{"report_id":"5c6ca48a-31f6-41b2-afb9-dee6b1c51da4","version":6,"status":"done","tags":[],"date":"2026-04-08T20:37:43Z","url":{"schema":"http","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"title":"Microsoft Sign-in Redirect","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.54.45","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-13T20:37:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-04-08T20:37:20Z","timestamp":1775680640,"ip_dst":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":34216,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI","source":"{\"timestamp\":\"2026-04-08T20:37:20.273972+0000\",\"flow_id\":1578824550586625,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.19\",\"src_port\":34216,\"dest_ip\":\"104.18.50.34\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2062569,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare R2 Public Bucket (r2 .dev) Domain in TLS SNI\",\"category\":\"Misc activity\",\"severity\":3,\"source\":{\"ip\":\"104.18.50.34\",\"port\":443},\"target\":{\"ip\":\"172.18.0.19\",\"port\":34216},\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2025_05_27\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Major\"],\"updated_at\":[\"2025_05_27\"]}},\"tls\":{\"sni\":\"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":789,\"bytes_toclient\":2595,\"start\":\"2026-04-08T20:37:20.268545+0000\"}}"}],"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-08","alert":"Phishing Block","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-04-05T23:57:55.191025Z","alert_count":0,"request_count":3,"received_data":2465816,"sent_data":1495,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2026-04-06T05:40:12.052667Z","alert_count":0,"request_count":2,"received_data":816000,"sent_data":878,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets5.lottiefiles.com","ip":{"addr":"104.18.38.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-03","domain_rank":1873573,"first_seen":"2020-11-16T17:45:01Z","last_seen":"2026-03-31T13:58:05.826882Z","alert_count":0,"request_count":2,"received_data":277470,"sent_data":1048,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-23","domain_rank":0,"first_seen":"2026-01-05T01:53:18.814777Z","last_seen":"2026-03-23T12:38:09.293748Z","alert_count":8,"request_count":2,"received_data":45433,"sent_data":1025,"comment":"","tags":null,"fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"logincdn.msauth.net","ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"domain_registered":"2018-10-25","domain_rank":23083,"first_seen":"2019-04-23T01:13:28Z","last_seen":"2026-04-08T16:12:50.98145Z","alert_count":0,"request_count":1,"received_data":4352,"sent_data":534,"comment":"","tags":null,"fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}]},{"fqdn":"prod.spline.design","ip":{"addr":"54.240.174.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-04-20","domain_rank":1418142,"first_seen":"2023-03-09T07:21:21Z","last_seen":"2026-04-01T02:12:25.181311Z","alert_count":0,"request_count":1,"received_data":531,"sent_data":525,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-26T09:20:59.580165Z","times_seen":46408,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f58ffd4fc3ad4fad71d90b5922109e7e","sha1":"a9209eefd9faf424012b06f9318e9111396a6cd2","sha256":"8b1ec21a36f7fc8946af1a6e6506d4beb021a9354851549deac984d44e4ce308","sha512":"55c18862e96854e947249681164af9fafe946ec9eebe98b92e3473cc1beeecd5190e0f44a1f1f5b502ba2b5d17650e572a8dee702921a6b880b0edd63dcc6af1","ssdeep":"","tlshash":"bd3136fc18f34517848711ae86cfa33a64a854e74d2bbcaa365d48898fc91cc12b4b79","size":1571,"data":"","first_seen":"2025-02-26T13:52:21.256576Z","last_seen":"2026-05-09T18:32:54.826822Z","times_seen":394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e631bfda54b90a5bc4815c52cfa85a04","sha1":"3fa1734070aa7ea757bed0469634e1cebb0b8461","sha256":"f4fccee4bc805039e960d113d8405df60c867c2b0ece8285a7ba11e25ae2f64