{"report_id":"568e1752-9edd-43e7-b07f-92275664be28","version":6,"status":"done","tags":[],"date":"2025-12-08T21:32:36Z","url":{"schema":"https","addr":"hub-sun.xyz/join/","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"hub-sun.xyz/join/","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"title":"SUN | Leading DeFi protocol on Tron: swap, stake, earn, liquidity mining and governance.","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T12:31:28.718761Z","times_seen":17918613,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"hub-sun.xyz/join/","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"104.21.88.33","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-12T21:32:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-12-08T21:32:10Z","timestamp":1765229530,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"172.18.0.5","port":35110,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI","source":"{\"timestamp\":\"2025-12-08T21:32:10.211931+0000\",\"flow_id\":1364606737587566,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.5\",\"src_port\":35110,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2051768,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare workers.dev Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_03_22\"],\"deployment\":[\"Perimeter\"],\"malware_family\":[\"Cloudflare_Workers\"],\"performance_impact\":[\"Low\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Cloudflare_Workers\"],\"updated_at\":[\"2024_03_22\"]}},\"tls\":{\"sni\":\"delicate-limit-9047.nnnnnnnnnnnnnnnnnnnnnnnn01.workers.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"0faf2a91198d40dbd58b9308f3fca2fd\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-65037,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":960,\"bytes_toclient\":3168,\"start\":\"2025-12-08T21:32:10.204142+0000\"}}"}],"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"hub-sun.xyz","ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-11-29","domain_rank":0,"first_seen":"2025-12-08T21:32:38.202746Z","last_seen":"2025-12-08T21:32:40.166119Z","alert_count":42,"request_count":42,"received_data":14583358,"sent_data":19020,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"delicate-limit-9047.nnnnnnnnnnnnnnnnnnnnnnnn01.workers.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":0,"request_count":1,"received_data":590,"sent_data":532,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.sunpump.meme","ip":{"addr":"3.167.2.120","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2024-07-16","domain_rank":0,"first_seen":"2024-10-26T01:55:28.756081Z","last_seen":"2024-10-26T01:55:28.756081Z","alert_count":0,"request_count":1,"received_data":464409,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"hub-sun.xyz/join/","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-16T12:30:59.144807Z","times_seen":744409,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/join/6fVeFLyyVk.js","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a91918f8af1d046012f7fc81b44946","sha1":"a7f84145fd11eb4ae52601170ae5335d0243813c","sha256":"cf2950d2094cd0ac7d2bd713ddb59d7b957b40c3a3134638f44597bf6e696755","sha512":"dbeda694d6e8fb079e4462b67b7b8af17a591387f329d2356ca6e6ed3f17fcffd8573709b6215aaa62c2e24db59796726819545fd32fc7530fc8ce46152780e3","ssdeep":"1536:sWEyENysj5cFAAsc5tX5gQICVHdmkVeEe1l:Y5NyasrDnXSQIS99en","tlshash":"8c938481b7c2bc8112871bb7b72b72e9f43a4ce87189448ee014fc58f5b9516e6e5a31","size":90913,"data":"","first_seen":"2025-12-08T21:32:46.791544Z","last_seen":"2025-12-08T21:32:46.791544Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/join/","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-16T11:15:46.769035Z","times_seen":237851,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"hub-sun.xyz/static/js/70.09d0a3ed.chunk.js","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.525Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/js/70.09d0a3ed.chunk.js HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:11 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-adbe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EOhq5svJfrLGyU4rBS33IGJzcsFyhDOmOJum0EGIfii584JGu7VSv97WbxV9Kb4ch8CaAcjZCNHxXHTIe77dFKCm%2F9vJemEB1r1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5faf683e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44478,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (44478), with no line terminators","md5":"b24e834febcfa587e1c8e9c2afd3db49","sha1":"87d787e6381c322bd3d926d678037591ee461da0","sha256":"bb869df6aaf19739be6805367a1534c5f45efe177b96ec0abad079bbf02b4e53","sha512":"6a3a0e3f00262f3dd33bef1bcd75364c3b52e77dd7d5968bf43a82485eeb4ee100ffe084a630877b93b493923bb3fbf551baa665e422a70db4486e9dc73b0fc8","ssdeep":"768:NwkVR2ery/yzk1eDUhUNYL11vwSj6BPhpM631qky5TptJa01cMtyl8EWtTwUmekc:akVCjkzYJYMgzU","tlshash":"1c13f9853152f46343ea05e5407f4617e23d19a8740e8448f67cfdca7c2999aa2bbe3d","first_seen":"2025-12-08T21:32:46.691787Z","last_seen":"2025-12-08T21:32:46.691787Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2342,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2339,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/sun_agent_icon.e4626236.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.836Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/sun_agent_icon.e4626236.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-58a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wVMeJVk0DEaIun3Bjzo%2FFZnA7tOD%2FGy1y2evREVw9IXUtMmmxTnSBuUtM1PslTy9P%2F3pQBhOn%2BQTM6up09o4cQJzVpXc%2B8PfCfOY\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb138950daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1418,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5f097b1c264580372e76e4203a22eeef","sha1":"1d95f2f5fea2a0aef600376449e99ff2d8f282ca","sha256":"73e7f3d043a8a5a4bd92318542736e89419cb8b1b8e806262ee105dcd8b112e7","sha512":"226a2870251ab021c934b4ac7539633bfe1a1a3a98722aaf622ef3bc441926787645e3ccb7912bed9e331f582b33a75971bba3b40cf22af23b34073342621cbd","ssdeep":"","tlshash":"f621edbfb29d5d65d124c39cf978e131605e2af2adc4515081c4ff4fb4259ce1cae580","first_seen":"2025-12-08T21:32:46.696338Z","last_seen":"2026-06-18T03:50:18.784852Z","times_seen":8,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/dao_forum_icon.fc0be6d2.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/dao_forum_icon.fc0be6d2.