{"report_id":"5a3310f9-5306-42b6-8ca1-b7f398d2d761","version":6,"status":"done","tags":[],"date":"2026-04-10T14:55:06Z","url":{"schema":"http","addr":"user.areapersonalall.tech","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"user.areapersonalall.tech/en/login","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"title":"Sign in · Client Area","dom":{"size":121951,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (65059)","md5":"ad1615321a21a7953a7a84f58edafa12","sha1":"9cc61788d26f9f34fcf47790ebee3b6942823454","sha256":"ca78da33eb07d4417463f21c2bacd74fd16fbc306cf296db6c7f33cd9820b3b5","sha512":"4c95be9af22b10800d9174f5b2cba8180345901de2ce069bf1caa9c8aa743a9d32912e0bbe838cab39d51c0dde2fd37624e42bd8dff4e72426d42c9fbc86b3a0","ssdeep":"1536:bIYbVcrJfTgOjCCoFJFP/mTT86ZQRnWNwNa+M0llDjcdkNOcBOQ6sCw+JOe+:bIYKpmdnJ6ZQRnnRCSCw+JOe+","tlshash":"57c3d6a1b688613f7437d1a6a694f74c71a4f543ddb3068cf198e0248ec7eef2a65384","dom_hash":"domhasha035e7b9eab555ce5a5f603cea4d1532","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"user.areapersonalall.tech","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-15T14:55:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":2}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-10T14:54:45Z","timestamp":1775832885,"ip_dst":{"addr":"104.21.81.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":50652,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"medium","alert":"ET INFO Suspicious Domain (*.icu) in TLS SNI","source":"{\"timestamp\":\"2026-04-10T14:54:45.036500+0000\",\"flow_id\":776173859987075,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.21\",\"src_port\":50652,\"dest_ip\":\"104.21.81.102\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2026889,\"rev\":4,\"signature\":\"ET INFO Suspicious Domain (*.icu) in TLS SNI\",\"category\":\"Potentially Bad Traffic\",\"severity\":2,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2019_02_06\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2022_11_21\"]}},\"tls\":{\"sni\":\"chat.unichat.icu\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3444,\"start\":\"2026-04-10T14:54:45.024195+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"user.areapersonalall.tech","ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":14,"request_count":14,"received_data":2774951,"sent_data":7828,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"user.areapersonalall.org","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":2,"received_data":33583,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"chat.unichat.icu","ip":{"addr":"104.21.81.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-09","domain_rank":0,"first_seen":"2026-04-07T00:25:19.684482Z","last_seen":"2026-04-07T00:25:19.684482Z","alert_count":0,"request_count":1,"received_data":364560,"sent_data":443,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"ws-eu.pusher.com","ip":{"addr":"52.211.123.146","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"domain_registered":"1997-06-03","domain_rank":153698,"first_seen":"2014-10-11T10:24:38Z","last_seen":"2026-04-04T02:34:32.247627Z","alert_count":0,"request_count":1,"received_data":268,"sent_data":636,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"user.areapersonalall.tech/","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b6daa95c44b04961612c43eec3a105fb","sha1":"72f16f65d0dc0873d679f3d291ce7b8c1826b897","sha256":"a1179cde393a8622cf150124afb5b5e5c5d170dc1ab670873fb2e0c4551590d2","sha512":"ba607b54710a764d4fac5e5000e2329c9b6e1b0fffbd330ba5fe048f2e92d8160efbfd4700e22c9151403850e0d32c2fbe25a7229a246e5250856c5d206db53d","ssdeep":"","tlshash":"85d0a7bd000d1d7e730159946847378c3aac108a2dde0c882c65af10406538a0026232","size":223,"data":"","first_seen":"2026-04-10T14:35:22.451657Z","last_seen":"2026-04-10T14:55:12.761466Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b784256f88f3d836b6ad5c8dd5fd9dc4","sha1":"d51dcb548bdfe5f5f5bb67fa19e7dfb99c4b6a99","sha256":"212193138e26d714f227712608b98946d76ae187eb334e570cb0e5b2355f276f","sha512":"531c1f4be20b6c767fd8f25e4bd2e911614480b8f8f1f9b06b80f91ad717162221c0a6b7bcd84e7e02fee59c7406c7a6f333f5ef28989c356bd458e22b6fe35b","ssdeep":"","tlshash":"4111cceea47a1816611be5560b1f3f012763042b9e466b307f8d4336afd90df9135f94","size":897,"data":"","first_seen":"2026-04-10T14:35:22.45263Z","last_seen":"2026-04-10T14:55:12.762948Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/dist/js/app.47d18d.js","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6e7f5b4b6731f18ede54b4138ab0560","sha1":"dece947c84d90fcbc8176c47a6a9300be08cef46","sha256":"ac163fd280b2a44ed914a6e276788a7e5b1c13bc8ff4b2869a572f6e20efc5db","sha512":"bacf069f3887a5c2fe84a16b907863addaf6657f01da4e11b783ba092d981d8ff05a5e910271b7d7487d029e0ece6751056366b4ae4717c7beb50ebf065249da","ssdeep":"6144:agI1M1Fh4IoGOF8wtz0b2dAJf+0EB9NB5dNZsy3lly9dlKlLDm1aCWG8SW6eB5dj:aS4mOFsy0EBPKyV4LW60KdIpLUq","tlshash":"e1052a89b281f07207eb61b5407f010bf23a6d58b40a8494f269e8d57db9d8e913bf7d","size":853481,"data":"","first_seen":"2026-04-10T14:35:22.426143Z","last_seen":"2026-04-10T14:55:12.73756Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"chat.unichat.icu/widget/chat-widget.iife.js?5","fqdn":"chat.unichat.icu","domain":"unichat.icu","tld":"icu"},"ip":{"addr":"104.21.81.