f","sha512":"75545c258ec0fa961ef67db6a98e11c22a99a05bcfe3525487cfc21b9ea7ef4fe932484e15f98e5afdacee7e90ed472803784ff005e4f8ce34de29622068badd","ssdeep":"192:E/wVfnwl27SVTCYiKwuSX1AKihXK601IEhQxsswVBFIXtw2MqJy6xpCZCYG4ICkI:E/GP57gxy4KThQyswVBFIXtw2jdxl+","tlshash":"c8223d9d38e321715aa7713e570f614a3936414b340deda8bc9e93001f25f6acae3bd9","size":10816,"data":"","first_seen":"2025-04-03T12:00:26.915194Z","last_seen":"2026-04-08T20:37:48.608144Z","times_seen":31,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","size":383981,"data":"","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-07-26T02:42:06.820174Z","times_seen":4729,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9f6d5a090e3150aa9af94092bcfe9894","sha1":"1da725846f7c644e56eb1536607098d9173c9bfb","sha256":"45476948bbac9896ba3148290c27d68a4b8b6f45481099f5bac9b62fab75acf8","sha512":"776f90ca2e88196397dc012ce70348f70642a93269fd4ad9fdd57c62c0a6e03d3f76518ec425a985128541390b617580984e64a1cbfddd9a90d4c2440963aaba","ssdeep":"49152:gabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4tgJSs89CqqqeC:WaHKPsqPjTxX6","tlshash":"04757de433a57027879b919650760142b33ab4d61809842cbe2cdceb7ba5c4672fffb5","size":1695626,"data":"","first_seen":"2025-02-26T13:52:21.259294Z","last_seen":"2026-07-10T15:06:51.919079Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"95cadf9e8fc069dcb441c7840e1d43be","sha1":"d74f35e2b9fee09f5958234f563f4f4817860e9d","sha256":"c6bd2306e99bad4b2a65dccbeeb0f972effcd3059fe00e03d0af026af4c95ab4","sha512":"659cea9a42df07e9a40c5ebedfddc1682f8590ed286b3936e281a9c1ce8a30fcece1afe143ead8f27a4a3d75c108583515134af40dc3e80b5628ebc20774299c","ssdeep":"","tlshash":"96b01218650a10dc45635035113f280b813530c325804014471aaac90f285681a3e569","size":96,"data":"","first_seen":"2023-03-08T07:52:53Z","last_seen":"2026-07-10T20:21:48.288961Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:20.721Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 08 Apr 2026 20:37:20 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 71\r\nlocation: /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e9411c4aaf80883-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":18,"dns":0,"connect":1,"send":0,"wait":23,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@splinetool/viewer@0.9.414/build/spline-viewer.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:20.723Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@splinetool/viewer@0.9.414/build/spline-viewer.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 20:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e9411c4bd1f712b-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KKJKGSMVKDHEQBRAZ04TYA5G-arn\r\naccess-control-allow-origin: *\r\nage: 243764\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Apr 2027 20:37:20 GMT\r\nlast-modified: Fri, 13 Mar 2026 03:23:25 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:RUdpSLusmJa6MUgpDCfWikuLb0VIEJn1usm2L6t1rPg=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1695626,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c06deae1e67461e65c7e7dc07f296fec","sha1":"3052613f5387e3c73f852c67e7c5d35e907bf8a0","sha256":"64a21852082e98f3adc3b136c328b46ae9d5c54edbb435ee9d3dbfa448ff9f7f","sha512":"3ab2cb7694010c3cf25810974349a8847ed989541de386307ce347b8fbb329a0c61ce99797abb0e4dade8df069b8070b9e963b5a857d303560a169ea6a50575f","ssdeep":"24576:f7EXabrhOqG4k9e6AhWTaHDt3MPsq9FjTxDIsL4t:gabrhOqG4k9e6AhWTaHDt3MPsq9FjTxe","tlshash":"b5256ce473a57027875ba096147a0446f33db8e61c08442cbd2c98e77ba4859b2fbff5","first_seen":"2025-08-02T03:37:30.982446Z","last_seen":"2026-07-10T15:06:51.915178Z","times_seen":165,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":28,"dns":1,"connect":6,"send":0,"wait":99,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:20.