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-2f21\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pynK7yFMHOEaV%2FuwlnXGFJZWXuGmS2SY8f1mnrKbkpTTbOrks97cMeyciqGufz4xY6UccWxgB5UkLuSGKYUsDaaJ%2Bnb73WQaNWLo\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1489d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12065,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"58a61a1c33ca4edaf854520b9c180839","sha1":"ccd76f53084b7dd2ab79410003a437487661dd8b","sha256":"7a89c8a17fe208abc692c4552d3942f94975db7a10cd36ad0415718df284eecb","sha512":"62c03bfbbd74d0db4645b9a68bdb67d6edb243ff1d3c8d2a0f5d41c53d99de2952756ffa450b6788be7a02b1535083aec909998f8451ebf9380a7ba0b7e97225","ssdeep":"192:2C0uQUpzZ9Aom0KapaWn3ljnkb+11cidChohWW+KKW65y0FhmTio3sx:2CoMVHhVDN/hWXW4yPOos","tlshash":"724252e5b7fe52f0e525dbe4a020522bb6e318fe3b5aef4001ae79d7a51216c01ed4d0","first_seen":"2025-12-08T21:32:46.699337Z","last_seen":"2026-06-18T03:50:18.786431Z","times_seen":9,"resource_available":false,"data":null}},"time_used":508,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":508,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/img_default_2.7f784928.png","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/img_default_2.7f784928.png HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 315639\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\netag: \"692ccfa6-4d0f7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6NjMvOZZbbqFROXo1kulbhiuOMiu3eaoXr2%2BItHnQKqfUc4NlCYowXOABZJFk2oJRYyrEaHT7XfHM08NhkKzXa21kdjpsadeXBhv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb168ae0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":315639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 340, 8-bit/color RGBA, non-interlaced","md5":"5571bfaaacdfdaff0cfe34061f2fdb0c","sha1":"8d0a0c22348d61881d0240ef2d5540ddb72578ed","sha256":"bd4fa65d9a743d224ce51b1d9e6b8bf42a6e0cec0f887d01ee6c83532f013d40","sha512":"af4617eacc87d7063bd199c906975f39e03f5348784c9876e978bae43bce189b5349de86faf4c7c0c02989bce7c3ed985b73bdcd8d2b52d8d6d0e7a3f6dd091a","ssdeep":"6144:Du8jPk1MJxA6vcLeV4GyxupM5qrj40/hGNwGWCOrZGUYoCsaEbw5:K0PksVvcKVsXqrj4yAuNHYBEw5","tlshash":"f06423eb790c4d5811bcd1ae018bf7c88def5687f6ae823783601dcdd4369e5449a82b","first_seen":"2025-12-08T21:32:46.703625Z","last_seen":"2026-05-23T21:35:57.736788Z","times_seen":7,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":241,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/css/main.21c7276f.chunk.css","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/css/main.21c7276f.chunk.css HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-eb3b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BcPL%2F7MYgvZ6Y3SeeU5LrLalj%2FlJT2QUEDH8UAGxbBfT8KzAJL9q7n0acNcOX%2BzjJtJHC5vya%2B267jJgPajAWU9YHGvIp6IJzb9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5faf683a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":60219,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (60167)","md5":"03ed8e57bdcc4098486db0d603ee53c1","sha1":"d5434c3dc6d2632447d922bf27d2bd4a6f13a3fa","sha256":"21d44738d05c87d05656655727d0ca8451423bf29f70e1c2440a1f64f1aff67f","sha512":"a1ee689aa2375463adca9697c190682ad8a2e7882addd8dca8ba863d397063027d7eb923222508e1522e7d88ed3b29d8c72bc54b64eb4f0e4ffaa4410aae42bf","ssdeep":"768:ZubecRNx4MOWdwDh1j2Gnjt32cMYMN3xmhwR3F2s9Te51KKA1ZThW23YZF:ZPuFxmhw1F2swb2ij","tlshash":"b34395925af8102df86bcf7272d0aadc30959d23e71b89b5e5ad3478d2c6062273375c","first_seen":"2025-12-08T21:32:46.706553Z","last_seen":"2025-12-08T21:32:46.706553Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1301,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/black-close.ffa300a0.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/black-close.ffa300a0.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-299\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nzcUwWWTpV2I9PRpWyehm3oHDORiaGQ7GiIbfiyfw4SGUl%2F%2F6GQQJru5IT15Oz%2BFHOJeXLCGIkG0kGhUQNcC6uFm6gEm1b2f1FUi\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1388b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":665,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86ce5dcb6931d64b1edc480d6c7a749d","sha1":"f51080309d7dbcb48bffb8fe02b744902b85e2db","sha256":"cdc1903d0d3766c56279261fcbf6c0969a8b57eabf177b5a8d2b73488722c98b","sha512":"923dca256077c74b0f9e38b8b7af602aea7ec87a1cd8f0b6493e7f53b02684d971a860429292b9b488980ce67fc7b2da3f0f30d1fe6bf05971e716ba28e988f5","ssdeep":"","tlshash":"050126f7715881e1ec01c031640a4a75786a68739ad82094d1cb4d9ae2735df2bafbed","first_seen":"2025-12-08T21:32:46.709732Z","last_seen":"2026-06-18T03:50:18.763048Z","times_seen":7,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/pools_icon.71cc1cc8.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/pools_icon.71cc1cc8.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-1c4f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=78KH7sI8V0eUrS0ZDWhzJCJ%2FTmtDvLtEqUylPvSEDMlT0nC5ujwCxgkdijEMgvPDT5MqleLyQB2Q5HsJC7yitYHx5W%2FITG1jWWID\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb138920daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7247,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3d0516c5ff3f8db5372c1d1a91671f7f","sha1":"cbd64da191041e8abcac4002ab90e62bfdfa9bdd","sha256":"c790fd28785f50b9bbf1a144352be850ee9cd87877ae6fb8ad975fd10c9208ce","sha512":"c88e2274137570acf13fdc52fae048bb758868857cda4d2c82ae83ac392093a9bc24422fdc1b2ade525988442780b34903a1e6c9455621078860dedf22473571","ssdeep":"96:nFC1Hh9YFN5MvvTSNU/6bNotnc7qPC11e76pvqIdZQvLjVj3tQE1L/x7+owNcCfL:W9uTMeNm6Yc7qatpvzsdz37+oPib","tlshash":"12e163fbe7e8b5e0e10ae7d4d46580347aab34bb7742cb944394af96b81218c58ddcc4","first_seen":"2025-12-08T21:32:46.711653Z","last_seen":"2026-06-18T03:50:18.720117Z","times_seen":8,"resource_available":false,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/ico_link.b6f30d9b.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.837Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/ico_link.b6f30d9b.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-9fe\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3F9ybBKU6Z9wESS0of3wogN%2BYF%2BV%2FzzN4c6k%2FwZNp%2B%2BkZn4lw%2FKfppiZbkjp00GAZHQtvXEoglgvpoRSS%2B%2Bu2NO6z9XNeETLJDUa\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb148960daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2558,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d3f2da9b444f5260ea4ce0c8b43a1340","sha1":"582d240637c687e9a0f19ee9cd09e4567fd999e0","sha256":"5d82be6a03a2470480485583ddcba0f1663cb0d2ec9dce830af0aab0ec5eb58d","sha512":"721829627bcecacdbd4c8cb688ee8e8f8302860a076ad64a311212d7ce080f7873db91efd050c87563c0fe071bf144f087964c1cc528828fb9b0e361099e9879","ssdeep":"","tlshash":"e95140f7e7c495d09083afb1dd23ea91b67f7cb9bef503c95172a940a26a6d0c408e00","first_seen":"2025-12-08T21:32:46.71353Z","last_seen":"2026-06-18T03:50:18.728857Z","times_seen":9,"resource_available":false,"data":null}},"time_used":371,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/dao_right.89e4aeb1.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/dao_right.89e4aeb1.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-2461\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7D7M5Nl4jBmjc1I1qVEzWAHq9efprCBxMlkgeTGqnUupBVlbXvvq9AzvsFtS9ESqQr8FWV4zUW3lF0SqqroI7rZLKMvGbWNLkTEz\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1489b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9313,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e89e3871f7d8950aad36c9c27b4957f","sha1":"b16ca0864eb3bb9d550e3eb7c60fe07306d71475","sha256":"af99540288573e3125dd0089bb267958631e79f28f96cd954f9dee69caf9b01d","sha512":"80953d79c6f6fd60c5233cb51f160972f9474deacfa0493df5294cdd6b6e7f1eb3888f57fcb9f54da4d1d4a2cf0ca8eb2adcdc2d3092c79139aeb8b419da13b8","ssdeep":"192:2CAXBOF4qOmxp3tBRYOtH0Jb2Xc4dANmW7qaAq398FuVOiYO17rfKiRwOu:2CAxO5jxzYOtSbLNmW7qaHXVORO172iU","tlshash":"d01245eaf7d4f3d0a40ad7f4e82294b5333639f63e65d31586d99e74fa6016c049e880","first_seen":"2025-12-08T21:32:46.715217Z","last_seen":"2026-06-18T03:50:18.769617Z","times_seen":9,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/lang_dark.baf5b891.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/lang_dark.baf5b891.