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d493d3b92c9da6841ab65788ebb012","sha1":"bd955d7fc7278f2f1a3afd1725e2d59a1d554685","sha256":"fa2a9c518cfaf84dd0e85c368290d16ea1c53eb45d7fdbd3910ca41f107a5857","sha512":"b0a82fcc153fdbd94d150fae18a27ea7448d435bd0a4af069c0caaa91434c7eda430103e678090c4cffcdecf16037df6a38ec59d0e00e5723598d024f413b7f9","ssdeep":"6144:slB3V2vcZQgQ8+tp2z0OeeSoBE15sWaRSpjWfdctPscZeyvYpCeZOxY8mbGHDa5b:mV2vck8ZKrjon5","tlshash":"fd746dd47195303953b3a0e1947b110ab33c6a56b005c0d8f27ce9fa6da799aa237f7c","size":363595,"data":"","first_seen":"2026-04-07T00:25:28.555945Z","last_seen":"2026-04-10T14:57:08.429289Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.org/dist/js/7912c3da78fab23e.js","fqdn":"user.areapersonalall.org","domain":"areapersonalall.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d4eb9f1529f6ea671eb4f7bea319f49","sha1":"d6334e9e674c4d58d5d598ab20f012073c472eac","sha256":"612d5dc5e0ade30e382ed8fa9148c45af3d366e6fae16f6ccb1635aa399328a7","sha512":"2be558006afb82fdce5b46c618a3f6648ae2f5426f2f2f79b38bbea02fe5b315a1abc08852b6105c72f1faf2e44b953477bdae623440a9aee8f38a04874d1a65","ssdeep":"192:zLGHskm9DIILKYX9YhT3Fh/b5fElsnQlOkWG/u9i7FVpbI/2MKiAEARAHZ:Pem9xLoT3b5fIsnIjWG/AiBa2Fr5G5","tlshash":"d042e8e6f8d7f8ba0a8b60b040ff1009f2355915d81d8491f378d5e4aeb448a877af1d","size":12512,"data":"","first_seen":"2026-04-10T14:35:22.441611Z","last_seen":"2026-04-10T14:55:12.749031Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.org/dist/js/544e74e1ac7b6ea3.js","fqdn":"user.areapersonalall.org","domain":"areapersonalall.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f781c4f2c025a446576cdb787e937222","sha1":"74b15ce21b0c3822c77b954a05b1fdcaaaac3734","sha256":"c93df6cd3f2abfe6f09a2bd2136fa04382f780ebc8f993e636cfc25c9d5dde7b","sha512":"f222b1f53dcf201d5661564bd6efc880624e087bc206d426ab93df7170e5a45a6f75b9a01e5250bb440c6f43ba0185fd27f168ccb05b4ebcb72c64988d55405a","ssdeep":"384:Qra+yEK8+yh9uaQvOjr15CH9T+Kh0+O2u:sAEK8ruMjR5+FK+9u","tlshash":"50928525aa0d7e330e9395d2bcce4d95f5d45086d2a38ef79a9cc00952c79a4aef301f","size":19485,"data":"","first_seen":"2026-04-10T14:35:22.440433Z","last_seen":"2026-04-10T14:55:12.747376Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"user.areapersonalall.tech/dist/js/app.47d18d.js","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /dist/js/app.47d18d.js HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 18 Mar 2026 13:39:00 GMT\r\netag: W/\"69baaaf4-d05e9\"\r\nexpires: Sat, 11 Apr 2026 14:33:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nx-served-by: user.areapersonalall.tech\r\nage: 1260\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BY%2FBMDhSLNJz0HzbRUCPrOIjipiSdLyWr98dSYuXeWhWqo%2BRHyaCZCwoWktY5dhd0FPDRhQfmWdF9U567SZWWMhT%2Fzb6monACY7cT1bTW2a%2FvWJENIxlqBBY%2BQ8sI%2FtnNnBqRPeS2w5o6JX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296ab4ca9b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":853481,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65468)","md5":"f6e7f5b4b6731f18ede54b4138ab0560","sha1":"dece947c84d90fcbc8176c47a6a9300be08cef46","sha256":"ac163fd280b2a44ed914a6e276788a7e5b1c13bc8ff4b2869a572f6e20efc5db","sha512":"bacf069f3887a5c2fe84a16b907863addaf6657f01da4e11b783ba092d981d8ff05a5e910271b7d7487d029e0ece6751056366b4ae4717c7beb50ebf065249da","ssdeep":"6144:agI1M1Fh4IoGOF8wtz0b2dAJf+0EB9NB5dNZsy3lly9dlKlLDm1aCWG8SW6eB5dj:aS4mOFsy0EBPKyV4LW60KdIpLUq","tlshash":"e1052a89b281f07207eb61b5407f010bf23a6d58b40a8494f269e8d57db9d8e913bf7d","first_seen":"2026-04-10T14:35:22.426143Z","last_seen":"2026-04-10T14:55:12.73756Z","times_seen":2,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/images/flags/ru.png","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /images/flags/ru.png HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 15316\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 21:32:36 GMT\r\netag: \"69792ef4-3bd4\"\r\nexpires: Sat, 11 Apr 2026 14:33:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nx-served-by: user.areapersonalall.tech\r\nage: 1260\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eQy97FwpsDGwJRPs2f8sU1TT5SkuMXvROVMzUY1b2W6rNxZJhEesxQ%2Fok5%2Fbw%2FhjgIcigvR%2BhF%2F6cnTmeaVjnMf8zBYCAANSrDqGMvqX5CadxyuxW6BxkEOzXglFbJEtE2UYJvGn8bQeMCqc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296adacbcb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15316,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"9ccc56af6a1ea3efa9202acde64f090e","sha1":"a80f89c00c84534da6bf5d3818d8c0d8f0c90681","sha256":"3611be9c56fd0934a537af867cc57bb62b3d0941ead3d7517f7382d7ce6e2ef4","sha512":"6061bf52e07ed5503096764034028388fa315b5ca327d284700f1a3d5e84113900d055fe2ee0cef5edc778a10fc701222a1e500b801cec37972457d4ce042dd2","ssdeep":"384:8vRPGQmn3DfhTdVv3z+Z5FX5uVVEq/t0WwDbGL+:8vpQ3rhwYVEqV0W26L+","tlshash":"7462aefac9b7b561113c2c120a25355989b7cfe90a113c48b48ca3ba5d8deb1b2646cf","first_seen":"2023-07-19T09:00:29Z","last_seen":"2026-04-12T20:32:04.96775Z","times_seen":166,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/fonts/woff2/Montserrat-SemiBold.woff2","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.458Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /fonts/woff2/Montserrat-SemiBold.woff2 HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/dist/css/app.d8ffbb.css\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ; user-theme=light-theme\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 61492\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 21:32:36 GMT\r\netag: \"69792ef4-f034\"\r\nexpires: Sat, 11 Apr 2026 14:34:53 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nx-served-by: user.areapersonalall.tech\r\nage: 1191\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lKt1CO%2B8aExBoXMuppx7UvYcP8FKJFSuDMuJZrPSLQKn9UwNLOLYPS8hHSjyfsV4rymfpAkLy4NXXrUOmF2VGTTZjeWzDmrDCZ%2FAy9v69hG0rAQ9LWJauv3gti4lrooCENzbiXHnJIEwxKmD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296ae1cc2b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61492,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 61492, version 1.0","md5":"14eeabe0485c1574e0765ea4f4db321c","sha1":"5a593ecc49d77af008bd4e2b5cc721b517940390","sha256":"defb5292312d3eb578c0eea6f795f3f0f79fa76d67a5c4a774c1d8e5517a49b2","sha512":"7e1733343b7a36a554d1800cd22a23cf8eb79ddcec37c67166c616cd3b38246beaec07d6bd32048f1be00b3555d3a36db19ac2596ca56c825c9a18c966d08697","ssdeep":"768:1ekhrk0/0BygMb+HSp83sQUwFoDYufWsiL0xFwKVvLTrRBziTewrEp9FM6kfKBpH:13JkNHSp83uKoviYxDrRZJpgP2pGmnWk","tlshash":"2853023d77de0ef86d9d6b52fa2079198bfb350cc5a05a04d4c90bee93e07187a4e252","first_seen":"2023-11-17T00:59:05Z","last_seen":"2026-04-11T23:17:47.786561Z","times_seen":252,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/fonts/woff2/Montserrat-Medium.woff2","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /fonts/woff2/Montserrat-Medium.woff2 HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/dist/css/app.d8ffbb.css\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ; user-theme=light-theme\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 61604\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 21:32:36 GMT\r\netag: \"69792ef4-f0a4\"\r\nexpires: Sat, 11 Apr 2026 14:34:53 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nx-served-by: user.areapersonalall.tech\r\nage: 1191\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYGEmhmMivIe1nbPDXhYvMt9gmi64QtR1vOIAuadctrLNbRJqChTNt76xxuvKcZceyd4U3yD1VNR4ZARmJM8ssyRJjvpeokED2axawLiqXFzimIi2GhSNhUDX9eZyP%2F2xTAFd%2FO9Fdc%2BL%2F98\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296ae1cc3b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61604,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 61604, version 1.0","md5":"4fc142ae24cbe291cbaa0bcd7d3895bb","sha1":"a6890be8518faff0698fd211ba32bbc74226d329","sha256":"535beca8eb5df516ef813a1b8b716925345dd079b7aa10bc83f8794d65e1e7f3","sha512":"cdbfed08c18d98a3da833bd3b1e7e3a54c8fadb2721669b635428dcbb0a1cf548c2682a7c84a75c086949ef859c08d84aaba0c22d8712c0bd012b37ab8df2714","ssdeep":"1536:BEr5GG0ZSgMn0+eDb2hRvIX+MU2bHZXnL3yvWpGs:BioG0ZAnDeG++MU+DwWpp","tlshash":"8053028e4b48b5b9f50be2b0b821a142be4f55cc63b2b6be77dd5580379f0cc0608c69","first_seen":"2024-04-17T20:54:06Z","last_seen":"2026-04-11T00:35:06.694805Z","times_seen":299,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/captcha/default?UFa4mMOr","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.688Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /captcha/default?UFa4mMOr HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/en/login\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ; user-theme=light-theme\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: image/jpeg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-disposition: inline; filename=\"image.jpg\"\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: XSRF-TOKEN=eyJpdiI6InZiemU2NkdRaHUxaFMzZjdyb3Fxenc9PSIsInZhbHVlIjoiTFE2OVVGV0s5TnZXMEJrL2EzNjJramNOTG8xMlg0ZWtJMnl1TTc5SXBxQ3hMY1YwR3ErSjNhUlh5TmtFa2RSZHVyQWN2M3JyTXE4MGRXandpcEU5U0N5SWliaWFWN2Z6bitFWTNIemlXYVIxVHhlL2pYeUlYZFJBbVlmUkwwbE8iLCJtYWMiOiJhY2ZjODM3NGI0YzhhZTFjOTM5NTIxYTI3NzYxMDBjOTM1MzhkZjI5NDgyYzlmN2EzYzU4M2EzN2E5NTI3NzQzIiwidGFnIjoiIn0%3D; expires=Fri, 10 Apr 2026 16:54:45 GMT; Max-Age=7200; path=/; samesite=lax\nclient_area_session=rFouENree5C2LZVWmUA6Qlrx4ue9sNyIz63E0iLN; expires=Fri, 10 Apr 2026 16:54:45 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nx-served-by: user.areapersonalall.tech\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BDXVg4Ym2kvHK2SUoQ0DH%2B6LZem5slK9Q3AdOSFir3XQlyC1iffJIa5mdjx%2FGGTtYeZEC9qxt5YyjEbpSss30nXOuIHJek5jIy56ho3J9MQilRqmBqbdFeMY5lV2oW6ply7alngTWddfacl6\"}]}\r\ncf-ray: 9ea296af9cceb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1809,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75\", baseline, precision 8, 100x34, components 3","md5":"4a63878b7472179b80c40f6cb729dbd6","sha1":"1adcd8ce0028f5a35b5c32cee019f1ae66bb1e78","sha256":"eea2e73c5ec7518bc1ab7e4cde6a6bdbf5447288daf49cd2983aaf41b7b1e711","sha512":"62939b8a38c43cfee196b953358af269533ea9f8fc4701aa6e87570aee05dba48fc57505c7cb6f14339f0e26f057d32918aae35a0dc2eddd613eaedd164d3b87","ssdeep":"","tlshash":"a131c9394b1113804f2700fba9961626a1c5764676e4b7323f2346728601efbd08d36d","first_seen":"2026-04-10T14:55:12.743226Z","last_seen":"2026-04-10T14:55:12.743226Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-10T14:54:44.403Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:54:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nset-cookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ; expires=Fri, 10 Apr 2026 16:54:44 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rj0i34poYvhkEFHe8a2yfVzN4a8Sk%2F98zsUtJBn8984yQub9j9cpnr57XcDlvqFUW2uzubhAFwu2GDIet%2BOUBOJRzYGZQanf%2Ff54pS5JtrcBKUnC3z3DVs1kUqtQfjOaELX5BDwircEreL26\"}]}\r\nx-served-by: user.areapersonalall.tech\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9ea296a7e982b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1798,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"9ead5552fe86d534cff72dc439da9a15","sha1":"785354b18aed6776c21ab8f5011733422c029240","sha256":"90a7791f313df48e7fac056f8c4722c210793cd3cbffa693305da34107b3b0a3","sha512":"5353e6b1c6102f6d44e216bb12c85d75482184781ffeae30455014485c91f29c3ec7d02bc6055020f8199699e5f835c01912c90811ce741f5328db3c39326a96","ssdeep":"","tlshash":"963143ef58240c1f621292541a9b760c5397842aae4a7d30bece97694fd43cf8077ba4","first_seen":"2026-04-10T14:35:22.428528Z","last_seen":"2026-04-10T14:55:12.745617Z","times_seen":2,"resource_available":true,"data":null}},"time_used":414,"timings":{"blocked":54,"dns":38,"connect":1,"send":0,"wait":306,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.org/dist/js/544e74e1ac7b6ea3.js","fqdn":"user.areapersonalall.org","domain":"areapersonalall.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.228Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"areapersonalall.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 14:03:11 GMT","end":"Mon, 15 Jun 2026 14:03:10 GMT"},"fingerprint":{"sha1":"52:A8:EC:87:3F:3F:BD:73:34:EE:A1:CE:A6:B4:C3:4E:0B:DE:79:F2","sha256":"29:67:B2:2B:14:7A:EE:8E:BD:E6:FF:67:A4:60:13:74:60:6C:D0:AE:F2:E6:15:EF:38:05:89:7C:10:CC:19:DC"}}},"request":{"raw":"GET /dist/js/544e74e1ac7b6ea3.js HTTP/1.1\r\nHost: user.areapersonalall.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 18 Mar 2026 13:39:00 GMT\r\netag: W/\"69baaaf4-4c1d\"\r\nexpires: Sat, 11 Apr 2026 14:33:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nx-served-by: user.areapersonalall.org\r\nage: 1260\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MDof3TIetF12AS16VdI9qVuc3ptzS%2FfpHziMcoS8Z1yu4WnTfhYROvwxNA3VQkizOFJm7IS2I8OuV5ikjEZaAFuPhiGOC%2BDTBXgjBlKkFqjCn3pRkW2IhPootMYhKOIZGrV5%2F%2FTqFJCeogY%3D\"}]}\r\ncf-ray: 9ea296ad0cbd32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19485,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19483), with no line terminators","md5":"f781c4f2c025a446576cdb787e937222","sha1":"74b15ce21b0c3822c77b954a05b1fdcaaaac3734","sha256":"c93df6cd3f2abfe6f09a2bd2136fa04382f780ebc8f993e636cfc25c9d5dde7b","sha512":"f222b1f53dcf201d5661564bd6efc880624e087bc206d426ab93df7170e5a45a6f75b9a01e5250bb440c6f43ba0185fd27f168ccb05b4ebcb72c64988d55405a","ssdeep":"384:Qra+yEK8+yh9uaQvOjr15CH9T+Kh0+O2u:sAEK8ruMjR5+FK+9u","tlshash":"50928525aa0d7e330e9395d2bcce4d95f5d45086d2a38ef79a9cc00952c79a4aef301f","first_seen":"2026-04-10T14:35:22.440433Z","last_seen":"2026-04-10T14:55:12.747376Z","times_seen":2,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":51,"dns":29,"connect":1,"send":0,"wait":12,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.org/dist/js/7912c3da78fab23e.js","fqdn":"user.areapersonalall.org","domain":"areapersonalall.org","tld":"org"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.273Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"areapersonalall.