{"report_id":"5dde4cd4-4684-4bf4-99d9-fbe019899186","version":6,"status":"done","tags":[],"date":"2026-03-02T13:39:29Z","url":{"schema":"http","addr":"curveacampaign.com","fqdn":"curveacampaign.com","domain":"curveacampaign.com","tld":"com"},"ip":{"addr":"172.67.219.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"curveacampaign.com/","fqdn":"curveacampaign.com","domain":"curveacampaign.com","tld":"com"},"title":"Curvea Campaign","dom":{"size":10742,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (648)","md5":"08f54b94831b4b1f1fe6ad44a748d111","sha1":"654c24d77392721f25bd97e6761403b4f44c0cdc","sha256":"ca7f9dbac5e25b7ba138a85a6b4618f3d648a6a1f6fa19d26b4d516b85064b30","sha512":"41bb219a96d76e301296080a5add1d9183f01519e9de99229c321b14665efd1df50c3365890aaa69bfee456dc488cc35ebd40136a12f150d469f95d698c4a507","ssdeep":"96:nChFTfC8UTTsTLaWiDITkru8xGW5aVPkDNhkzkmHwHSYVPlz4QXUx8TkpXlCMlTK:QiYyuBrVcddBUx8yVCMlmaTjbi","tlshash":"f0226766a4f15633018790a3b3e37b9aae969607ca6642d171bc0bed0ff7d52ce5310c","dom_hash":"domhash68c8562d6ea924e12b2668ab7591fdf5","first_seen":"2026-03-02T13:39:34.299765Z","last_seen":"2026-03-02T13:39:34.299765Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"curveacampaign.com","fqdn":"curveacampaign.com","domain":"curveacampaign.com","tld":"com"},"ip":{"addr":"172.67.219.248","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-06T13:39:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"curveacampaign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-03-01T22:32:56.293355Z","alert_count":0,"request_count":2,"received_data":29521,"sent_data":993,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"curveacampaign.com","ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":4,"received_data":23590,"sent_data":1849,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]},{"fqdn":"static.cloudflareinsights.com","ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2019-08-30","domain_rank":4073,"first_seen":"2019-09-24T14:34:56Z","last_seen":"2026-03-01T22:33:58.871316Z","alert_count":0,"request_count":1,"received_data":30596,"sent_data":514,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"curveacampaign.com/app.js","fqdn":"curveacampaign.com","domain":"curveacampaign.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9c75912f6afd55e0faafe2f47ad0c8c1","sha1":"beff49fe9f9ea73df59bba86a2fde50cdfbadfc3","sha256":"4695587ccc1024eb4abea3a8d1d4e95b8f7f73e29548c0a17d11cff35429193b","sha512":"f54ebf05898321a8469b69753bf915c6a9ef83b680055674cb5480c9e9e720b20454cb1a5f646900d434715234a9e5d9410f1da5eee01519b55f83d4e78b410e","ssdeep":"","tlshash":"46117d4b70b3603282b360a9aa2761a97944201671c6dd1d7e5c84863fe251a89f77d4","size":936,"data":"","first_seen":"2026-03-02T13:39:34.310418Z","last_seen":"2026-03-02T13:39:34.310418Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v67327c56f0bb4ef8b305cae61679db8f1769101564043","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dc6464da80362edfde8cd10567de865","sha1":"6323d6fde4148ae6e8daa0bbc813814b7e7c8d88","sha256":"e7aa4e094a5dab2c40e1be1fbf91c58b7e26423e48e188a485a72994e8d050b0","sha512":"add716638ec1c9777be9c6c2173ce721c11a08def58ea916041aa5c21175498ecab9b74b29988419e3fb03289e2999463fd85b63f3211abc17cc90bf1ee94dca","ssdeep":"384:B4K61zI7CIyN4UletDDG0l/nvqtLxnzU50c74MNKJM4e6GODfPOsWN69O90:kN4UwDDlIUsJXvfP1090","tlshash":"29d208edb590b13613f7a47240bf210bb33b756264894418e22bd5c12c78aeed257fad","size":30200,"data":"","first_seen":"2026-01-22T17:09:23.016308Z","last_seen":"2026-08-08T13:59:29.137428Z","times_seen":5308,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"curveacampaign.com/","fqdn":"curveacampaign.com","domain":"curveacampaign.