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-3a3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZ98D9fOrPOTasVHHUBZ08v4ItQjNtoscOqYpiLIPDxxMAMJpU7YOXtvQMw3gzvqkL4cJpMf219X5ioA18AlTi6BJZimJzecnPPe\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1489e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":931,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"485f777e7e261c559c697f0d212a4e5a","sha1":"86bee741d1140fc354440f835ecffe27552568ff","sha256":"c9f9c36d387e654341749099a0fae8eefb5e85c488a971779d48b19db241de2b","sha512":"1ca7e5aa780bccb2101dc2d21a01d90bd7f94492e82d9a39564b0f5589b1bf284e334a414d02aa3999aa1bdf0376d7937920ef034ea9592555970857f235edaa","ssdeep":"","tlshash":"e31140ffe7e492e093426f25e73634506a92617b4f0482d4c99189c1b6b05e9cb0cd00","first_seen":"2025-12-08T21:32:46.720672Z","last_seen":"2026-06-18T03:50:18.778901Z","times_seen":9,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"delicate-limit-9047.nnnnnnnnnnnnnnnnnnnnnnnn01.workers.dev/","fqdn":"delicate-limit-9047.nnnnnnnnnnnnnnnnnnnnnnnn01.workers.dev","domain":"nnnnnnnnnnnnnnnnnnnnnnnn01.workers.dev","tld":"workers.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:10.192Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nnnnnnnnnnnnnnnnnnnnnnnn01.workers.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 30 Nov 2025 08:50:48 GMT","end":"Sat, 28 Feb 2026 09:48:38 GMT"},"fingerprint":{"sha1":"11:7F:5B:96:9E:2B:E6:37:68:83:EA:64:13:E9:71:37:73:30:21:0D","sha256":"9A:6F:95:E5:1F:EF:4E:D1:A7:A9:D7:6E:FE:0C:AD:9D:7A:2C:34:40:09:FB:D4:6E:5A:53:2C:FB:0F:83:78:BC"}}},"request":{"raw":"POST / HTTP/1.1\r\nHost: delicate-limit-9047.nnnnnnnnnnnnnnnnnnnnnnnn01.workers.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://hub-sun.xyz/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 45\r\nOrigin: https://hub-sun.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":45,"data":"{\"page\":\"https://hub-sun.xyz/join/\",\"ref\":\"\"}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yAMHTjXQhBws6A0EjCWDeXdX%2BNQiy7v2CR0k3iv9Tewgd15PLfEt4xd1U7QZDAM5Wz3O9uERMfqgSeUFmBlBaXcSakC5LmfkY4oo3dqm6oDrZEabWtR2Agp1EWwNdifY5MFySuVAoYHDa6KEdnjei9dpdBHa5zSyqAA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9aaf5fb3ff7e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-16T12:31:28.718761Z","times_seen":17918613,"resource_available":true,"data":null}},"time_used":120,"timings":{"blocked":44,"dns":34,"connect":1,"send":0,"wait":11,"receive":0,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/css/18.a37b5033.chunk.css","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/css/18.a37b5033.chunk.css HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-26f5cf\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZD2AU5ZRo%2F6kcP3KnYcQVjYTfY6urplb5cbChKo2e0Lsv4AT5efi2qAl2KXjijsSutnVc1Empd91aXZxOGa63LvIziuWg4fEph%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5faf68390daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2553295,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8d45193bfbe1e87a7d705851e233c2b2","sha1":"fa419679e3d17ffcba0e739b4a44800d3f9c484d","sha256":"c8c6c6a251bca03c8f56f8085994ca74aa17e77c47fd734692c0e35400fd20f6","sha512":"35be89fb4bfb877cafb84607b4a81e82ab4f876b9547030e9f0cd57a2fb8fba5c48c56e2556ce5abaf09a5c948a9cc16d217cdcc351251542a500554485a62c5","ssdeep":"24576:2uArsut+qNdB92jqlTM2gCDbSZ9yfCCFF:VbQ8jcvFbS2","tlshash":"6b25d0766607afca7e76756238082ee56c04c4c7a57a9368fe4921bfd4cf7907628c0c","first_seen":"2025-12-08T21:32:46.727535Z","last_seen":"2025-12-08T21:32:46.727535Z","times_seen":1,"resource_available":false,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":283,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/js/0.92206afb.chunk.js","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/js/0.92206afb.chunk.js HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-87a39\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNdzXkHDH7UqMp54PkPltHTAY4LbKuvyvhcPdF%2FPlH%2FuSpYhZRMK81GknBhqlFaTI6ckSSoLxzvU9PbwcEzkTb%2FUqAWJyGBqo13S\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5faf683b0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":555577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"3e99a23c780027a77d55bd58f7a0785c","sha1":"e69b406e944484c8d1b5f7d13ef13e6600d554c0","sha256":"03c26f58d3a8c919548a19a5438676c0c58d2d7a47657bf898a7a589c01de406","sha512":"1cf64fc382f68c8b283a029fc733149ce0cf42889e1c1995b2418313e58aba8e5be78ad7d6049f91f07efafecd2c89a7ab5ae54f39bd214b49ab3a916b0a0e22","ssdeep":"6144:ejeFiW38KxQ4nG5Eerw20KVKKGDyEbo16Vli7MyLhaO/TsUoY71ru++Y5aTYoVzI:g81bGGfNDfo16Vli7MyLUiVuZd0N","tlshash":"76c43a987641b0a5a1ab41d640bf4619f33a3529bd0d8e50f1b6c9ce35ade88d133f2f","first_seen":"2025-12-08T21:32:46.737172Z","last_seen":"2025-12-08T21:32:46.737172Z","times_seen":1,"resource_available":false,"data":null}},"time_used":985,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":365,"receive":620,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/js/9.1a32b8de.chunk.js","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/js/9.1a32b8de.chunk.js HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-f2cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IFGU4Fo9oDptVg8iKkebK8pnxSTYV6n%2FiMLqdZRTapAVrA1G5isaa2h2ep8SlZVwwH%2BDDaVAdzX4NZ0wbZQfk3F%2BDpOdcJUyvyTp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5faf683c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62156,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (62156), with no line terminators","md5":"4b1b3e59bd65dd058cb22a2e1b748f35","sha1":"bae5151a1bd54c25f7bb7a774a71835fc23b571b","sha256":"986084bb2552646322ca54a6701b64afa291b17a1401deef1617eb2f39b2e12b","sha512":"71f26c5b6f8a515789823b95820cf5d1ebbd9a869051a87ff36e63f53f9bf308ec8f1188c28c5bf5c0053cca0bcc9bc1082329e8a7e3b8b1cce3ddf8f8886d5b","ssdeep":"1536:QfUSzwYgJgvvPLkHH1Te6A0shdpggIc7ntyJ19FkTwpIBzajgR1:iUSzwYgJgvvPLkHH1Te6A0apgg56STcq","tlshash":"14530a8ab6a1f4a58bda2295506f813af3f66444390ed219b175c4c47c5c40ca36bffe","first_seen":"2025-12-08T21:32:46.741456Z","last_seen":"2025-12-08T21:32:46.741456Z","times_seen":1,"resource_available":false,"data":null}},"time_used":622,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":351,"receive":271,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/js/10.c47c5e17.chunk.js","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/js/10.c47c5e17.chunk.js HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-78f49\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=btzCtlgaNktFqrAsDauOmWXTWmZMn5UPA6N5IlrjP6o%2B2a5nrg8lnDXNsepyDJ%2BTZobMWvl9mmpcDB0nr6VVamoalHQjOY8WjBX3\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5faf683d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":495433,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65461)","md5":"e728482d57fe23b38d83948ae12889aa","sha1":"d6752085faec8edbc1b787f4078288af1d2a67a6","sha256":"bc88d807a58fe78906ff9236bb1648e3a27363c9500d8f7a6dafd7f92ac0f6f2","sha512":"5146fbbaf7f6a018d5c07a140f4566b6eb45d734f635e1945c61ce052f95fb051ef6bab2825efa5d52f6bb465a09048435ad0de04536145104ade6e8c0930eb7","ssdeep":"12288:ANyREdky/ktgAyVtEs8x80Jz0QWbv5Gw3U:A+Edky/ktgAyVtEs8x8C0QmvW","tlshash":"e8b4c788b1d1f4e1029761a5403f150bf23a6c6a705eb4d0f366e9e5bdb888e5077f3a","first_seen":"2025-12-08T21:32:46.743131Z","last_seen":"2025-12-08T21:32:46.743131Z","times_seen":1,"resource_available":false,"data":null}},"time_used":433,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/logo.6a0faa8c.