{"report_id":"56b56b3c-93c7-44f3-af7e-f10563e62b66","version":6,"status":"done","tags":[],"date":"2025-12-01T22:10:03Z","url":{"schema":"http","addr":"velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","fqdn":"velvetpetal.site","domain":"velvetpetal.site","tld":"site"},"ip":{"addr":"103.179.44.210","port":0,"asn":149020,"as":"WebHorizon Internet Services","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"http","addr":"velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","fqdn":"velvetpetal.site","domain":"velvetpetal.site","tld":"site"},"title":"velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","dom":{"size":5464,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"0c849de59b16936d3dc3ddbfb07bdbdc","sha1":"dc758e17bc2f599eb0399150d12344a4bdc796b1","sha256":"b7fd01ae9d6932f0b1e25c7765e8a4ae32f6a76063a894f3b4550a00e5432cb7","sha512":"89793f5d831d5072a65cd3c801a86b94b76503499ed61e58b1f15adcc4befe8d2f70f490733078cf2f9281665c0014784634f108c80af8e203ebf43624974247","ssdeep":"96:V8eHCelJXl9d5Vg/LjV56FlFGL73bPc9A4qlqZCatj:qeHTJ8LqFlFK7r09ATlq4atj","tlshash":"35b1b6266cf07037510398ae7bfde208bd94c10be646989438fe83e54f86d491927f9d","dom_hash":"domhash9ca5e314e45da3d48cb82c5dfd025207","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","fqdn":"velvetpetal.site","domain":"velvetpetal.site","tld":"site"},"ip":{"addr":"103.179.44.210","port":0,"asn":149020,"as":"WebHorizon Internet Services","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-05T22:10:03Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"velvetpetal.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"wallpaperaccess.com","ip":{"addr":"104.20.45.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2018-05-27","domain_rank":47010,"first_seen":"2018-08-23T11:37:55Z","last_seen":"2025-11-28T09:51:52.951169Z","alert_count":0,"request_count":1,"received_data":244476,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"classactdigital.net","ip":{"addr":"165.232.114.226","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2022-02-17","domain_rank":0,"first_seen":"2022-09-21T09:00:30Z","last_seen":"2025-11-20T07:40:56.356312Z","alert_count":0,"request_count":2,"received_data":5472,"sent_data":943,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"velvetpetal.site","ip":{"addr":"103.179.44.210","port":80,"asn":149020,"as":"WebHorizon Internet Services","country":"Singapore","country_code":"SG"},"domain_registered":"2024-12-23","domain_rank":0,"first_seen":"2025-10-15T21:51:35.263754Z","last_seen":"2025-11-26T22:06:54.329921Z","alert_count":3,"request_count":3,"received_data":6186,"sent_data":1426,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server:2.4.37","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"OpenSSL:1.1.1k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-30T22:25:26.998026Z","alert_count":0,"request_count":3,"received_data":215368,"sent_data":1452,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2025-11-30T22:21:59.282818Z","alert_count":0,"request_count":1,"received_data":70232,"sent_data":458,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"classactdigital.net/templates/unsub.js","fqdn":"classactdigital.net","domain":"classactdigital.net","tld":"net"},"ip":{"addr":"165.232.114.226","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a090455efbc4252e477a3187eed96cf","sha1":"45a71a4061fb9846ef6812529ff35adfcc393670","sha256":"63da61166a8bf07800e3453472cc7dfdc80c7ec20119430f3123479a1e89dce5","sha512":"7eb5a2b6290408835df8523edc10371ef436e82612b3ece516b58b1bcc26ec787e2ba6ba0ba30a7c4b6bddbea4c888a875644ff91f060821f9ed918d1302f7e2","ssdeep":"96:IulvicF73FSCzSR3IT5l6tRs1W0/DnRnSLj:ISvz73FSCzS9A6tRs1W0zRnSLj","tlshash":"d1a1105d18e12025810734bdcbaf411cb935570b265d8da07d2e6a84af3523c97f2bad","size":4762,"data":"","first_seen":"2025-12-01T22:10:06.612373Z","last_seen":"2025-12-01T22:10:06.612373Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","fqdn":"velvetpetal.site","domain":"velvetpetal.site","tld":"site"},"ip":{"addr":"103.179.44.210","port":80,"asn":149020,"as":"WebHorizon Internet