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 17 Mar 2026 14:03:11 GMT","end":"Mon, 15 Jun 2026 14:03:10 GMT"},"fingerprint":{"sha1":"52:A8:EC:87:3F:3F:BD:73:34:EE:A1:CE:A6:B4:C3:4E:0B:DE:79:F2","sha256":"29:67:B2:2B:14:7A:EE:8E:BD:E6:FF:67:A4:60:13:74:60:6C:D0:AE:F2:E6:15:EF:38:05:89:7C:10:CC:19:DC"}}},"request":{"raw":"GET /dist/js/7912c3da78fab23e.js HTTP/1.1\r\nHost: user.areapersonalall.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Wed, 18 Mar 2026 13:39:00 GMT\r\netag: W/\"69baaaf4-30e0\"\r\nexpires: Sat, 11 Apr 2026 14:33:45 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nx-served-by: user.areapersonalall.org\r\nage: 1260\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=psDFnad%2Fl2CPyr7NLN57DNTcJdai8%2FfzAbEHrUzH2BE%2BBZXmM1dHW4wh8%2BZiT%2F7F1Htdr8ApUxjlT8TosFwDWRgOXdsuCFzHH%2F%2BeOGHg%2BRvj1Fm5JG70bHw3HZLfdiq97aOCJCoGDsjxXxo%3D\"}]}\r\ncf-ray: 9ea296ad1d0e32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12419)","md5":"7d4eb9f1529f6ea671eb4f7bea319f49","sha1":"d6334e9e674c4d58d5d598ab20f012073c472eac","sha256":"612d5dc5e0ade30e382ed8fa9148c45af3d366e6fae16f6ccb1635aa399328a7","sha512":"2be558006afb82fdce5b46c618a3f6648ae2f5426f2f2f79b38bbea02fe5b315a1abc08852b6105c72f1faf2e44b953477bdae623440a9aee8f38a04874d1a65","ssdeep":"192:zLGHskm9DIILKYX9YhT3Fh/b5fElsnQlOkWG/u9i7FVpbI/2MKiAEARAHZ:Pem9xLoT3b5fIsnIjWG/AiBa2Fr5G5","tlshash":"d042e8e6f8d7f8ba0a8b60b040ff1009f2355915d81d8491f378d5e4aeb448a877af1d","first_seen":"2026-04-10T14:35:22.441611Z","last_seen":"2026-04-10T14:55:12.749031Z","times_seen":2,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":9,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/favicon.ico","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: image/vnd.microsoft.icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q1tgOcd2WqS%2BkMAVa5zJ0L9bEWNPkC3FDzR3H1nLj7GvXkNnliAAUVBAIoMIrXKtt%2Bawzohd4W53CAYVrV1NJMTNQAZUoq91uuNV%2B42gUz9fA0%2FO8Wl1kvpf%2B1hoKEHVC4NC%2F%2Bu3TUeQyFfR\"}]}\r\npriority: u=6,i=?0\r\nlast-modified: Tue, 27 Jan 2026 21:32:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nx-served-by: user.areapersonalall.tech\r\nage: 1259\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"41c1e-649655cbe991f\"\r\ncf-ray: 9ea296ad6cb7b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":269342,"size_decoded":0,"mime_type":"image/vnd.microsoft.icon","magic":"MS Windows icon resource - 1 icon, 256x-1, 32 bits/pixel","md5":"6b5248fb2584138c3450030412249ea2","sha1":"0c869f43855bfd437e0bb0a93baca281c127c385","sha256":"ede7f9be0e1a436521bc56c85c070d7053596425c70c3d4308f44e5b4949924a","sha512":"de08be935b27e4342974f171aa18ee20b58f7528518653468a3d7495f894e17d57d489c9165dff80fda9788390e532e57546873eb6b3e2ac9dcea7886b867143","ssdeep":"3072:30F8l1EKVeykpuCYFYajjjjHjjcjjMjWjjh80MTfQKk+mbkmkfaxmE4jbMkwNCvl:YmFoYfQKkxbkmkfaxmEkpYEAd","tlshash":"084433a33d00450dfeb626fb6417d91812865e8a6db8d6c053823dab1ffb79ec046f16","first_seen":"2026-04-10T14:30:42.084134Z","last_seen":"2026-04-10T14:57:48.950929Z","times_seen":8,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/images/flags/en.png","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /images/flags/en.png HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 19575\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 21:32:36 GMT\r\netag: \"69792ef4-4c77\"\r\nexpires: Sat, 11 Apr 2026 14:33:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nx-served-by: user.areapersonalall.tech\r\nage: 1260\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GzLh60HHXtumiMRwQ%2Bsm0l0AQeG70GD7TR2UH45QJ4AUPeWlOwsEb6fNHw83qRraw3mhocHAwebrmWoY1108ssIvuozzDEfIGynOHji4klu4jJJ5mEI%2F584qmk7BWUZH7WuQid%2BnMIaKLA2s\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296adacbbb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19575,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"aac0dfefc080856931658ea9c760534e","sha1":"6495d0a202721472461a53b11c79aea953184a7c","sha256":"16d2af8dfe6bff63fd76dc7434e09f1c98de85b1aa8d35ab98b473bae3c1f97d","sha512":"b515165c08b5ce687c5e346d0ccebef61c18479e0cc351d03206c22271093564b9bd5d71bb172f37c2d36c11c74d1f8360878b39dd5e1d5a1e16ca7f99e6f40f","ssdeep":"384:padN/jQnWhc1RHy0kXMsjjGabl8QAQObXTbzR3S0Ay25iW0yIVu9EUaYwu:paXsn/1cTMpaIXT/RCyHH6mw","tlshash":"e592d16a46a7857368484a387c4c41a883e94d0f139f322dffcb69c46b767395577882","first_seen":"2023-04-14T10:28:17Z","last_seen":"2026-04-12T20:32:04.946283Z","times_seen":484,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/images/flags/de.png","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /images/flags/de.png HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 11636\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 21:32:36 GMT\r\netag: \"69792ef4-2d74\"\r\nexpires: Sat, 11 Apr 2026 14:33:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nx-served-by: user.areapersonalall.tech\r\nage: 1260\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jAtiiADQeqcc8UXUDqEfZ6pEdPxWkcyRWIAHX%2Bs3nfcf%2F5tDIrSREJ2AgL0wj92TVzmPn5unrjp51HhkVdwGyHTHocyGzqJGR5z0NO5ALc5%2FfP6qf8a43%2F5G%2F5Oyl0OY2OZc%2BpuwyNchFDMV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296adacbdb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11636,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"85ca59c60c9179d7b3e9b6ab03b407c7","sha1":"ab58b6b91fd5a7c243389fc49dff53bb7f0f94b5","sha256":"9ead1bc194a3a01035de7f65160c91b32604d2c788b35a914543c34ef451cd3a","sha512":"bbf638632641ff706be47c571e497791849762cb44aa48fc5e463c858502978242dcc7b0e48c221955ee3d69bb12827f3beaf19e5c7c9df5590ac84279bfb93a","ssdeep":"192:2v8a0x4vU3LhpYh1P4Mxs0zOFCrYh4+57ZXFpYUJTHPAv0EheZhcaxH:2vgxpNS13dzOSYi49XnjJTYvPu68H","tlshash":"7c32c06e8dfe5f565627535afee05780d48c677cb4d14c8463fa62216a500c3d6480cf","first_seen":"2023-04-14T10:28:17Z","last_seen":"2026-04-10T14:57:52.052814Z","times_seen":146,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/dist/css/app.d8ffbb.css","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.003Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /dist/css/app.d8ffbb.css HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 18 Mar 2026 13:39:00 GMT\r\netag: W/\"69baaaf4-6e240\"\r\nexpires: Sat, 11 Apr 2026 14:33:44 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\nx-served-by: user.areapersonalall.tech\r\nage: 1260\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ACpKjnQsPiH7o7c2ghrI7Bc5hDFl4sSDhvqdOK0vCXSbh8k54bnv15MFRWA61%2BSofCgNS2165aUK8cHnmc6%2B5gd1gbF2CwRcIfEAW3VRcbjLwycROS%2BJSGzentFI4e34aLcwThGDh%2BWn0IPR\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296ab4ca8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":451136,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (55327)","md5":"3a12f7c679dba04b82c8fbaccb71e630","sha1":"1e2df0b5e81328d48e166fe72d738ba43f4f7405","sha256":"e2701eaaddba9a197bf7c4b2b70d4aff7586c6457b9cdb373f36f86c99048cf6","sha512":"a2cbf02c7d5fd2ce05edb0cb3e138b3bf68113f5c11ae6344d99a1587d39ea73f7632f3c1e6a5eedb4275d92fcfcca28d05d7c0f91a8f405125547a23b086e4f","ssdeep":"3072:uLnkJ9tfopoJbzGlKpje60I45xFjCvnh62Lum/1ZtS:uLn69tfoqJZpje60I45xFWvnh62LR/tS","tlshash":"8fa4b7a1f194743ff857c167a185febca52ba845eb220f69f003737852c36c61973a98","first_seen":"2026-04-10T14:35:22.43846Z","last_seen":"2026-04-10T14:55:12.753078Z","times_seen":2,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"chat.unichat.icu/widget/chat-widget.iife.js?5","fqdn":"chat.unichat.icu","domain":"unichat.icu","tld":"icu"},"ip":{"addr":"104.21.81.102","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.006Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unichat.icu","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 09 Apr 2026 11:45:43 GMT","end":"Wed, 08 Jul 2026 12:44:09 GMT"},"fingerprint":{"sha1":"A3:AB:9D:90:DF:62:58:81:E5:95:C4:8D:CC:54:28:03:55:35:77:1D","sha256":"D7:20:FC:99:42:7F:E8:A8:4D:B0:66:E9:8E:6B:33:E2:97:79:9F:32:87:28:13:96:97:76:EB:BC:4F:55:B4:7E"}}},"request":{"raw":"GET /widget/chat-widget.iife.js?5 HTTP/1.1\r\nHost: chat.unichat.icu\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 31 Mar 2026 20:06:44 GMT\r\nvary: Accept-Encoding\r\netag: W/\"69cc2954-58c4b\"\r\nexpires: Fri, 10 Apr 2026 15:33:44 GMT\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nage: 1260\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A7PhoMNxQIs3P467TimINboePEaKpuTby7qKZYbQ1gzYJUc5BLCJnFjBKU0LPXY38sNKe9aoCaZc8aqIs1jgdjP6WC3ROGre9KdgwpquoMwlzMjMK%2BhtZGRVAfoWmOlQHfpk\"}]}\r\ncf-ray: 