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/logo.6a0faa8c.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:16 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-2556\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWsspfgzbp9w6Ghb7eblMXakxi7VFeoBFHJwRMoq84U7hj0Hq0IgMX5OO4u%2FmpeFLwOpUJgAczP%2FxlkfdpV3qbJXThCSS44rp8Cc\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1388c0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9558,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e628495556d7227917d9686fde35f04d","sha1":"102706947fc50eca05af070b7ee3c3b443961175","sha256":"28e273e1a791d383c9fb67cbe546ba431ea856948482b86b81012ce0090c9038","sha512":"cee1480927b7f1430ff51f9385cc88dae6f38d2f4f941646f077171ae532a98def2bc0e170c484aa07693a6d9283d8b27027222beaba8f8c5ca9333114d79dc5","ssdeep":"192:mf/6sQPzoEjRUeRdtIPuwxg8F/rNPV6UIibjBNp6g:gS9jRUeRTIPuwT/r6UIrg","tlshash":"d21241fc27145278f12993a8eb1621b8993a38d09b4ae0404f657e7f6855c1f1cbf8c9","first_seen":"2025-12-08T21:32:46.745878Z","last_seen":"2026-07-04T07:47:28.354213Z","times_seen":9,"resource_available":false,"data":null}},"time_used":6627,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6626,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/dao_icon.33fef5cc.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/dao_icon.33fef5cc.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-d33\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RG1rZMO5%2BLw6gCo6Kw92QP0tUymPz5cDTSCYKqbFf92e40z5S1hOtpgWuvyDmDBwWhoyW4LvJuDuYxLpgfV5PpwkemcE0bngCC1n\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb148990daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3379,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"71e46a29067097979e021f15d99d36b7","sha1":"821b86ffc1f3df106632bf0d2a3403ddb33c11c4","sha256":"f4b663f101375303898a40de9272ded0258ed796b6bc408476d8007d146560e0","sha512":"3c35881469a1d0cc1f8dd6dc23c5ded227a3503d141a72017e970dd94d8d9a9d6ca8024c715e202bd6bff05a8331619f71dbfb4c79739d1b0a3474c8cfeb3c68","ssdeep":"","tlshash":"e56143ffe7c8baf5e005f388e924c03476aa31bda64797058384bf46f72599814dd8a4","first_seen":"2025-12-08T21:32:46.74925Z","last_seen":"2026-06-18T03:50:18.77514Z","times_seen":8,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.sunpump.meme/public/logo/TA8dfp_a8cihY95bXeU.png","fqdn":"cdn.sunpump.meme","domain":"sunpump.meme","tld":"meme"},"ip":{"addr":"3.167.2.120","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.866Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.sunpump.meme","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 08 Jul 2025 00:00:00 GMT","end":"Thu, 06 Aug 2026 23:59:59 GMT"},"fingerprint":{"sha1":"FC:8C:BA:C5:9D:55:9E:EA:25:50:FA:20:DA:75:78:FE:5D:42:70:46","sha256":"64:EC:A4:9D:3E:2D:07:C5:81:05:51:BF:A4:10:4D:1F:E8:FB:33:D4:C6:7B:3C:FC:62:D9:E7:70:95:DC:D1:A7"}}},"request":{"raw":"GET /public/logo/TA8dfp_a8cihY95bXeU.png HTTP/1.1\r\nHost: cdn.sunpump.meme\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 463686\r\nlast-modified: Wed, 15 Oct 2025 10:56:18 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-pump-original-filename: rf93n20xwjf-1760525045619.png\r\nx-amz-meta-pump-created-timestamp: 2025-10-15T10:44:11.415439Z[Etc/UTC]\r\nx-amz-meta-pump-created-by: TA8dfp8Dxo4cxhExUye57a9oPgv3Va9SmE\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\netag: \"761f11d63df1a96e13a4198ca85543d9\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3da6f6abdf7146387ea7a7f42136c780.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: CkDCm7qGcM2EC7MQQh3E372pFAOTJe92HGOIYfavPpVohxl7PXInnw==\r\nage: 11595\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":463686,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1280 x 1280, 8-bit/color RGB, non-interlaced","md5":"761f11d63df1a96e13a4198ca85543d9","sha1":"ace8213b1e2f3c2918d7e276bed9cc3ca688d153","sha256":"fb9bf2155bfc47b6cb3077dc5265d1916a9384a96cddc1696a579e36a0d04660","sha512":"f7fa6d47215737dae50ed2055f4c14f8e69b685db9007ee8051e396813b36bd235bd35e6298c4f9a1c022f8728b235c3ab027e2d41c71601d54cb5e6def2e49e","ssdeep":"12288:lJMZLiJkVDgHFNLLl3IwzIDXoFmLM5Cu5M2q:lJMZm4KrLdIwz4XoF/i2q","tlshash":"63a42341c2c5e14f698acd85ffb94b4138a3307a1aa6cb5cc516d4b7c26cf5c8f81ada","first_seen":"2025-12-08T21:32:46.754177Z","last_seen":"2025-12-08T21:32:46.754177Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":104,"dns":77,"connect":1,"send":0,"wait":28,"receive":22,"ssl":68},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/ico_link_active.e0137f3e.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/ico_link_active.e0137f3e.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:11 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-9f8\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2Gj5xMsMlKzzP4mbOrDbNmO4ydmovAgJsIXoEL3WqpR4daiYFtWLhiVhUOtw6tfNvWyghTHj6Kr9yki76X2zZ60jeZWZ%2B88GXRj\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb148970daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2552,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"159f77b913177f06023a8b37202cac63","sha1":"d3a63e399da85009f08e0b88bc8099b183afe682","sha256":"c9db2c3d35699d535506abed8a797188962d227bf7de4493aaf4b7abb79fe0ba","sha512":"236e4b72fcbfbd864850ed024e343ecabe9b4eeae1f035dafebe7a4a06b9e21b51ddbe0257575a9f058dbc3ad318c31d84fce23e20f2318ef1a720c55619f24f","ssdeep":"","tlshash":"5a5140f7e7c495d09083afb1de23a991b67f7cb9bef503c95176a940a26a6d0c408e00","first_seen":"2025-12-08T21:32:46.756701Z","last_seen":"2026-06-18T03:50:18.700035Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/scan_icon.798f8d4c.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/scan_icon.798f8d4c.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-8d3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRG4ATum%2F6IXgbBkcWkeSYEZJj9bqx3BmKKQhI%2BAXcsrJu%2FYPuI7yAr1ut5vTCQ55NFV382Q2ssfziQJ6zHAUpMPK%2B8KD88c%2BZOb\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb148980daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2259,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a8a215d988b6fd03bc782e67f25b65d7","sha1":"ca7bc16ff18c87e26caea3e4552c4dc23458e783","sha256":"06f769da283b2d6e4e18ffbca9bb6fc0c7fe2003042c21bc3642d80c08f37af8","sha512":"b33f23c631c38d7e41aefc47ede8e316c54848715687df39f6c6a229cc4f1f9a06f1867087e0d3f587c24a0efe8995da1b7abb903e5c2e690697bc8b54f0a45e","ssdeep":"","tlshash":"b241effd66dca8d0d00dd3e49929c172b75e2af22b88d75046d8ee99fa221ce599e100","first_seen":"2025-12-08T21:32:46.762121Z","last_seen":"2026-06-18T03:50:18.795666Z","times_seen":8,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/dao_gov_icon.84333c08.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.842Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/dao_gov_icon.84333c08.