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 18 Feb 2026 08:16:48 GMT","end":"Tue, 19 May 2026 09:15:09 GMT"},"fingerprint":{"sha1":"F3:CF:0B:A3:28:07:E9:5A:D0:8B:F4:9E:A8:A1:9B:71:A6:59:38:23","sha256":"DD:EE:6D:62:AC:D0:59:11:F9:1C:53:44:27:F0:8B:A5:2C:A2:C6:C4:BF:B8:79:AF:A5:5F:B3:E1:29:E8:45:8E"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 20:37:20 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9e9411c4dba70883-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01K7QQMF8N1G3GB9FWMCHE11KT-fra\r\naccess-control-allow-origin: *\r\nage: 296673\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 08 Apr 2027 20:37:20 GMT\r\nlast-modified: Fri, 17 Oct 2025 00:03:10 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383981,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27447)","md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-07-26T02:42:06.820174Z","times_seen":4729,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":3,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:20.940Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 20:37:20 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::md8nh-1775101186152-d45e2b42ab64\r\nlast-modified: Thu, 02 Apr 2026 03:39:46 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\nage: 579454\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FGBhBCsrq9HI%2BSK0I1l5y1VJh%2FnI8vycDCNGA8pOTTf0gtn3nU3Rl8tRs7rlWXFHYdFKMyyJkDw%2Fo9g12yGeFXqF8Zt3bW%2FyylsotEHGHzuQVIs0LSh2I1TbXK8DoX%2B4WL6wT0Q%3D\"}]}\r\ncf-ray: 9e9411c5df1a783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-07-26T09:20:59.580165Z","times_seen":46408,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets5.lottiefiles.com/packages/lf20_zw0djhar.json","fqdn":"assets5.lottiefiles.com","domain":"lottiefiles.com","tld":"com"},"ip":{"addr":"104.18.38.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:21.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottiefiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 16:41:45 GMT","end":"Mon, 01 Jun 2026 17:41:42 GMT"},"fingerprint":{"sha1":"5F:07:4A:10:80:31:08:30:12:B7:4B:9F:44:21:AC:A5:F1:1D:57:4F","sha256":"53:4A:C5:EC:42:B8:00:BC:79:62:8F:C3:A4:F2:3F:16:40:27:95:E4:5D:0B:D3:7C:F4:C8:D1:1E:50:37:CE:88"}}},"request":{"raw":"GET /packages/lf20_zw0djhar.json HTTP/1.1\r\nHost: assets5.lottiefiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 20:37:21 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=WOVghQiikUXswvAr1RYUy1N7G0bujAKvQ.9CYcbBWWE-1775680641.4675395-1.0.1.1-8ZNUN.TTQMPpmd.xRwnBw4QrCzpc44jY4HIJRd2VLsWQle_VeGT6rPvB9pcjcyW0WR0fYKen.roNMmFM2BPM9ugGac9Hsg41UNbPXijTrw_3tYwBnJMx_muRczP6kg_3; HttpOnly; Secure; Path=/; Domain=lottiefiles.com; Expires=Wed, 08 Apr 2026 21:07:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 1800\r\nlast-modified: Sat, 14 May 2022 08:16:32 GMT\r\ncontent-encoding: br\r\nx-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA\r\nserver: cloudflare\r\ncache-control: max-age=315360000\r\netag: W/\"c17f786d1eda65296df13ddcbbe8e0b1\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 62e740a3ccdabe7c6d3d19052f330dca.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: psBsoXocwLbClB2PC64jxk0r5ftCgIraWWJB8euRVTpO9M-KIKg5nA==\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9e9411c92df28deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137719,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c17f786d1eda65296df13ddcbbe8e0b1","sha1":"5bd36e290accc798209bf0c2d8897c4bded7c309","sha256":"fb0b9c5e9bd3e094e3cf947100f3b3440263e1b9351c60e6acdad7a74fb0628b","sha512":"82b4fd37712240d460994de8086e057eef75ced412755e625acbb109e4aa9bdc010c064f87b366c12776f37460bf923c92870b4a925b86b590a2d6906d7e185a","ssdeep":"3072:Pp/mlCVNRCyMvjln4fI9MTblS6A32UZTvIDXkGJOUezJR7RG1V:R/mYCyMvjln4fI9MTblS6A32UZTvIDXL","tlshash":"9bd3cdc9067102ecfb192994cb8335d8dfc488567fc645edeaba5c188ba5aad3301f17","first_seen":"2025-02-26T13:52:21.241536Z","last_seen":"2026-07-10T15:06:51.910993Z","times_seen":399,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":49,"dns":23,"connect":1,"send":0,"wait":479,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-08T20:37:20.