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3f14abba3f74de0515a8f1abc5e8d18","sha1":"1fce3b7efd08fa64a13366f2addfcd4d381b7bc4","sha256":"965c0c4f7d32b44167b6bd705698421b3f46f44813facac412be85af43684bd5","sha512":"832bed935de66ff2b40368d14b3988a20573317cef92de8d4ae9c8149defb436f6e5dd97e6f03c25ea8c5e98014c5b375a4734772c30756f4b010a9832d16257","ssdeep":"","tlshash":"8cd0a7b36433160d412351225f5b2d005515187788a150b6bf9c835f5f5bb4aa70935e","size":262,"data":"","first_seen":"2026-03-02T13:39:34.322505Z","last_seen":"2026-03-02T13:39:34.322505Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/CurveaDesign/curvea-assets@main/wordmarks/curvea-wordmark-neutral-light.svg","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://curveacampaign.com/","date":"2026-03-02T13:39:08.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /gh/CurveaDesign/curvea-assets@main/wordmarks/curvea-wordmark-neutral-light.svg HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://curveacampaign.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 13:39:08 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 1288\r\ncf-ray: 9d60ce495c3b9e07-ARN\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"9d4-d+fQoNDpRqjJ5uLz0gT06nI78yc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230042-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ij741nJqiZaYpulfnwEKdErFAWpdkPqYfIpDEC5ar7tbVXfjdIIOqcGRXxHBLBTHIZX3uegF35TSKQEnCRw%2BFfhKReY7VlycJDwcwc7EOdTJlaKcgKHDW%2FMVMOTSbSvPkpE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2516,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ef69df23c8f370cd7ec6de5d212a280","sha1":"77e7d0a0d0e946a8c9e6e2f3d204f4ea723bf327","sha256":"1345fa0e8acfeb49cf62e124222f3024e7c429071c88c177c9d64378e9eb8c46","sha512":"e773717d2a8e696e9e4bfdd3b2a538df0e14ed5707923cf70262fe1821fe46d4914d93e1ab8e9cdf328d7de46f5f57c8ffe073d9ce815547a4c3e89f2c4b8659","ssdeep":"","tlshash":"ec517612e3b45a3c7d420b049b3814a3398260eef1a5d3ec8bbfd761b645ef0455987d","first_seen":"2026-03-02T13:39:34.307238Z","last_seen":"2026-03-02T13:39:52.951892Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":22,"dns":0,"connect":8,"send":0,"wait":60,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"curveacampaign.com/app.js","fqdn":"curveacampaign.com","domain":"curveacampaign.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://curveacampaign.com/","date":"2026-03-02T13:39:08.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"curveacampaign.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 15:37:27 GMT","end":"Tue, 05 May 2026 16:37:11 GMT"},"fingerprint":{"sha1":"C4:94:BC:FA:4C:37:85:85:6C:2E:33:4F:48:67:B4:8C:62:79:25:34","sha256":"D1:4B:85:AF:3E:E2:7F:9F:0E:EE:38:02:3B:A2:1D:45:60:A7:D2:E3:2F:D3:11:C1:33:36:3F:9E:4A:C5:B1:B6"}}},"request":{"raw":"GET /app.js HTTP/1.1\r\nHost: curveacampaign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://curveacampaign.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:39:08 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cne%2FdjQWyc%2FvNcYrWMuc3F8sRNnz9Tuqk3uj4hBzeX56T8hWvNLH80SBt4LzScmTYC29SnODVLdRSUOElEgsRmDNaI212cYlJoFG2Wtf%2B1irkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"15a0ffe3313a621d839a70c364f1c721\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\ncf-ray: 