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-949\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgP%2Bgx6GnS04AiVFa%2FyTC61QxVCEWXWtjGFzOG%2BVZnJaBiiV0H8v8kh5YUONX01KYe3l98nK87qjPi%2FPi6ZTTDHHXq9%2BUkpuNSy9\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1489a0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2377,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"038c35c3fea011f93b56f1fc90ded06e","sha1":"6f696f00d8fa9208d5868b2d26a38cda4d1b9df7","sha256":"5412bb694f60574a22bb436679baaa3e949716190a55234140e272d7c4a3f18b","sha512":"662b688b50fc4580cc368500cf66e3cdad5b0f4fa58e5edcfa8e9b96ee2fa25a5c368a1622245de5123deccde60ec9792260572b3d4f1d27d79684e67b4846a0","ssdeep":"","tlshash":"7241216eb25cf811e305d3f8e996a4249a9906f799c1d940c3d6af4bf4216cf085e6d0","first_seen":"2025-12-08T21:32:46.764313Z","last_seen":"2026-06-18T03:50:18.703347Z","times_seen":9,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/m_2.8cfa5fd1.png","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.853Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/m_2.8cfa5fd1.png HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 178797\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\netag: \"692ccfa6-2ba6d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6wEYldp0x4Ach7Lv%2FhaTeQQZMpiVTFNUT973GRe8KiGTRvEP5BrzzsX7m3Q6Vsy2sdHitz9q42wYhmqwTGiwjdcc40SPb4MKxMOm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb148a30daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178797,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 360, 8-bit/color RGBA, non-interlaced","md5":"3faffd652f3df67c04b58add0a6e1867","sha1":"f512646d60730c36220a3f12f490c17367d8c398","sha256":"ae7ffac474975e3dd6d900553649cae752372257150dd0bcd6caca51f4c0dff7","sha512":"5ddc7224ace51d9fca741ed8a8ba1b62016a5bd18769993ecad755b3ad27324d2f5bb8c26ad1fb466e8bda1ff96a5b4e686d6c478ca992ee50ff05cc382ea0ca","ssdeep":"3072:TKPfZRJqMF6M7FHV2Bxm8yVHxbvvf7Qo+fGF5bDZRbv6IP7A/ExUxTeYAcLzq4mR:u5RJDx7dV2Bk8kbvso57r6S6ExUxTeY8","tlshash":"df0412d8779c6e484c2fbf11348f36ede8515902f1a23bdd8b27caa5295d601023dde9","first_seen":"2025-12-08T21:32:46.765971Z","last_seen":"2026-06-18T03:50:18.712714Z","times_seen":9,"resource_available":false,"data":null}},"time_used":416,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":260,"receive":156,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/img_default_1.19869b52.png","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.868Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/img_default_1.19869b52.png HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 278058\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\netag: \"692ccfa6-43e2a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SoxhhVmSwzsOBhrlmHrMpYLk3Al7TLE%2FC1w5h07wqaNwCMjiLBpyrZHzYnxHSk9UL%2FXiXfnPTH3vSqrKgNAQiXKtCQJD%2Bvveq3rd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb168ad0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":278058,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 340, 8-bit/color RGBA, non-interlaced","md5":"149c1884cafad9e5ab7be9516ef5bc3b","sha1":"38d6bce182645b1a1030ff5e14f80978e358e7a5","sha256":"9a644c844bb0be4c372babce084c14fbe410df60000586984526367fc95460df","sha512":"31beda34ca1dfee6b8e850cb19b9f68c05174485df5964bac522fe09ea578950207b2baf3b7ca1eda845979dd458b359a222bbc05fe99abe302bce0aa0c77db9","ssdeep":"6144:1UrwpwEduanFHC0ipZrH37rTwb28H7EYtFF75+r8:arLsYB17K28HIy/5+r8","tlshash":"ae4423ba6bfb0accc3e9401a2ed7444d5b65e4d0c652b60c6ff0259420c7cb1792a97f","first_seen":"2025-12-08T21:32:46.770789Z","last_seen":"2026-05-23T21:35:57.480412Z","times_seen":7,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":181,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/img_default_3.513885be.png","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.871Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/img_default_3.513885be.png HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 293096\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\netag: \"692ccfa6-478e8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DVTS271kHdUusUVQrji7ED%2Fl90bzLFL0Zs%2FoNzdLCsKRL56%2BA%2B7Wh3AwinKwqqjxYYIkpUlUnoqXle8FuBXiiPAImlBb3iW2tiXe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb168af0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":293096,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 340, 8-bit/color RGBA, non-interlaced","md5":"fed1688d551e0f1fdee04f851bcd844e","sha1":"165d52dcdad20b8614f2075b815842be33e0dede","sha256":"82937e3ded9940d7f78309571d62b487dc727f3f8313b10b6e1b83d5d4bc61c6","sha512":"a0da123eb0c5f1926bda463aadaa71643ba848e27b41433ea82539172bbf0ba145226cf81f9c7cfd0041ba505f8cc4de07420ab65e63e7b0217643865dcc074b","ssdeep":"6144:swRHODPLyQws+5h+q4pp9O60dnh2ebQlv1nv/9C4epVa6o5lWt3:wLFb2bvQl9nv/U4e7W5sV","tlshash":"0a5423bb9cedc6604da7727b59ea510cceef1918666c273b9038b3f0e2c2fc54056916","first_seen":"2025-12-08T21:32:46.772569Z","last_seen":"2026-05-23T21:35:57.453969Z","times_seen":7,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":220,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/img_default_4.8ebb5fbe.png","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.872Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/img_default_4.8ebb5fbe.png HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 221494\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\netag: \"692ccfa6-36136\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L7%2Btp6wJOFM2j5GGZMPXFu4DSzrtzGgqpi9%2FdQrSZNjISbBmmitZB8412vZxbu%2BblhGxsPV7smf6k%2FvJ%2FzFYs9tNRi4uWhVX1dSQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb168b00daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221494,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 580 x 340, 8-bit/color RGBA, non-interlaced","md5":"a614f75c624e8bf16f8f09a810a7a850","sha1":"4b46d6bed62d34fd498ed0e2dda400e8890651d6","sha256":"cfae8b2a5d010bf8a988ec7f7a55774b224baf68c4dc0b709a5b69213b04ad4d","sha512":"068e326dcc818a7fb392e4ee15c429f6e22c7d5d82fbc58b3c0edb28aeac5924adb9c934914868d0ea5d8d6590bdd55a87aab86ce56e459f342779f8a8f25187","ssdeep":"3072:2pINZ+OLHx0FeoMQgJb5R0LRRW91aitG/lMm3ZBNrVg21DnGT5Z/oT9mvK3:PZXHCFeoMPb5Nd0emPNrVg21DGNCRmva","tlshash":"d124236ffe088de5179ad9024684e31562719b10b1c93134db3d6b371ea8f1c8a25edf","first_seen":"2025-12-08T21:32:46.777706Z","last_seen":"2026-05-23T21:35:57.605298Z","times_seen":7,"resource_available":false,"data":null}},"time_used":451,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":189,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/sun_curve_icon.055442a9.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/sun_curve_icon.055442a9.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-8b2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d50o91RivXAI5Xmbf07Wdm6l6HOJ7yO8zKvbhDkz5OWf6Ern0Jqrmx013igFIDNkzcZeN69UnO9mpzdGp0rOVILLxe7B9My4njr3\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1388f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2226,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"10456954ce4d3781a86330edc69fd79e","sha1":"8a6fee751105d3a3f8f4ca9e858ea24e35eb8d95","sha256":"f6a7c611d4b334741d44ff7d96f084dfbdbedecbca76aaf050774784a933efcb","sha512":"4a6f2e63ab0135fa9645381f44b8d232f4d25ca13d473ce6273c417b2c209db2b418fa8b7dec49555f7431268b495689d6e38eaed279a2ff4a0e1eb8b237a728","ssdeep":"","tlshash":"3c41acbae3dcb590904ad7f4e5b48021bae731fd6aa5eb1142a4bf91b41148d68a88d0","first_seen":"2025-12-08T21:32:46.779625Z","last_seen":"2026-06-18T03:50:18.78975Z","times_seen":8,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/m_3.cc597bcf.png","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/m_3.cc597bcf.png HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 211058\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\netag: \"692ccfa6-33872\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fux7ZVLflo0%2B7f9ufm24wVKM%2F%2FAI9rG0oLwTpNyq0%2B5oLGeNGdM4A4WUbL3X%2BWDQjHZZ%2FE3loRLv5PcVdBmherPVEkhuj%2BL1mE8u\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb148a40daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":211058,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 360, 8-bit/color RGBA, non-interlaced","md5":"c4a10eb7db0aa3453a3a9af9cbdaa8ae","sha1":"691d3c8fe96b206676fd7e6845ac1def99ead577","sha256":"bf5d78b54641d8750f7e14523a00e19987f4e98b5fd8ad5a5097d0460ab428f0","sha512":"15854c04bbd96dba5e9d245ffe185a47f86b25071425375f4160f7c7aeb8f5b15dbd82c3ffea3a7d44f4e72886c3f57be9ac55196b7982b16eae21856f37f4a3","ssdeep":"6144:gU9AMZdR2bZelzjSAveKZlFnN+U4UNdSM2r9:gU9AM8FelzjbvekFnAU4M2x","tlshash":"0d2422ef2681c4c228d8e2d5afa5c106877b58f04b96ad7d950724dcec58bf17439872","first_seen":"2025-12-08T21:32:46.781285Z","last_seen":"2026-06-18T03:50:18.714413Z","times_seen":9,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":257,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/m_4.21cface0.png","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.856Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/m_4.21cface0.png HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 188179\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\netag: \"692ccfa6-2df13\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FQQHtCMgFFVgNkW0h7wXAjFf5pz5QjqZSHSNEzKwu%2BszTezjquCQaocQrw0g7hqTBiol5T9P6gOyIMIolHmdFZWNs8DSsU8KW%2BRU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb158a50daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":188179,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 374, 8-bit/color RGBA, non-interlaced","md5":"d7d32221294cb1cc14d5070aa499ada1","sha1":"731700df1a280e7fe4a70ff3451c006c0ff8f178","sha256":"f0aa57c47e3e259c331b86e2bd18306c1048a48e3c9ba66ce6d5b48f7fa4baba","sha512":"2799dfeaadc8d353f0298aeae6485a6c440fa14de55332ff5ad50da172f318c695458874fe4bcdde6316b6adf146f7ce50766878651ae84ad879c4bc43679dc7","ssdeep":"3072:v8UYALVmaVv0pAWDoXIfxJz9vaiWOnY2gmWMpcyZ6L3O/8t6NT3smSh68S:Qwv0xDvDWcWMKC8tij1So8S","tlshash":"f4042351c0d8fc17d383a71326244badb840a4cff1aaf459937b1625ac9a0ab477e4d7","first_seen":"2025-12-08T21:32:46.783701Z","last_seen":"2026-06-18T03:50:18.759172Z","times_seen":9,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":196,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/ico_down.d30164d6.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/ico_down.d30164d6.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-f7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=13Vv%2FeRXVz5gom5YMDo9roeBjLcow0iEDBoLq7ozP%2BOE13%2FA0fwZT8vY5aW4zsdDLrftB2NNWZF4pKu3lKPZuOHOIyJ%2B4e8CCTn%2F\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1a8b80daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":247,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7d11e09bbfb8bfbf8bd9f0062da81b77","sha1":"35db04c61e999e92c5cc1260b9b303526d17f684","sha256":"ba2a8d140668164b2d6c583e665cbb79286039ec201d7f09da46fe1266139fdb","sha512":"c30e6599c78cdbaf91d4e8d0327b767abc471135669913cc6b5201acc02405474882d9a7708b97541b3e36e31bde8065cc602d9e73b3f5fbf5fb87994b0c27de","ssdeep":"","tlshash":"5dd097a7230cdd2cb1314c34e312323900f620a38fac6084c6622130e1c22df7c376e8","first_seen":"2025-12-08T21:32:46.786411Z","last_seen":"2026-05-23T21:35:57.47373Z","times_seen":7,"resource_available":false,"data":null}},"time_used":247,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":247,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/bg_bottom_0.620f99d4.png","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.874Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/bg_bottom_0.620f99d4.png HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/png\r\ncontent-length: 160834\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\netag: \"692ccfa6-27442\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=63OBIPz6YveBvYIeO8M2rrIqByAhZvd06iFGGhQBmoOPCnzIppkBfOD5NbVvHToAXrZfVQZFEz5ihy%2Fl4mYa272rCHRBmai8WN31\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb178b10daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":160834,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 3840 x 1046, 8-bit/color RGBA, non-interlaced","md5":"8b5cdf436922630985be1a829700ae73","sha1":"686d04631b71059a616af467e8577152d3fdbc33","sha256":"9f858aad51797b0c7eb5addbc43a7507bf52be4e0943ab690193d56b25f4c4e7","sha512":"7268ccd5a8f1111e34d6e568f9a4ca1bfb6c24ed13b2dd45f1a97120233eaee8c02d98e2d8a57ca5832ab98f38585bea861d6b1fb647bd482ecdc307c0611dc3","ssdeep":"3072:Scsxxdlff8dFXfoaigV6NafudOcE5CAMiDZvY1SuBRF8+:rO3lff8DXga9gIRsoZv2Sw8+","tlshash":"5cf312c6a7860ca5d10a3fbef79ef60ed46c80a5117d235785bcb726839b250d18d8cb","first_seen":"2025-12-08T21:32:46.788052Z","last_seen":"2026-05-23T21:35:57.519916Z","times_seen":7,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":177,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/favicon.ico","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:14.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:14 GMT\r\ncontent-type: image/x-icon\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa5-1083e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HrUV8iTbEq%2FuhKb%2FDmLY%2BKBAUbWSFNJkzCxNZIP5utTTNrUcNao1CMlirEdeR%2B6ksUdwDnGleYbdh3PjjyONkiPCCvPIU%2FfPFNr6\"}]}\r\npriority: u=6,i=?0\r\ncf-ray: 9aaf5fcd18730daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67646,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, -128x-128, 32 bits/pixel","md5":"a4611e9ffb692787aaaeda4f4080dedc","sha1":"5bcb09bcdf5625bce2d7083ac4da3ef7eaef21db","sha256":"ecf2e5d11d3c1a764377cacb9854ce3d97488d571fd3e2832a08ae0a9c3cbef6","sha512":"c4021d3e66d349e53f596fab09bb1684311fe97fbdabd8bbe0adf04e82ee2fa00f2eb2e45943937f9851eaacdd77e1ca4a9cdd43a4ec86e478129c26572acdac","ssdeep":"384:CiAEseC+z2wLrm78oaqmefaO+YVZG6B4CVPxKfdqQxcD3FAxyqDFBnPg:CV0C+2RXm8aO+YG4VPxKvcD3Foyqs","tlshash":"c16385db9e010162c688623c8d2ed7f562af2f575c21e84921f27e8b773b5939333652","first_seen":"2024-09-19T22:52:09.655085Z","last_seen":"2026-06-02T02:54:59.435097Z","times_seen":25,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":113,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/join/6fVeFLyyVk.js","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /join/6fVeFLyyVk.js HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-16321\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=prfagLMHYwXbfvNS4Quxx3c1K1pc6qWLpjMbv7P0522F629FqeI%2FnkrpQYkaOKnYS9%2BlBySboe89k5UyK06SGz%2FRIrleCxJ29bvZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5faf68370daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e4a91918f8af1d046012f7fc81b44946","sha1":"a7f84145fd11eb4ae52601170ae5335d0243813c","sha256":"cf2950d2094cd0ac7d2bd713ddb59d7b957b40c3a3134638f44597bf6e696755","sha512":"dbeda694d6e8fb079e4462b67b7b8af17a591387f329d2356ca6e6ed3f17fcffd8573709b6215aaa62c2e24db59796726819545fd32fc7530fc8ce46152780e3","ssdeep":"1536:sWEyENysj5cFAAsc5tX5gQICVHdmkVeEe1l:Y5NyasrDnXSQIS99en","tlshash":"8c938481b7c2bc8112871bb7b72b72e9f43a4ce87189448ee014fc58f5b9516e6e5a31","first_seen":"2025-12-08T21:32:46.791544Z","last_seen":"2025-12-08T21:32:46.791544Z","times_seen":1,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":68,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/swap_icon.3b06673e.