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:41:58 GMT","end":"Fri, 12 Jun 2026 07:41:57 GMT"},"fingerprint":{"sha1":"C0:16:76:CB:73:59:54:FD:EE:F5:98:D9:1E:84:2C:64:5E:69:4A:C1","sha256":"EB:7F:C6:00:94:82:C3:E3:51:75:19:72:94:30:B8:60:5D:EE:9D:90:4D:0A:8E:6F:2C:9A:F7:84:10:1D:65:C5"}}},"request":{"raw":"GET /index.html HTTP/1.1\r\nHost: pub-9e2030303d9b43ffaedcde988f24645c.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Wed, 08 Apr 2026 20:37:20 GMT\r\nContent-Type: text/html\r\nContent-Length: 17764\r\nConnection: keep-alive\r\nAccept-Ranges: bytes\r\nETag: \"bc4ecc4ef06fe8157d193ee662ce1931\"\r\nLast-Modified: Thu, 20 Mar 2025 15:21:52 GMT\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9e9411c1cd6e35a6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17764,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"bc4ecc4ef06fe8157d193ee662ce1931","sha1":"20f2c6c5fb6f082f24e3510c143351778b92a3e3","sha256":"8ee39429090ee45ae7acc55261f2972447f85276349c74df604d1ecf3363bf6c","sha512":"1b682ccf89eb652e2883af7e90d779178262a5d40e4e81fc492c22909f4e0cb380a82c86e7b8cd4fad22d4bbf691bc8bd3c06e77f036c03969801f5c3eebb87b","ssdeep":"384:kiSsY1ON59FX/GP57gxy4KThQyswVBFIXtw2jdxln:kiXY1ONhX/GhU/KThQyswvFIdwcn","tlshash":"8782a59e38f320325593617ea39b660a3d768507a50edd68bcad43401f82fa9c9d37e4","first_seen":"2025-04-03T12:00:26.911247Z","last_seen":"2026-04-08T20:37:48.599962Z","times_seen":34,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":22,"dns":9,"connect":1,"send":0,"wait":242,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-08","alert":"Phishing Block","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.26.2.143","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:20.720Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 21 Mar 2026 09:41:26 GMT","end":"Fri, 19 Jun 2026 10:41:19 GMT"},"fingerprint":{"sha1":"1C:D9:C0:8C:4D:FA:FF:5A:2C:CC:48:EB:7B:35:CF:FA:AB:7F:C0:61","sha256":"1E:81:97:52:8B:47:37:54:3B:62:1E:0B:E5:1D:D6:F7:F2:6D:CD:F7:D3:1F:8C:0E:78:14:26:9F:B9:87:EA:5C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 08 Apr 2026 20:37:20 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::t29bm-1775680631435-80355ee6a1b6\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 9\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O3k8q8ODX0GFnSj06ynPC5ZaVagivUpIyYyOo0OaJq6GO%2F8W%2FV975b8CkULOmofx4rKVnbZ4DuVS4oPjeZTy6LP%2Fubx1nbLrfH%2F7j0vRrjUe8Kz3LhgUaIy%2B3uqCzf6%2FW%2F%2FI0%2Bc%3D\"}]}\r\ncf-ray: 9e9411c4dbea783d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-26T09:24:06.977701Z","times_seen":17543020,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":53,"dns":36,"connect":1,"send":0,"wait":4,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"logincdn.msauth.net/shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg","fqdn":"logincdn.msauth.net","domain":"msauth.net","tld":"net"},"ip":{"addr":"13.107.246.53","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:20.724Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"identitycdn.msauth.net","organization":"Microsoft Corporation"},"issuer":{"commonName":"Microsoft Azure RSA TLS Issuing CA 03","organization":"Microsoft Corporation"},"validity":{"start":"Mon, 23 Feb 2026 11:23:25 GMT","end":"Sat, 22 Aug 2026 11:23:25 GMT"},"fingerprint":{"sha1":"94:EC:8C:D6:B7:48:F8:DD:3B:0E:7C:0D:63:D7:88:40:79:77:F4:B0","sha256":"5C:89:65:8E:B8:96:C8:6D:5E:AB:A7:96:66:76:20:2E:12:45:94:2A:DC:C2:FE:52:08:18:F5:AE:26:15:C9:64"}}},"request":{"raw":"GET /shared/1.0/content/images/microsoft_logo_564db913a7fa0ca42727161c6d031bef.svg HTTP/1.1\r\nHost: logincdn.msauth.