9d60ce4928719cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":936,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"9c75912f6afd55e0faafe2f47ad0c8c1","sha1":"beff49fe9f9ea73df59bba86a2fde50cdfbadfc3","sha256":"4695587ccc1024eb4abea3a8d1d4e95b8f7f73e29548c0a17d11cff35429193b","sha512":"f54ebf05898321a8469b69753bf915c6a9ef83b680055674cb5480c9e9e720b20454cb1a5f646900d434715234a9e5d9410f1da5eee01519b55f83d4e78b410e","ssdeep":"","tlshash":"46117d4b70b3603282b360a9aa2761a97944201671c6dd1d7e5c84863fe251a89f77d4","first_seen":"2026-03-02T13:39:34.310418Z","last_seen":"2026-03-02T13:39:34.310418Z","times_seen":1,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"curveacampaign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.cloudflareinsights.com/beacon.min.js/v67327c56f0bb4ef8b305cae61679db8f1769101564043","fqdn":"static.cloudflareinsights.com","domain":"cloudflareinsights.com","tld":"com"},"ip":{"addr":"104.16.80.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://curveacampaign.com/","date":"2026-03-02T13:39:08.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cloudflareinsights.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 17 Feb 2026 14:29:28 GMT","end":"Mon, 18 May 2026 15:29:15 GMT"},"fingerprint":{"sha1":"8B:A9:51:50:78:B2:5E:75:31:54:23:BC:80:D6:CA:53:34:E5:CD:8F","sha256":"AF:D9:FB:4F:B0:E1:BD:80:DF:22:93:A7:4A:99:5B:50:0A:BE:47:59:37:98:C6:BF:C5:DF:8D:8F:F0:8D:FD:23"}}},"request":{"raw":"GET /beacon.min.js/v67327c56f0bb4ef8b305cae61679db8f1769101564043 HTTP/1.1\r\nHost: static.cloudflareinsights.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://curveacampaign.com/\r\nOrigin: https://curveacampaign.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 13:39:08 GMT\r\ncontent-type: text/javascript;charset=UTF-8\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400\r\netag: W/\"2026.1.1\"\r\nlast-modified: Thu, 19 Feb 2026 17:45:24 GMT\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 9d60ce496ecd27f7-ARN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30200,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (30200), with no line terminators","md5":"9dc6464da80362edfde8cd10567de865","sha1":"6323d6fde4148ae6e8daa0bbc813814b7e7c8d88","sha256":"e7aa4e094a5dab2c40e1be1fbf91c58b7e26423e48e188a485a72994e8d050b0","sha512":"add716638ec1c9777be9c6c2173ce721c11a08def58ea916041aa5c21175498ecab9b74b29988419e3fb03289e2999463fd85b63f3211abc17cc90bf1ee94dca","ssdeep":"384:B4K61zI7CIyN4UletDDG0l/nvqtLxnzU50c74MNKJM4e6GODfPOsWN69O90:kN4UwDDlIUsJXvfP1090","tlshash":"29d208edb590b13613f7a47240bf210bb33b756264894418e22bd5c12c78aeed257fad","first_seen":"2026-01-22T17:09:23.016308Z","last_seen":"2026-08-08T13:59:29.137428Z","times_seen":5308,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":9,"dns":1,"connect":8,"send":0,"wait":17,"receive":0,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/gh/CurveaDesign/curvea-assets@main/favicons/CurveaFav.png","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://curveacampaign.com/","date":"2026-03-02T13:39:08.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /gh/CurveaDesign/curvea-assets@main/favicons/CurveaFav.png HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://curveacampaign.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:39:08 GMT\r\ncontent-type: image/png\r\ncontent-length: 24878\r\ncf-ray: 9d60ce4a4b2d3017-ARN\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: main\r\nx-jsd-version-type: branch\r\netag: W/\"612e-7sfhxAUyLkIakifqE245BilraQ8\"\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230059-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LiKYPx%2BpPqbFzFccHs6H0ymKqkXYi3PTuh8hUSUtuQ9kx88wYkoU3sqnqJ05fiHDEhD0SJsRpQbkF7UjcQgoGGzEI1hAgTTw%2Facy0apWvO96mjYJ%2FaNStQgEssAuLiQ%2FRN4%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24878,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 352 x 352, 8-bit/color