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/swap_icon.3b06673e.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-86e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2Frm44fI%2F6r9Uc8jYPsrRCKOgF16pjNB33FBYg2bjjWfttPWgg4etgs5zRyJ4zGYeNeDC2A19sgK1Zi8ZP83r71DDlAfdAYFad%2BF\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1388d0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2158,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e0dc6ea93d537beb3faa78892a3c8385","sha1":"5413b95131f5adc7df10673f85cffcb6328868a4","sha256":"426bc8119d84002c897da1ccdd1e00f80efdc649c5321420fc07efab6caf6738","sha512":"e9dfb0c1f82ce89e187535b02b4efdc7ecc6bd810aef5ba94c549f70770da9c2d8a940e2ad9e3f15cf4722772700866fd36ec7486a149038e395f9ee0c5896ca","ssdeep":"","tlshash":"254177f6a3ccb0e0e303e3f0c915d4f9765e74b6aba6c70686d52b46fa2908d885d854","first_seen":"2025-12-08T21:32:46.795354Z","last_seen":"2026-06-18T03:50:18.768084Z","times_seen":8,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/v3_tag.7e67313d.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/v3_tag.7e67313d.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:11 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-9df\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=khpJow48c2HUBUnbNGA3Rb3VLS33Z0oRLSEcjUiV5BHXhsj%2B2Eu5GyNcRdzJgB8WbbvO6RsYR5R3cmobCrqeIdBn4f13YmirjV8i\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1388e0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2527,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2fb2725e1f9cdcfc234c10b68859582","sha1":"07fc3a87cf1143af6b0448eb07d93508d30b1c7d","sha256":"4b38950969826c8b492e60a4c66be58a332a0b6172358fea29937ba4b73cdcbc","sha512":"59e3f3df1684f47dd291b3336c33fd238a539e93ae488a2343f1ac4b5214055e112ed9b71a6e5bfe2bab4a7d4cf8c1f2784cb4d29951c109b84d428d59d4c31d","ssdeep":"","tlshash":"465154f5e7a8a7d1925fc304e8285831524bb0f69f408aa14068ef697b644d90d0dcc4","first_seen":"2025-12-08T21:32:46.797323Z","last_seen":"2025-12-08T21:32:46.797323Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/farm_icon.6b6592fe.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/farm_icon.6b6592fe.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-dd4\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DZbkWdm5sj42oplTUDSQprwpZaWcsHaRot9JZbWTfGIPrYeuN9lahvKSe3PfHBjkqxG7RIRu31KYysyg1pcYE%2FmjYDm%2FBtkjJNow\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb138930daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3540,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0048cba5d8e8613edd79015ae3864848","sha1":"cb2a6e2f717a79367369f5b48bb562552ce74ff9","sha256":"b517b4c75ea508af549e8a0bd2bdce7a35bf3417e3f2ede650600c9e60513a95","sha512":"f8883543286777d0469b701b8c754f0f27691b45edf5861be3c859dd3d9eab20a80356596afb2e22ad6751ace0f92bf1a3fa2fc46ebdabacceec8ad8acc1a19e","ssdeep":"","tlshash":"127134fab3d8b1e4e101f3f8a435907277db34ba7a51eb014295ee95b51209d58eec40","first_seen":"2025-12-08T21:32:46.799414Z","last_seen":"2026-06-18T03:50:18.743984Z","times_seen":8,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/m_1.0112e682.png","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.852Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/m_1.0112e682.png HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 205827\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\netag: \"692ccfa6-32403\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IwiS%2FdqQO6n3N%2FBajyQnUPBKH4K3E7ZW2J150tye0QnomRmD7TNH98FRc6Z9ahIV8pyO5SCym4hnHa%2FZpDPRQp2NjE6HkOrGRvgK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb148a20daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205827,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 540 x 360, 8-bit/color RGBA, non-interlaced","md5":"ed8f4c1d9e7040e219d6b8cffc26f863","sha1":"b5d33ec5e8ac30e0146a05b347228736680ba3a9","sha256":"366d62264b25a985c987e97e217cd1e54648eec9c5d1de9b6bcc06b38cf8111f","sha512":"302c17cbecebc53795eba200509990dbbef5364d64398d540ddb138778957d30ec0284b87cd0147c672a643575bd32e55a51d074daec91a1243735acfbca66eb","ssdeep":"6144:IFUcmrAjK+6NIsWSwDFxVtnEVukPXVI/uDDoKqrnO:qjK+6ms2xVGbPXyuDUKiO","tlshash":"da1423f0df42db865658e730a5ddfaafd80b484f5bea6052e883c0c25145f6f1c128b6","first_seen":"2025-12-08T21:32:46.806165Z","last_seen":"2026-06-18T03:50:18.71044Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1701,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1323,"receive":378,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/angular-router.js","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /angular-router.js HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-32f4c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9qFfOJzmBU%2FUgix0ICBcgEhM189pUDta9th2yCpLHowZekj%2BrU7DV5XFNftbUzWafJPLvC5WEZrKOsIMHEHg07OVo4%2FeiWNm3a89\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5fb1b8b90daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3339460,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65529)","md5":"00d6a85d7291a47938a5817513938c09","sha1":"6e186c57b1971e0528c7ab51d44e8f0b9b1d4221","sha256":"d32affef9afea8c2462ca4bfd34bcb6cd9ae8a1a619ea4c36a791ca61b414a55","sha512":"8e9ccf232e093d4f5da18063f39d6a08f37145cce865e0897e4e7a584c3743e011566ce3719e80913277656de5122c0ef7f02109a1f37658f15e907bdd3cdc2e","ssdeep":"24576:3QQIo+yMWbhhiaWvxPJDTr+B0K7bNJhCEAy93RVzNNLEL9CGCkC5CICc/GMnuKCl:W6LwFspA","tlshash":"1225a643a2d038a641d35fb27a2750daec2d8bef618c9ab9b44dfc3478e4154d6ec670","first_seen":"2025-12-08T21:32:46.809136Z","last_seen":"2025-12-08T21:32:46.809136Z","times_seen":1,"resource_available":false,"data":null}},"time_used":668,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":338,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/sun_boost_icon.86577699.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/sun_boost_icon.86577699.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-efa\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yGJ9a5hYhPhvORtR1Z7uC%2B76szef2JQchLD55FZ9GKi9vKSocTsLs6oDtduVm4idQRhQKtmJccFYpx%2FCUkprD5hZHw%2Balh3k29DL\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb138940daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3834,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"83c1e8312ce003bc9fcc3d8f972ea206","sha1":"f17b2ca81b12e4163ceedf5eebd02f5548978976","sha256":"50689b3a1b8f44de4952e89e4d20c74cf9961b6f4af3b44ad7ce78c3b77647c0","sha512":"052fe376efdd0c0aaac1990a95478cf1ca8aeeac4b634f78f8c7c9cdd8d57c78f972dd836c63ec49210d945b7c43e40fc464cbf64d917e1c38c9b38bcdcb54f9","ssdeep":"","tlshash":"a28161bbd3d8b6f4d106e7f4d950a0357a9720b5ed27d30543e5ad81fa0146d58dec40","first_seen":"2025-12-08T21:32:46.813252Z","last_seen":"2026-06-18T03:50:18.790962Z","times_seen":8,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/select_symbol.bacdb923.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/select_symbol.bacdb923.