Services","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"e424ce48ae45b6be7c90fbf04368d2c3","sha1":"451c07f4dd84628cd4f089b3e8fa25de6756a07e","sha256":"4018098c6b55b6ff22291f4d841a08d8561f3935273d3c8422fa2db7d35eb14e","sha512":"7f968700cb367823068a0048b96043d5f69850933f597de373bf2f87eb2b2b7ac8a495846276acb5d94a3c74ff13fef72e8662fe35a20ffe4ae97cbf358413ec","ssdeep":"","tlshash":"60115c5f68d62273585374386b8be048e564a51f2247c9507c1c92c15f249b805fefde","size":1061,"data":"","first_seen":"2025-04-16T06:01:47.996568Z","last_seen":"2026-01-08T21:03:52.238998Z","times_seen":23,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","fqdn":"velvetpetal.site","domain":"velvetpetal.site","tld":"site"},"ip":{"addr":"103.179.44.210","port":80,"asn":149020,"as":"WebHorizon Internet Services","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":true,"md5":"277e7f71e5244dcf56dda48bb718c600","sha1":"e3a95652b08632f05ed16dcd21afc6fb9648fe83","sha256":"e2a08fb3b1171bc9e5e7d9f37599db79a8c4725bbc1b6ff54a4f395563a0e97c","sha512":"b851fbe87f70957306448f617efae6edfb6e13b41e54371d75c160f9adaca2ec34fa63482b1e299fe2b8d139aa1b7378791e7ce5e0b2ffec9b51bad79358c0ae","ssdeep":"","tlshash":"35700023c0bc802088320028080280000008b22232a2808828800080ba08088232320a","size":22,"data":"","first_seen":"2025-03-18T01:10:30.305043Z","last_seen":"2026-01-08T21:03:52.240596Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js@1.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19188,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-05T15:11:42.734776Z","times_seen":106477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","size":48944,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-05T15:11:42.730022Z","times_seen":105760,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-05-05T15:11:42.739516Z","times_seen":77881,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wallpaperaccess.com/full/1201209.jpg","fqdn":"wallpaperaccess.com","domain":"wallpaperaccess.com","tld":"com"},"ip":{"addr":"104.20.45.66","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","date":"2025-12-01T22:09:41.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wallpaperaccess.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Nov 2025 23:24:03 GMT","end":"Sun, 08 Feb 2026 00:23:57 GMT"},"fingerprint":{"sha1":"F9:D7:76:EA:CE:1C:85:7D:63:32:60:57:C2:25:69:F2:83:E4:2C:33","sha256":"09:40:82:7A:5B:4C:B7:C9:33:35:78:6E:5A:64:3A:8F:83:64:90:FB:CC:0D:A9:CB:F9:5C:11:0B:75:DE:04:4C"}}},"request":{"raw":"GET /full/1201209.jpg HTTP/1.1\r\nHost: wallpaperaccess.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://velvetpetal.site/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 01 Dec 2025 22:09:41 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 243974\r\nserver: cloudflare\r\ncache-control: max-age=2592000\r\ncf-bgj: imgq:85,h2pri\r\naccept-ranges: bytes\r\ncf-polished: status=not_needed\r\nvary: accept\r\netag: \"64aa691c-3b906\"\r\nexpires: Tue, 16 Dec 2025 05:46:23 GMT\r\nlast-modified: Sun, 09 Jul 2023 08:00:28 GMT\r\nx-frame-options: SAMEORIGIN\r\ncf-cache-status: HIT\r\nage: 1354998\r\ncf-ray: 9a75e9093cc575ab-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243974,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3840x2160, components 3","md5":"b266da3292837160db2e338fc470eb29","sha1":"411676c9b67a76e1035ce682f3a5ba3e5b67939d","sha256":"a74511b8380e48ec1d2bb189def2b6d96cd600292ce9299412f75b6a2cedd6e5","sha512":"426d6ad9655c3688db7241e90997566af34c3489bbbae8e4b0e2643881ed6e44200e5372053c347e3ed52ba139ff22067a7df3142f90aa1eb831beb9c846c5de","ssdeep":"6144:GzE1oodnG2HpW55irxAeSkUZk73tu3iarKPASATXm:0y1fJWncxziiwlrXm","tlshash":"f03423fb6be627b6d5d523f0bc7354336e5a1838818da126f2475ce1c8ce7007a8a746","first_seen":"2025-09-01T00:35:32.148922Z","last_seen":"2026-01-08T21:03:52.235501Z","times_seen":20,"resource_available":false,"data":null}},"time_used":94,"timings":{"blocked":29,"dns":4,"connect":1,"send":0,"wait":14,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"classactdigital.net/index.php","fqdn":"classactdigital.net","domain":"classactdigital.net","tld":"net"},"ip":{"addr":"165.232.114.226","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"http://velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","date":"2025-12-01T22:09:41.