hCaptcha","description":"hCaptcha is an anti-bot solution that protects user privacy and rewards websites.","website":"https://www.hcaptcha.com","common_platform_enumeration":"","icon":"hCaptcha.svg","categories":["Security"]}],"data":{"size":15406,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"677c40e1598f3740487c46fbc7cab9bb","sha1":"ba68f81e693de00e67877d12fe393c4636a7bb43","sha256":"5aeb4fa5ddd1e3c0e37c273478cd09f8db1315d09efad31eeaab5dafdda28b0a","sha512":"ab592e1a11d008634b693bda8d7e3841f20e8ed6dd8c5219e10a78e583410b4beef049e0d2d671c69f86a68aa2b61b3174c2a668204fbe41bedf1f657a76cb28","ssdeep":"96:Qis99Hyw9QNUv+fNRpxOsxJ5inKLm1VgaUyPGXOgAYcfnges8a86ujpflvvwfZeE:QJ9hfeIXQ5mgA3nhq0jHvVEd4","tlshash":"506207a7b306560ce93f5b7cc107a821a03a6d251873611192bf771b24336b7d6be1a7","first_seen":"2025-09-22T16:57:46.924306Z","last_seen":"2026-03-04T12:57:45.925627Z","times_seen":6,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51364,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.883458+0000\",\"flow_id\":1169732010832201,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51364,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51364},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/x-icon\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":6,\"bytes_toserver\":661,\"bytes_toclient\":5993,\"start\":\"2026-01-28T20:43:40.848201+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-01-28T20:43:40Z","timestamp":1769633020,"ip_dst":{"addr":"104.21.95.120","port":80,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.45","port":51358,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO HTTP Request to a *.zip Domain","source":"{\"timestamp\":\"2026-01-28T20:43:40.883197+0000\",\"flow_id\":883004289059878,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.45\",\"src_port\":51358,\"dest_ip\":\"104.21.95.120\",\"dest_port\":80,\"proto\":\"TCP\",\"tx_id\":1,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2045975,\"rev\":3,\"signature\":\"ET INFO HTTP Request to a *.zip Domain\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.21.95.120\",\"port\":80},\"target\":{\"ip\":\"172.18.0.45\",\"port\":51358},\"metadata\":{\"confidence\":[\"High\"],\"created_at\":[\"2023_05_31\"],\"deployment\":[\"SSLDecrypt\",\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2023_06_05\"]}},\"http\":{\"hostname\":\"ephemeralcounters.api.pekora.zip\",\"url\":\"/favicon.ico\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"image/x-icon\",\"http_refer\":\"http://ephemeralcounters.api.pekora.zip/?__cf_chl_rt_tk=9_d.0jpKzzNQUZ4i3tWu9HEHdKYjQx6zGMWkbxbYWdU-1769633020-1.0.1.1-buiRMYOt2AekJwRKofa.hll8eFponrV3SauECh.7Mxk\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":200,\"length\":6194},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":23,\"pkts_toclient\":48,\"bytes_toserver\":2590,\"bytes_toclient\":62823,\"start\":\"2026-01-28T20:43:40.789542+0000\"}}"}],"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-28","alert":"Sinkholed","trigger":"ephemeralcounters.api.pekora.zip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"challenges.cloudflare.com/turnstile/v0/b/d251aa49a8a3/api.js?onload=cAdz2\u0026render=explicit","fqdn":"challenges.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.18.94.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://ephemeralcounters.api.pekora.zip/","date":"2026-01-28T20:43:40.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"challenges.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 19:12:58 GMT","end":"Sat, 21 Mar 2026 20:12:54 GMT"},"fingerprint":{"sha1":"DA:45:58:DD:B7:34:05:65:E2:26:69:9C:69:2A:91:C3:DB:C6:80:5E","sha256":"BE:E0:7F:BA:DB:DB:66:EA:EC:1A:A8:D1:E5:7F:8C:DE:5B:EF:55:8F:52:90:0D:D5:42:CE:5D:A6:B4:21:39:FB"}}},"request":{"raw":"GET /turnstile/v0/b/d251aa49a8a3/api.js?onload=cAdz2\u0026render=explicit HTTP/1.1\r\nHost: challenges.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://ephemeralcounters.api.pekora.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 28 Jan 2026 20:43:40 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncontent-encoding: br\r\nlast-modified: Wed, 14 Jan 2026 16:37:41 GMT\r\ncache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: http://ephemeralcounters.api.pekora.zip\r\nvary: Accept-Encoding\r\nset-cookie: _cfuvid=7xNzFk9.NT1n.biAQaK5IefzsxwCR9Ia86FJTFsdnYQ-1769633020879-0.0.1.1-604800000; path=/; domain=.challenges.cloudflare.com; HttpOnly; Secure; SameSite=None\r\nserver: cloudflare\r\ncf-ray: 9c5352cc6ced56a8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50453,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (50452)","md5":"8a7db0e0bae22d940e720d06abf548f7","sha1":"e68beaeb9b7b3aa74a922a3df2d7294811b62e72","sha256":"1d8e9927430ea86701daa3074746758677a012f2ee4196ce60438b4a526ac10f","sha512":"d7106b476dc2ca5f6f5fcf79fe9e69d72d27b12decbac13cf20bbec28fd7c5e72a920802eea9b15e41803252471548290533da353eec5e66ce9211854bb72083","ssdeep":"768:/Cofu2DMaHL9VAQepxn2tSv+1odY+0rOF8msKULg49Tr7+CuAUyG13PE0okbsO10:Q2gaHL9VAQepFbZdYlrNRg4t","tlshash":"37332a583196387267dd80e4617b63437325793af94ccc909827d92636acecad233f7a","first_seen":"2026-01-15T11:24:19.542226Z","last_seen":"2026-02-12T13:18:09.210194Z","times_seen":38367,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":13,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}