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:10 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-1f6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QOQESkmwE1Exs8n0jBx%2F6Twqys5oudeiaPJE8HcOlEKPAm2%2F3G3QWRe4IOT%2BNMIPYLxOSeYDAxRvLIE3xVmUAfdQml4sPXLNBePy\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb1489f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":502,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50f681aaefc30fbea6337b5c41ed0bf5","sha1":"2064b0e4b66c09f487c598ed1e5d45edb73d92e7","sha256":"b340d5d4822787ef8bfcae1f5acbf501510d0aa552b3c91f5d803a23f7d5e496","sha512":"1eae2e0bb85900551b59a88ea7c240add87762ac9df8a4cfe738a323ab53e48fc580cf3fa6611e7f4778de1ac0b9f3c26fceeac4fdfdd7e449c678f2c203d4ff","ssdeep":"","tlshash":"eff09e9294cec7e6608bd333dd1e207d9e61acf7998e56345102856cac4a8d1d980853","first_seen":"2025-12-08T21:32:46.816575Z","last_seen":"2026-06-18T03:50:18.776257Z","times_seen":8,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/join/","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-08T21:32:09.010Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /join/ HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2By02aSAO9%2FALM8A0gM8VhBSd9Zy2V0l%2FJJBjEVpb4JqhcMMqDlM73na9ThNNHeVbR5QaMJuiNlBFovsIpImMyG2ssKdZ6wfxA%3D%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9aaf5facebbcb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4199633,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"853d7870cd5017e231decb5f622d4f2e","sha1":"1fda37b1e53c5565f8ba39bd95190ee87aaf8fd2","sha256":"03b2a5a3dba79ccf373be310128839151ff0d451a20bac0bad533851ec31e9ae","sha512":"b64ca2de59c5cdaf22bf3290f20cc58bdaa334797fcb28ef21f18dc8cf3f7e37838f22b0b474b2e151435a962391f470a9b2932a783f231c584c7df741c4fb80","ssdeep":"12288:w2upKtLA9tM8th2J0HOuWIt+qNdeHrjBp0h/cakRSq9/evblg2gTMXm3kNCTfH7Y:w2uAWYut+qNdM92jqNTM2gCDbNW","tlshash":"5f255a4a05b722353413e7741fc6e66e3628f003daeece2df99d71584f09989d63ba24","first_seen":"2025-12-08T21:32:46.820474Z","last_seen":"2025-12-08T21:32:46.820474Z","times_seen":1,"resource_available":false,"data":null}},"time_used":427,"timings":{"blocked":93,"dns":78,"connect":1,"send":0,"wait":235,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/css/21.d45b6a4a.chunk.css","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/css/21.d45b6a4a.chunk.css HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-776a7\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GvrCMjolKN2z%2F6b%2BPBojtqxVhDakI7sRVCHazNSikGS%2B%2BbrkMLvmSKuQzH6ZP19w5yTtggiJSgflc%2FSLt3jhYfw61HEi5cNKZ10d\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5faf683f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":489127,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"6fc2f3e8bdea1f7a671c96015de4feea","sha1":"cc9e03f26b9951dfa413ff490220468ab345722b","sha256":"9c2e348a7113d0cd09ccbaee66c88cae17d400e102346d5c1652d7248e5d14d3","sha512":"ca8881e2da13b7deb57cbba66eaeb662b30a8a20ac175e9009aaafaf5dfe8a0215834e04e634fe71420523137a760987353626b2836d4ab845e76f943c7796f5","ssdeep":"6144:vMaPzk9XpnBibc5bcrBbLY6/SN2NckUCTRbCTrQcuDRIgCe51:vBcZnBi44xX2bCTRCT0cuDqgCe51","tlshash":"d6a4193396d9243db02b8a72f0d16ae97c26c907e7235efee7d1756cc2860d32623645","first_seen":"2025-12-08T21:32:46.822824Z","last_seen":"2025-12-08T21:32:46.822824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/js/21.35fd09a5.chunk.js","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/js/21.35fd09a5.chunk.js HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:41 GMT\r\netag: W/\"692ccfa5-7046e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9r%2FBoTTvQ4xs0AnDLxquqtZ8xDGNZXcpMD93mBldkD5uKSYGjqMN2YlIUbuQJ6UeWYl9%2BzqI15v3s4fuYyCHEUq3mTMkVNU8n7SZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9aaf5faf68400daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":459886,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e318fdfb5414403052e6b8b3a5fe4485","sha1":"170e09c9f5d1450869c6f41461f62fe84670ecfa","sha256":"a4a7d8083e1c3a2e911fd9b7e505df5565a893409ab5d58b85bb4d55b6eaa3d3","sha512":"fa49f10e3cbc9ef1779ea3587317a671f6a7388986821ed10480e826c09ac3ef4ab9db7dc1344f3478d223f62124451d9d45f1273506638408282045201cc0c4","ssdeep":"6144:cxfF/dm7gcGRpK957SQHMQtxqk+/6uFoUORXdnEH6JizM6UW3xEWii:WFWgcopK9MQHbtxIRaUORXx8pNUW3bd","tlshash":"1ca47d28e045f9eec4760ae1c0af803cf4172e84f54cf870a1b9edd52a5855ab647f9b","first_seen":"2025-12-08T21:32:46.825231Z","last_seen":"2025-12-08T21:32:46.825231Z","times_seen":1,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":621,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/psm_icon.b2da98b7.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/psm_icon.b2da98b7.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-961\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SydVUg2EmoMEIvUzWK2RplWnnkx7J32U43mM99XLgck6G7P7FWJ2FnR6DZD%2FWMx8AOD%2F8eKPQL2z%2Fv6FW5ES5cMEB%2B515%2Bu4priq\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb138900daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2401,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e43da68c04b1b6e209bc5f90625d52e0","sha1":"31afa0db87b141f15bf5a1951356e95fb8493427","sha256":"9f8f377a94e468d33a036f99a127d2611b7e689afc35f4d3653bb5ab9d640bc9","sha512":"da86c46be3daed8882aa0c212207c97eaa70dc90d561d66ccaae1a9d72db70166089c690b8ec8a315eeafbebba5c234d3857b9cfc7286043e664989025977a2f","ssdeep":"","tlshash":"c44133fbb3d875d4e008d7e87824862077ab39b56b45974903d86bd4b6111ca84ed8d0","first_seen":"2025-12-08T21:32:46.827937Z","last_seen":"2026-06-18T03:50:18.71877Z","times_seen":8,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"hub-sun.xyz/static/media/sun_htx_icon.7237e57f.svg","fqdn":"hub-sun.xyz","domain":"hub-sun.xyz","tld":"xyz"},"ip":{"addr":"172.67.150.78","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://hub-sun.xyz/join/","date":"2025-12-08T21:32:09.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hub-sun.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 29 Nov 2025 22:32:47 GMT","end":"Fri, 27 Feb 2026 23:30:30 GMT"},"fingerprint":{"sha1":"ED:0E:32:27:82:E2:6B:E5:5A:88:EC:70:A2:07:34:8C:C8:BA:C6:2B","sha256":"F9:FA:73:30:F6:83:7E:8B:28:16:FF:29:6F:B4:FF:0A:9F:BF:BF:14:C4:89:85:32:9C:CF:FC:1E:00:84:FC:F4"}}},"request":{"raw":"GET /static/media/sun_htx_icon.7237e57f.svg HTTP/1.1\r\nHost: hub-sun.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://hub-sun.xyz/join/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 08 Dec 2025 21:32:09 GMT\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\ncast-mode: default\r\nlast-modified: Sun, 30 Nov 2025 23:13:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\netag: W/\"692ccfa6-ac2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uc6qk8%2FAC1iS0GuS0pQrVrc7C5RDoRjVoVtWyitRl9oe%2B%2BxYR2nB5cjFpd%2B0mjr9Fka0xGck3qkXWLg582aIU3OwlmA4iQcHTv9e\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9aaf5fb138910daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2754,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d5f3a6a3534ddb707dc3f4f2a3f1e19e","sha1":"e5480fa11539e90e8a021fb41c8e3312bae8ec03","sha256":"38c09cb2f6f1faa3fd8fa0173f07ac8b939b21bbd81f23188b6bdc732b508220","sha512":"9bce0eeefb89f0b032aed550ee6d7ed4e1c700f953419fdda0898e783447345a255c29ddb49eab3cbb77eae3c66812421a25151f3410c9b69c52adbe380e96a4","ssdeep":"","tlshash":"5f5136fba3dcb1e0e203e3b494a091353b7728fa76428f25c1d1af82f6114995c9ec50","first_seen":"2025-12-08T21:32:46.829903Z","last_seen":"2026-06-18T03:50:18.788354Z","times_seen":8,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-12-08","alert":"Sinkholed","trigger":"hub-sun.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}