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"classactdigital.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 14:58:35 GMT","end":"Sat, 14 Feb 2026 14:58:34 GMT"},"fingerprint":{"sha1":"58:C3:BF:D9:23:30:A6:E6:DE:A1:3F:30:1E:5B:FB:40:35:0A:43:7B","sha256":"6C:07:E5:D1:8E:AF:C6:7F:B3:CD:D5:47:A1:1C:06:1E:7A:81:17:DA:B5:A6:3A:E6:8E:5C:B9:E6:BB:07:86:DE"}}},"request":{"raw":"POST /index.php HTTP/1.1\r\nHost: classactdigital.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: application/x-www-form-urlencoded\r\nContent-Length: 252\r\nOrigin: http://velvetpetal.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://velvetpetal.site/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":252,"data":"vhref=http%3A%2F%2Fvelvetpetal.site%2Funsub%2FP2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE\u0026juh=3a4c5161dd8d6c059d33edf794ae174d\u0026cs=da0187068081bba3c1c4d606fc3e9f3c\u0026ex=1764627581450\u0026v=657addee-b35b-4169-885c-90012a81e2af\u0026pi=false\u0026t=1764626981"}},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 22:09:41 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 2\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List\r\naccess-control-allow-origin: *\r\netag: W/\"2-vyGp6PvFo4RvsFtPoIWeCReyIC8\"\r\ncache-control: no-store, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"99914b932bd37a50b983c5e7c90ae93b","sha1":"bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f","sha256":"44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a","sha512":"27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd","ssdeep":"","tlshash":"c7100000000000c00000000c00000000000000000c0000000000000000000000000000","first_seen":"2023-03-07T01:15:26Z","last_seen":"2026-05-05T16:09:47.959396Z","times_seen":622171,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":80,"dns":2,"connect":34,"send":0,"wait":38,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","fqdn":"velvetpetal.site","domain":"velvetpetal.site","tld":"site"},"ip":{"addr":"103.179.44.210","port":80,"asn":149020,"as":"WebHorizon Internet Services","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-01T22:09:40.711Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE HTTP/1.1\r\nHost: velvetpetal.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Mon, 01 Dec 2025 22:09:41 GMT\r\nServer: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k\r\nX-Powered-By: PHP/7.2.24\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.2.24","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Apache HTTP Server:2.4.37","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"OpenSSL:1.1.1k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]}],"data":{"size":5499,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"f96b5af5ba97b3d3d0737fd28eef10c8","sha1":"bdff7735373d77961c093dd69bb32e4ea45b1066","sha256":"48123b534109f47671c6cb1ff4b2ffa7a2352b62983b5f9aa24a696f50f72545","sha512":"f7e18f397233014534f74179949554313002bd4817bfb0f37a53214677875f6f08882b532145c8d32551194ba3dcda0e7f4ae241c07c08dd1772dea9ee42406e","ssdeep":"96:PCelJX80a849d5Vg/LjV56FlY0uGS73bPc9A4qlqZCaM:PTJs0n3LqFlY0uV7r09ATlq4aM","tlshash":"4db1b625acf07037510394ae7bfde208bd94c10be646949438fe83e54f86d491977e9d","first_seen":"2025-12-01T22:10:06.60551Z","last_seen":"2025-12-01T22:10:06.60551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":724,"timings":{"blocked":259,"dns":0,"connect":260,"send":0,"wait":205,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"velvetpetal.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/js/bootstrap.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","date":"2025-12-01T22:09:41.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@4.0.0/dist/js/bootstrap.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://velvetpetal.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://velvetpetal.