RGBA, non-interlaced","md5":"c522220046eed68ed99feefe206edaa1","sha1":"eec7e1c405322e421a9227ea136e3906296b690f","sha256":"eb0299d0447cadd9c6a39875a9e210e7e739cfbb0bf62de2073e98c37997a3ce","sha512":"9d088b2514f618843042df35087ee836613b05d5450c23f5e210164f95110d90865cbee63469b5064b5a8cc4091f3f4f23c9c1ab5ea11ddb3cb987e0e0e1d72c","ssdeep":"384:yKkgoAfm3yM9r1O0J/BMIT6AtIO8GQQSguNQr8/QwaILT8gxyoa32B+LkUP8al8c:Hkgojbr15BMA6NYSguCr8b8gb8RP8W9","tlshash":"b5b2f1d3c8ca3d5af96988c631e2c359f1fc14dc51436256fa0d0be0e47ea99a599c0b","first_seen":"2026-03-02T13:39:34.314552Z","last_seen":"2026-03-02T13:39:34.314552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":79,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"curveacampaign.com/cdn-cgi/rum?","fqdn":"curveacampaign.com","domain":"curveacampaign.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://curveacampaign.com/","date":"2026-03-02T13:39:08.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"curveacampaign.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 15:37:27 GMT","end":"Tue, 05 May 2026 16:37:11 GMT"},"fingerprint":{"sha1":"C4:94:BC:FA:4C:37:85:85:6C:2E:33:4F:48:67:B4:8C:62:79:25:34","sha256":"D1:4B:85:AF:3E:E2:7F:9F:0E:EE:38:02:3B:A2:1D:45:60:A7:D2:E3:2F:D3:11:C1:33:36:3F:9E:4A:C5:B1:B6"}}},"request":{"raw":"POST /cdn-cgi/rum? HTTP/1.1\r\nHost: curveacampaign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://curveacampaign.com/\r\ncontent-type: application/json\r\nContent-Length: 1013\r\nOrigin: https://curveacampaign.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":1013,"data":"{\"memory\":{},\"resources\":[],\"referrer\":\"\",\"eventType\":1,\"firstPaint\":0,\"firstContentfulPaint\":0,\"startTime\":1772458748042,\"versions\":{\"fl\":\"2024.11.0\",\"js\":\"2026.1.1\",\"timings\":2},\"pageloadId\":\"e2b7c9b6-4d98-4d02-b96f-c464b7eb6751\",\"location\":\"https://curveacampaign.com/\",\"nt\":\"navigate\",\"timingsV2\":{\"unloadEventStart\":0,\"unloadEventEnd\":0,\"domInteractive\":427,\"domContentLoadedEventStart\":479,\"domContentLoadedEventEnd\":486,\"domComplete\":490,\"loadEventStart\":490,\"loadEventEnd\":490,\"type\":\"navigate\",\"redirectCount\":0,\"initiatorType\":\"navigation\",\"nextHopProtocol\":\"h2\",\"workerStart\":0,\"redirectStart\":0,\"redirectEnd\":0,\"fetchStart\":33,\"domainLookupStart\":34,\"domainLookupEnd\":34,\"connectStart\":34,\"connectEnd\":71,\"secureConnectionStart\":44,\"requestStart\":71,\"responseStart\":119,\"responseEnd\":120,\"transferSize\":3853,\"encodedBodySize\":3024,\"decodedBodySize\":10484,\"name\":\"https://curveacampaign.com/\",\"entryType\":\"navigation\",\"startTime\":0,\"duration\":490},\"siteToken\":\"05fd6ca5229341a788ec3c68da45405e\",\"st\":2}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Mon, 02 Mar 2026 13:39:08 GMT\r\ncontent-type: text/plain\r\naccess-control-allow-origin: https://curveacampaign.com\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-max-age: 86400\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qLyRyT5jq%2BZl9G7NYgE4vVSZvSFT8lyaMI6NynSDEOMuju%2FiLOvHjlM3zCSojhsQf4b2bmHUeVe4B8ND2R9Ykrt3r4F0XjSTy8zImIqKdszxbQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: 9d60ce4a7c679cae-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T20:57:33.581028Z","times_seen":17843402,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"curveacampaign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"curveacampaign.com/","fqdn":"curveacampaign.com","domain":"curveacampaign.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-02T13:39:08.078Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"curveacampaign.