9ea296ab9d65b505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":363595,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"70d493d3b92c9da6841ab65788ebb012","sha1":"bd955d7fc7278f2f1a3afd1725e2d59a1d554685","sha256":"fa2a9c518cfaf84dd0e85c368290d16ea1c53eb45d7fdbd3910ca41f107a5857","sha512":"b0a82fcc153fdbd94d150fae18a27ea7448d435bd0a4af069c0caaa91434c7eda430103e678090c4cffcdecf16037df6a38ec59d0e00e5723598d024f413b7f9","ssdeep":"6144:slB3V2vcZQgQ8+tp2z0OeeSoBE15sWaRSpjWfdctPscZeyvYpCeZOxY8mbGHDa5b:mV2vck8ZKrjon5","tlshash":"fd746dd47195303953b3a0e1947b110ab33c6a56b005c0d8f27ce9fa6da799aa237f7c","first_seen":"2026-04-07T00:25:28.555945Z","last_seen":"2026-04-10T14:57:08.429289Z","times_seen":10,"resource_available":true,"data":null}},"time_used":114,"timings":{"blocked":45,"dns":24,"connect":3,"send":0,"wait":18,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"ws-eu.pusher.com/app/c6b40a06427b43ca0169?protocol=7\u0026client=js\u0026version=4.4.0\u0026flash=false","fqdn":"ws-eu.pusher.com","domain":"pusher.com","tld":"com"},"ip":{"addr":"52.211.123.146","port":443,"asn":16509,"as":"AMAZON-02","country":"Ireland","country_code":"IE"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"pusher.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 30 Mar 2026 00:00:00 GMT","end":"Tue, 13 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"29:DA:53:43:6B:24:92:CC:A4:E1:6A:D3:77:8F:CE:79:79:70:ED:37","sha256":"D7:C3:47:23:CA:13:19:02:24:9C:18:64:27:82:BE:D3:70:8D:7A:EF:3D:49:21:75:FF:5E:24:15:14:74:40:3E"}}},"request":{"raw":"GET /app/c6b40a06427b43ca0169?protocol=7\u0026client=js\u0026version=4.4.0\u0026flash=false HTTP/1.1\r\nHost: ws-eu.pusher.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://user.areapersonalall.tech\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: APdiMYipIqiopp9xuf6btw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 10 Apr 2026 14:54:45 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: fBq81HM5o3BK9OM+IDMiq9ADQnk=\r\nSec-WebSocket-Extensions: permessage-deflate; client_no_context_takeover; server_no_context_takeover\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-12T20:55:58.966498Z","times_seen":13677413,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":0,"dns":150,"connect":183,"send":0,"wait":35,"receive":1,"ssl":228},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/fonts/woff2/Montserrat-Regular.woff2","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /fonts/woff2/Montserrat-Regular.woff2 HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/dist/css/app.d8ffbb.css\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ; user-theme=light-theme\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 61160\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 21:32:36 GMT\r\netag: \"69792ef4-eee8\"\r\nexpires: Sat, 11 Apr 2026 14:34:53 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nx-served-by: user.areapersonalall.tech\r\nage: 1191\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GUUWLaNY37UqZLm3Wccqqh4ZQMnfJm%2F%2BxBvYklw%2BRB9miupLPdEwVknK63dfzCZfz6itih0xJH1NQTwqF1wUht3hpNShUEVsRDeUYEYN24hvOC83U6lpML%2FWB36mJ8ZESswJPnEEBrPQqtR1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296ae1cc1b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":61160,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 61160, version 1.0","md5":"2a553f7d05e27a1396aa3f03c296e268","sha1":"a11ef5168b23333a6a64af472849d9d4d2165cf3","sha256":"133eee529400866a00fdd329c3b253d6c4a4e8c87c40ab502394e4f8cbd4789f","sha512":"db957de32ef0a4afd2ec079532b00bc8164ef90ca6c3eddbf467699ea714241db0aeed6dcf32ad4a0ac8cc4eb265856f5fefed57b3e6ccd254d9b6798a0fe08a","ssdeep":"1536:Mt5ij6crjbjegECyPRmdUDEpW7aWTIEUcJQbIFHeQS8iN:Mtc6Mzr2RF7aWMZXIFviN","tlshash":"dd5302fd4e5c22fad859f1885e070815e20ac4fa54dbc7543a4a8e0e763413df2d9b9e","first_seen":"2024-04-17T20:54:05Z","last_seen":"2026-04-11T23:17:47.793319Z","times_seen":316,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/images/auth_bg_light.png","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /images/auth_bg_light.png HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/dist/css/app.d8ffbb.css\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ; user-theme=light-theme\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 939984\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 21:32:36 GMT\r\netag: \"69792ef4-e57d0\"\r\nexpires: Sat, 11 Apr 2026 14:33:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nx-served-by: user.areapersonalall.tech\r\nage: 1260\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3bSwjl2RfaDUx9%2BmSlVYmcY7J%2BBe%2FbQkmapcJM1eP2C0QfoQdHlf39C6QUQICTXXvoylLayVqDwI5NujfmWyooEJPJmuZBMvXdfRaQbUFYHskmTpB8k%2ByXsnrU%2FGIU%2BgIzv9%2F0avt15pI0G\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296ae1cc0b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":939984,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1520 