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.0.0\r\nx-jsd-version-type: version\r\netag: W/\"bf30-qVRYMYA7E1nP7tR+O01rrmjkDpk\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 01 Dec 2025 22:09:41 GMT\r\nage: 726409\r\nx-served-by: cache-fra-etou8220109-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 13501\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48944,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48664)","md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-05T15:11:42.730022Z","times_seen":105760,"resource_available":true,"data":null}},"time_used":194,"timings":{"blocked":76,"dns":1,"connect":26,"send":0,"wait":28,"receive":2,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"velvetpetal.site/favicon.ico","fqdn":"velvetpetal.site","domain":"velvetpetal.site","tld":"site"},"ip":{"addr":"103.179.44.210","port":80,"asn":149020,"as":"WebHorizon Internet Services","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"http://velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","date":"2025-12-01T22:09:41.733Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: velvetpetal.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Mon, 01 Dec 2025 22:09:41 GMT\r\nServer: Apache/2.4.37 (AlmaLinux) OpenSSL/1.1.1k\r\nContent-Length: 196\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=iso-8859-1\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"AlmaLinux","description":"AlmaLinux is an open-source, community-driven Linux operating system that fills the gap left by the discontinuation of the CentOS Linux stable release.","website":"https://almalinux.org","common_platform_enumeration":"","icon":"AlmaLinux.svg","categories":["Operating systems"]},{"name":"OpenSSL:1.1.1k","description":"OpenSSL is a software library for applications that secure communications over computer networks against eavesdropping or need to identify the party at the other end.","website":"https://openssl.org","common_platform_enumeration":"cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*","icon":"OpenSSL.png","categories":["Web server extensions"]},{"name":"Apache HTTP Server:2.4.37","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":196,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"62962daa1b19bbcc2db10b7bfd531ea6","sha1":"d64bae91091eda6a7532ebec06aa70893b79e1f8","sha256":"80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880","sha512":"9002a0475fdb38541e78048709006926655c726e93e823b84e2dbf5b53fd539a5342e7266447d23db0e5528e27a19961b115b180c94f2272ff124c7e5c8304e7","ssdeep":"","tlshash":"c0d0129e9183638b442225907ac211d2654d13a6b87645e82d82a48a951857dc5ca69d","first_seen":"2023-03-07T12:06:54Z","last_seen":"2026-05-05T16:12:36.232062Z","times_seen":98485,"resource_available":true,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":240,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"velvetpetal.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","fqdn":"velvetpetal.site","domain":"velvetpetal.site","tld":"site"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-01T22:09:40.182Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET /unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE HTTP/1.1\r\nHost: velvetpetal.site\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-05-05T16:09:50.836081Z","times_seen":14695563,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":0,"dns":26,"connect":263,"send":0,"wait":0,"receive":0,"ssl":203},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-01","alert":"Sinkholed","trigger":"velvetpetal.site","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@4.0.0/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"http://velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","date":"2025-12-01T22:09:41.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/bootstrap@4.0.0/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://velvetpetal.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://velvetpetal.site/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: text/css; charset=utf-8\r\nx-jsd-version: 4.0.0\r\nx-jsd-version-type: version\r\netag: W/\"235ed-iVElpFIqOxDuetoG7mUDWHy/lcU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 01 Dec 2025 22:09:41 GMT\r\nage: 1702663\r\nx-served-by: cache-fra-etou8220156-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 21869\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144877,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-05-05T15:32:53.677673Z","times_seen":55226,"resource_available":false,"data":null}},"time_used":224,"timings":{"blocked":84,"dns":1,"connect":29,"send":0,"wait":31,"receive":21,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.194.