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 15:37:27 GMT","end":"Tue, 05 May 2026 16:37:11 GMT"},"fingerprint":{"sha1":"C4:94:BC:FA:4C:37:85:85:6C:2E:33:4F:48:67:B4:8C:62:79:25:34","sha256":"D1:4B:85:AF:3E:E2:7F:9F:0E:EE:38:02:3B:A2:1D:45:60:A7:D2:E3:2F:D3:11:C1:33:36:3F:9E:4A:C5:B1:B6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: curveacampaign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 02 Mar 2026 13:39:08 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q1UmlQ%2B6kZzgMYii0j%2F65tStN9b%2FXT%2BsrW%2BKEXkDN6ofSRNtalR69Jf4K3iopu3tzwe8pBYC2Ukrqr64qNv%2FZB6pUIn5YtrqsNULGDNqhBj1IQ%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver-timing: cfCacheStatus;desc=\"DYNAMIC\", cfEdge;dur=5,cfOrigin;dur=31\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9d60ce47ba72fb58-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":10484,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (505)","md5":"b8665384afb0214b43facdb25bdfbe14","sha1":"b0669bbe3ea6b1d2879f5d8656b11a97bb88aada","sha256":"a3ab048f00ee435ff6c7b231d3aa6eaef9ca2b4a4927897fed64098eeceb8edb","sha512":"067bffc3637fe974247a032309fb4f8cae88c3cc845349ac8e1f7bc73a0390b1792330ba4897925c7d512b906ea4ca85c54eba2cb752decfc531cdf3a2d57ae9","ssdeep":"96:bGhHT2IALzTGT3aWiDwTQ6u8j3aVPkDNhkzkmHwHSpPlz4QXUx6vTgSXTvMMlT6e:bGiSeGUvVcQdBUx6vxDvMMlmagPvq","tlshash":"9c227561a4f19633008780b6b7e37a9aaea69547ca6641c072fc0bfc1fb3d52da5314d","first_seen":"2026-03-02T13:39:34.318584Z","last_seen":"2026-03-02T13:39:34.318584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":120,"timings":{"blocked":35,"dns":0,"connect":8,"send":0,"wait":48,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"curveacampaign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"curveacampaign.com/styles.css","fqdn":"curveacampaign.com","domain":"curveacampaign.com","tld":"com"},"ip":{"addr":"188.114.97.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://curveacampaign.com/","date":"2026-03-02T13:39:08.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"curveacampaign.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 04 Feb 2026 15:37:27 GMT","end":"Tue, 05 May 2026 16:37:11 GMT"},"fingerprint":{"sha1":"C4:94:BC:FA:4C:37:85:85:6C:2E:33:4F:48:67:B4:8C:62:79:25:34","sha256":"D1:4B:85:AF:3E:E2:7F:9F:0E:EE:38:02:3B:A2:1D:45:60:A7:D2:E3:2F:D3:11:C1:33:36:3F:9E:4A:C5:B1:B6"}}},"request":{"raw":"GET /styles.css HTTP/1.1\r\nHost: curveacampaign.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://curveacampaign.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Mon, 02 Mar 2026 13:39:08 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9wnI9Y0hQWocHRDkhZvuqvpikpSd%2BOEnIB0NPe%2BeCCWz1IsxOddHtUx%2FfPm2BfgYVyN2oqMfDwklqZYuVHubPYcdurDGyLqF1rw8EnITz0BXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"0f2c508d0ecd56a9834d9bf4af55be4a\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=2,i=?0\r\ncf-ray: 9d60ce49286c9cae-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9072,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (320)","md5":"22145b9634b70f3b95ad9ebc9d0173dd","sha1":"5e28f26c2cae228113757881ea11901f0af29e87","sha256":"88cc3226ab55b9b4860b462fe1b69013f808555ce5192975d41b4cf4314d2fe4","sha512":"5fc20856c36d3a197bf277d475167a9c1d26577e0ed779ba9a131dfbe1e2367f0f9f04ab5071a51ac4c54a2205527e40e7958e46ac78b794f25662658e940689","ssdeep":"192:op6FrmaLRXDJdOZ1bIC9BtveUeELWbXA611BwymGuzSXkSFz9YTmsWodws82Ow:op6FrmIXK/buXT8GKPqVA","tlshash":"13129590f330ab3e742795adbad7558d733ca0434826dbbceda4111c8dca2efc560a44","first_seen":"2026-03-02T13:39:34.32066Z","last_seen":"2026-03-02T13:39:34.32066Z","times_seen":1,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":78,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-03-02","alert":"Sinkholed","trigger":"curveacampaign.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}