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 20:37:20 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1435\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nlast-modified: Fri, 01 Nov 2024 20:25:02 GMT\r\netag: \"0x8DCFAB34403395C\"\r\nx-ms-request-id: f0162d4b-b01e-001f-0c38-c34fff000000\r\nx-ms-version: 2018-03-28\r\naccess-control-expose-headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-Range,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version\r\naccess-control-allow-origin: *\r\nx-azure-ref: 20260408T203720Z-157fb874dd7gfpjxhC1SVGk4sn000000015g000000001t4k\r\nx-fd-int-roxy-purgeid: 0\r\nx-cache: TCP_HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Azure Front Door","description":"Azure Front Door is a scalable and secure entry point for fast delivery of your global web applications.","website":"https://docs.microsoft.com/en-us/azure/frontdoor/","common_platform_enumeration":"","icon":"Azure.svg","categories":["Load balancers"]}],"data":{"size":3651,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ee5c8d9fb6248c938fd0dc19370e90bd","sha1":"d01a22720918b781338b5bbf9202b241a5f99ee4","sha256":"04d29248ee3a13a074518c93a18d6efc491bf1f298f9b87fc989a6ae4b9fad7a","sha512":"c77215b729d0e60c97f075998e88775cd0f813b4d094dc2fdd13e5711d16f4e5993d4521d0fbd5bf7150b0dbe253d88b1b1ff60901f053113c5d7c1919852d58","ssdeep":"","tlshash":"6371117b132887dae9d4a78c2e997b8d377095c4b1b24290874328a5bc086f7f038d60","first_seen":"2023-04-06T08:44:24Z","last_seen":"2026-07-26T04:13:14.020593Z","times_seen":127922,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":36,"dns":1,"connect":9,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"assets5.lottiefiles.com/packages/lf20_zw0djhar.json","fqdn":"assets5.lottiefiles.com","domain":"lottiefiles.com","tld":"com"},"ip":{"addr":"104.18.38.252","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:21.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottiefiles.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 03 Mar 2026 16:41:45 GMT","end":"Mon, 01 Jun 2026 17:41:42 GMT"},"fingerprint":{"sha1":"5F:07:4A:10:80:31:08:30:12:B7:4B:9F:44:21:AC:A5:F1:1D:57:4F","sha256":"53:4A:C5:EC:42:B8:00:BC:79:62:8F:C3:A4:F2:3F:16:40:27:95:E4:5D:0B:D3:7C:F4:C8:D1:1E:50:37:CE:88"}}},"request":{"raw":"GET /packages/lf20_zw0djhar.json HTTP/1.1\r\nHost: assets5.lottiefiles.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/\r\nOrigin: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 08 Apr 2026 20:37:21 GMT\r\ncontent-type: application/json\r\nset-cookie: __cf_bm=_MOZkOaQaqssKvyj4prGNWhNx9_LAsWllqy.DJhdUT8-1775680641.469002-1.0.1.1-caXONZRWs8Qu6bE8iJ2h5g2YW_BZxc.KKrg6oY..X5tbThXNfMKRRRwkt5HsE4oMDJZHZcr5.0OdAr8AQcaP0jueHxv2_vFzv4dGga_Y9f5DAo_2WAlpzpntQIUSI.TA; HttpOnly; Secure; Path=/; Domain=lottiefiles.com; Expires=Wed, 08 Apr 2026 21:07:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 1800\r\nlast-modified: Sat, 14 May 2022 08:16:32 GMT\r\ncontent-encoding: br\r\nx-amz-version-id: bzTAHEYXH5izjVB0r3PwFXR1BycuFXOA\r\nserver: cloudflare\r\ncache-control: max-age=315360000\r\netag: W/\"c17f786d1eda65296df13ddcbbe8e0b1\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: RefreshHit from cloudfront\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: z-gMo2qUZhnGTO1RRKiKfhCEG0Tz0Rzmdr7lr2sg9DNbvnTgA1I3sQ==\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 9e9411c92dfa8deb-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":137719,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"c17f786d1eda65296df13ddcbbe8e0b1","sha1":"5bd36e290accc798209bf0c2d8897c4bded7c309","sha256":"fb0b9c5e9bd3e094e3cf947100f3b3440263e1b9351c60e6acdad7a74fb0628b","sha512":"82b4fd37712240d460994de8086e057eef75ced412755e625acbb109e4aa9bdc010c064f87b366c12776f37460bf923c92870b4a925b86b590a2d6906d7e185a","ssdeep":"3072:Pp/mlCVNRCyMvjln4fI9MTblS6A32UZTvIDXkGJOUezJR7RG1V:R/mYCyMvjln4fI9MTblS6A32UZTvIDXL","tlshash":"9bd3cdc9067102ecfb192994cb8335d8dfc488567fc645edeaba5c188ba5aad3301f17","first_seen":"2025-02-26T13:52:21.241536Z","last_seen":"2026-07-10T15:06:51.910993Z","times_seen":399,"resource_available":false,"data":null}},"time_used":578,"timings":{"blocked":49,"dns":22,"connect":1,"send":0,"wait":478,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"prod.spline.design/mAXoIkgd8xZRsO2j/scene.splinecode","fqdn":"prod.spline.design","domain":"spline.design","tld":"design"},"ip":{"addr":"54.240.174.30","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:21.694Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"spline.design","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 