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","date":"2025-12-01T22:09:41.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://velvetpetal.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://velvetpetal.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 01 Dec 2025 22:09:41 GMT\r\nage: 1701257\r\nx-served-by: cache-lga21963-LGA, cache-hel1410023-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 43119\r\nx-timer: S1764626981.328975,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-05-05T15:11:42.739516Z","times_seen":77881,"resource_available":true,"data":null}},"time_used":121,"timings":{"blocked":47,"dns":4,"connect":15,"send":0,"wait":19,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/popper.js@1.12.9/dist/umd/popper.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","date":"2025-12-01T22:09:41.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/popper.js@1.12.9/dist/umd/popper.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: http://velvetpetal.site\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://velvetpetal.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 1.12.9\r\nx-jsd-version-type: version\r\netag: W/\"4af4-w7l3qkuN+2nWUeBwFQMdOF3tlks\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 01 Dec 2025 22:09:41 GMT\r\nage: 1266741\r\nx-served-by: cache-fra-etou8220176-FRA, cache-hel1410022-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 7053\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19188,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-05-05T15:11:42.734776Z","times_seen":106477,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":79,"dns":1,"connect":28,"send":0,"wait":29,"receive":2,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"classactdigital.net/templates/unsub.js","fqdn":"classactdigital.net","domain":"classactdigital.net","tld":"net"},"ip":{"addr":"165.232.114.226","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"http://velvetpetal.site/unsub/P2Q9MTQ2MzQmZWk9MTU2MDcyNDg5JmlmPTI5Mjc5JmxpPTYzJnR5PTE","date":"2025-12-01T22:09:41.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"classactdigital.net","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Nov 2025 14:58:35 GMT","end":"Sat, 14 Feb 2026 14:58:34 GMT"},"fingerprint":{"sha1":"58:C3:BF:D9:23:30:A6:E6:DE:A1:3F:30:1E:5B:FB:40:35:0A:43:7B","sha256":"6C:07:E5:D1:8E:AF:C6:7F:B3:CD:D5:47:A1:1C:06:1E:7A:81:17:DA:B5:A6:3A:E6:8E:5C:B9:E6:BB:07:86:DE"}}},"request":{"raw":"GET /templates/unsub.js HTTP/1.1\r\nHost: classactdigital.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: http://velvetpetal.site/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Mon, 01 Dec 2025 22:09:41 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 4762\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List\r\naccess-control-allow-origin: *\r\netag: W/\"129a-RacaQGH7mEbvaBJSn/Na38w5NnA\"\r\ncache-control: no-store, no-cache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4762,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"7a090455efbc4252e477a3187eed96cf","sha1":"45a71a4061fb9846ef6812529ff35adfcc393670","sha256":"63da61166a8bf07800e3453472cc7dfdc80c7ec20119430f3123479a1e89dce5","sha512":"7eb5a2b6290408835df8523edc10371ef436e82612b3ece516b58b1bcc26ec787e2ba6ba0ba30a7c4b6bddbea4c888a875644ff91f060821f9ed918d1302f7e2","ssdeep":"96:IulvicF73FSCzSR3IT5l6tRs1W0/DnRnSLj:ISvz73FSCzS9A6tRs1W0zRnSLj","tlshash":"d1a1105d18e12025810734bdcbaf411cb935570b265d8da07d2e6a84af3523c97f2bad","first_seen":"2025-12-01T22:10:06.612373Z","last_seen":"2025-12-01T22:10:06.612373Z","times_seen":1,"resource_available":true,"data":null}},"time_used":335,"timings":{"blocked":144,"dns":66,"connect":36,"send":0,"wait":42,"receive":1,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}