x 952, 8-bit/color RGBA, non-interlaced","md5":"67ce7fb3019a352f3e032d1b2cbbc2a6","sha1":"c4efeab44413379197883fae35c6aa93c4ab424e","sha256":"876475b753339de759395b7895d6256d6dbf3ea6fb35454f4814ff1df11a33b2","sha512":"fc7093ddaf28e9d52a42f73597fdc4b34484d8e952d0c27333895b3798767199cb4e094a2a5586792d9cd9f46eae1545641d6c94462c495abd71eec913da9343","ssdeep":"12288:wk8hDxS8BcLritLbd0hWXeh7f6NBa3OoyzfrxFGFmC5Q3CB8sXOBBGCfRhg0DY7t:y9OqtPds8aefzfrxY/phXOBjfcIi","tlshash":"ec15331443bb5a116702110a4ad68fe1bafbc52c24b17b0c719e66e3ce9d7cf14983be","first_seen":"2026-04-10T14:35:22.434928Z","last_seen":"2026-04-10T14:55:12.757082Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/images/flags/pl.png","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /images/flags/pl.png HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 14629\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 27 Jan 2026 21:32:36 GMT\r\netag: \"69792ef4-3925\"\r\nexpires: Sat, 11 Apr 2026 14:33:45 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\nx-served-by: user.areapersonalall.tech\r\nage: 1260\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tduIDwd%2BfQthHugDRIb50UGoXNpKDdKzU7xsjmkX9YZN%2BwbN%2BTH4lz9rpVXadpxKTD1cIWLmPlKBJedKmOEN1dFM69oggh%2FIhZIaO7LGexvL3u8aEJfiWO0WgqpksFKn89mV%2BRSfH7fMz170\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296adacbeb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14629,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"868fadc6ecc18fff7e33d76ca610d78e","sha1":"2dbffe386835719f77668cc7be46811b8718b343","sha256":"75397e14768e3f7fee047835153d8a004943c85f8e79c8ebb668441cc8846df5","sha512":"22cb7506458312db7f5b88bcab27462a8278a5e9c48887ae36f55f21557cb1da48b6c7aab96c973cac94f16e99e108439d1610ee6b371aa74c08d6d84cc11eee","ssdeep":"384:vthxPIbAKh7JUosWHDNsXa2Jfuhvv8PnqD1n9e:vRaAQ9LrDNGM9G","tlshash":"7062c0ed1cd9a9fbb1ae4b40ef22463db5521074c732cc71a30cab1829b726429cf955","first_seen":"2025-01-06T21:31:57.065445Z","last_seen":"2026-04-10T14:57:52.06088Z","times_seen":55,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"user.areapersonalall.tech/api/captcha","fqdn":"user.areapersonalall.tech","domain":"areapersonalall.tech","tld":"tech"},"ip":{"addr":"172.67.167.203","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://user.areapersonalall.tech/","date":"2026-04-10T14:54:45.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"areapersonalall.tech","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 23 Mar 2026 08:37:31 GMT","end":"Sun, 21 Jun 2026 08:37:30 GMT"},"fingerprint":{"sha1":"82:11:36:32:71:FD:56:9C:C4:4D:D3:17:E5:88:A7:41:70:17:DE:19","sha256":"E0:06:C1:B6:C3:6C:9D:DF:12:38:DF:83:86:48:07:64:AC:2C:B8:E9:14:B9:C3:68:48:7F:D6:E2:03:FF:63:0A"}}},"request":{"raw":"GET /api/captcha HTTP/1.1\r\nHost: user.areapersonalall.tech\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json, text/plain, */*\r\nAccept-Language: en\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://user.areapersonalall.tech/en/login\r\nCookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ; user-theme=light-theme\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 10 Apr 2026 14:54:45 GMT\r\ncontent-type: application/json\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\ncache-control: private, must-revalidate\r\npragma: no-cache\r\nexpires: -1\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 59\r\naccess-control-allow-origin: *\r\nset-cookie: client_area_session=xfnQgTQfGySdSPVs2R7ESFkAXoxJQoNwq54xxZiJ; expires=Fri, 10 Apr 2026 16:54:45 GMT; Max-Age=7200; path=/; httponly; samesite=lax\r\ncontent-encoding: gzip\r\nx-served-by: user.areapersonalall.tech\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LaajcOgrkT3nPTZa%2B9p6gZvaFtgjRGLGCgLk6u9UB0UnI7jvE%2BQNTxRKBfeiuGI33t9mvpIzKFjZHvjSIbMhHPOzQEfRtoLHNTtpTQTijXktbfmvi3KGtxERU4zYIJjoMloZFfZp1ZIJ0IX6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9ea296ae1cbfb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"eb42febc4c89c7c0fb0723b3709a2d31","sha1":"48d1ece5f7b1d7120f7e7db47e0e8a86e4f6e306","sha256":"eff7e53a9e6a15e41a46e2a67d6b3a61ad48b86d475fc71f50a23e2cafe2429f","sha512":"250ecdcd6b9db4160c183dbd5e00ab353a8ff77d901092fa094b6dccd427377e8e0337618c9c2782ecb666faa1e349ffd773b42efff16cb270ecdcbc3bd94d5d","ssdeep":"","tlshash":"fea0223a3b828ba03e8003c0e33cc2c8c083082bfccc30022a2c8a0c03080ccc20ce88","first_seen":"2026-04-10T14:55:12.759645Z","last_seen":"2026-04-10T14:55:12.759645Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-10","alert":"Sinkholed","trigger":"user.areapersonalall.tech","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}