04 Aug 2025 00:00:00 GMT","end":"Wed, 02 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"EB:8F:BC:30:7F:E6:20:54:82:40:AE:8A:6C:E2:35:85:23:4D:C3:D7","sha256":"55:5F:A5:8E:EB:74:A9:74:C5:A3:FF:00:8A:7C:E9:07:F9:0E:37:9F:01:DC:2D:E1:E7:3F:C4:34:A2:07:76:6D"}}},"request":{"raw":"GET /mAXoIkgd8xZRsO2j/scene.splinecode HTTP/1.1\r\nHost: prod.spline.design\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/\r\nOrigin: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: application/xml\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: POST, GET, PUT, DELETE, HEAD\r\nserver: AmazonS3\r\ndate: Wed, 08 Apr 2026 20:37:21 GMT\r\nx-cache: Error from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: -r9-PIIHyyaV11dn1KwgaLk4yZTsfBrUuXwSwAMf75a-f3rnEdF43g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":111,"size_decoded":0,"mime_type":"application/xml","magic":"XML 1.0 document, ASCII text","md5":"b6c792c0f58fa3ec92173c074885221f","sha1":"0dde8fd9111d807e202b2fb37f8bcc4052fd861e","sha256":"a824bc7739e226e1b40ea0f8c4e4f4c6f796fc3b4abfa6e9abe3bd119a30d938","sha512":"83c8b765edcc44f6aaf19445881c315239095b4ac90e9bb85716084db9b9ec75f74876b49340cbaf5ae8d173e517af9eaf82e628d1d32090cd0b4ac8a5d08875","ssdeep":"","tlshash":"51b09201b208a82a19514e3a373cf110e310593102c426a8aa96a88317828914d08325","first_seen":"2025-01-13T10:02:12.3839Z","last_seen":"2026-07-26T06:40:31.039772Z","times_seen":7443,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":114,"dns":102,"connect":1,"send":0,"wait":370,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/favicon.ico","fqdn":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","domain":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","tld":"r2.dev"},"ip":{"addr":"104.18.50.34","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html","date":"2026-04-08T20:37:22.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.r2.dev","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 14 Mar 2026 07:41:58 GMT","end":"Fri, 12 Jun 2026 07:41:57 GMT"},"fingerprint":{"sha1":"C0:16:76:CB:73:59:54:FD:EE:F5:98:D9:1E:84:2C:64:5E:69:4A:C1","sha256":"EB:7F:C6:00:94:82:C3:E3:51:75:19:72:94:30:B8:60:5D:EE:9D:90:4D:0A:8E:6F:2C:9A:F7:84:10:1D:65:C5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: pub-9e2030303d9b43ffaedcde988f24645c.r2.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://pub-9e2030303d9b43ffaedcde988f24645c.r2.dev/index.html\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 404 Not Found\r\nDate: Wed, 08 Apr 2026 20:37:22 GMT\r\nContent-Type: text/html\r\nContent-Length: 27150\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nServer: cloudflare\r\nCF-RAY: 9e9411cd39e535a6-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27150,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (611)","md5":"46dd133ee00dc1bae5e4eeba7b88432f","sha1":"8af86a4ac91ce48c062216fb94a6e1d57618a19b","sha256":"9eb52ee46c7ab5ea4ca0982415da99fded1b7d7354f75e50847bdae6cb44eb66","sha512":"cb49f9e3812e2c262af374e79bd8905cb508a45bf2c2d6af62eed85af43770872486a55e9425882feda9fb3a57a317a3c18be1e286adaf0c76be7f1b0dfa8474","ssdeep":"384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3","tlshash":"e3c291dc7be968e4e5de43aaef2831a8320ba0fb17425904f51d12142f0655cec6f6ed","first_seen":"2024-07-03T19:18:11Z","last_seen":"2026-07-24T21:54:43.295241Z","times_seen":32686,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-08","alert":"Sinkholed","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-04-08","alert":"Phishing Block","trigger":"pub-9e2030303d9b43ffaedcde988f24645c.r2.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}