{"report_id":"5e71e1ba-35b0-4d8c-a968-25ae3189867a","version":6,"status":"done","tags":[],"date":"2026-01-24T13:42:14Z","url":{"schema":"https","addr":"aleos.live","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aleos.live/","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"title":"Aleo Ambassador Program – Official Application \u0026 Rewards | Aleos.live","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-04T14:30:18.251771Z","times_seen":17709334,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aleos.live","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-28T13:42:14Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"aleos.live","ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-01-20T01:59:33.428637Z","last_seen":"2026-01-20T01:59:33.428638Z","alert_count":16,"request_count":8,"received_data":3821792,"sent_data":3633,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"public-assets.typeform.com","ip":{"addr":"52.84.50.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2002-06-20","domain_rank":434161,"first_seen":"2019-06-25T00:56:24Z","last_seen":"2026-01-23T15:14:10.439383Z","alert_count":0,"request_count":1,"received_data":2692,"sent_data":466,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"aleos.live/rxjs-7.8.1.min.js","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"817c19e80f3b8c91cf0384f49c1fe439","sha1":"a5b4282b7fa2348dcdd7fe1ab1a79b1a1382ba32","sha256":"c9faab09673cda5ea35cfff7828ece42ff7bcd75efcf6c0b4086a6b70ab3e819","sha512":"7c7ef084cb90a7276844245363b62ac712f8217b65745bbbab2cb5a69e45c512fc2b18641368e6a3fa1ff07fac1b440a3d0f4dd73a6d3662300115af94263655","ssdeep":"768:ZKCsdEcQy2h7WDgfypETfU9er2ZAFGogR64KGEG3:aj2xWDuyeU9eOXogRY8","tlshash":"b133e6d96916e0d48d9120ede83fe219e4641d07ce6cf22bad3cedd1352df26858b13a","size":54082,"data":"","first_seen":"2026-01-20T01:59:38.168088Z","last_seen":"2026-01-24T13:42:15.153831Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/1f44d0fc-cf92-4db1-b8f8-f64bc505ff18","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7df73988252e4e56e97ba60a379b1adb","sha1":"71fcb419a05752a6816ec8cb8d6ff66f2b286575","sha256":"795b58fa3e79ac5f0fe3f40fd1a8780febc568757a02fb88cece17317ec0a0d3","sha512":"76bbb9908159d4a89749d84c7cfc019cebaecb2a738e68d09f3e7194cd362e8991548472274377a2b829abdeccdd6a077443dca3c4c9f205ccf78d4a3568702e","ssdeep":"768:FVX6Xl2NCM1idz41CAr7cC2Iq5a87XZUXfl2rsi14UcCs+Wl4:FVLCl","tlshash":"6ca333131cbe346b048f4b63f5295e47af5ffa43da16624cb2bc26852fb7d56c982204","size":107243,"data":"","first_seen":"2025-12-16T18:55:46.047375Z","last_seen":"2026-07-18T23:39:45.24889Z","times_seen":465,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-04T05:46:09.707401Z","times_seen":3477,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-04T05:46:09.712335Z","times_seen":3392,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"aleos.live/aleo-latin-700-normal.woff2","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aleos.live/","date":"2026-01-24T13:41:51.913Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aleos.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:46:34 GMT","end":"Wed, 22 Apr 2026 21:46:24 GMT"},"fingerprint":{"sha1":"91:06:CE:79:55:58:B4:B4:9C:3C:EE:7D:8F:17:EF:E7:C5:56:A6:1F","sha256":"4E:DC:AA:76:20:1A:9E:2B:A3:B0:61:15:B1:DA:5C:C2:E9:5E:1D:58:A8:EE:65:9E:62:8F:AD:09:5E:F3:26:35"}}},"request":{"raw":"GET /aleo-latin-700-normal.woff2 HTTP/1.1\r\nHost: aleos.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aleos.live/index.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:41:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 15208\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 21:37:57 GMT\r\netag: \"697298b5-3b68\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AzWuY%2FCREMRIrl6zWPx7A14aadCDOIdlDdxcirbmu5mddeIXIL8kx4tTVrFeZCCKl1kQ1ojGLFL%2F%2BBMAxKC6sxT1PK2kI1mD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff3674c090b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15208,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 15208, version 1.0","md5":"c593b68d2f0f90ad851a9142e4b232b2","sha1":"575fe25cb51d3accaf8d00420740f4650dd9232f","sha256":"b075ea7ef7c9859c98dedeb8649b2c370f1b4ec2e88408620b0b5db4d9a0836c","sha512":"d16f71c49924d4150c185f98e043803224854105f2fb10b9a40209f9290c58ea4eaab59496de5140eaecd70bdf44e675b781d3a84ef49662d310bcd3d387a7d0","ssdeep":"384:A96/c64P7PnfwdaWKSkPL7spyENAvFD0/6ApWgGZ3:KOC74aNvP3a2D0/6fgq","tlshash":"ec62d07ba0b2437cd95149ffaa0510822a0dfbdd895cb73099ba20d1e170a280de2b7d","first_seen":"2023-08-29T21:14:41Z","last_seen":"2026-06-19T23:22:59.640247Z","times_seen":31,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":263,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/secureproxy?e=jscdn/getFile","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://aleos.live/","date":"2026-01-24T13:41:51.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aleos.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:46:34 GMT","end":"Wed, 22 Apr 2026 21:46:24 GMT"},"fingerprint":{"sha1":"91:06:CE:79:55:58:B4:B4:9C:3C:EE:7D:8F:17:EF:E7:C5:56:A6:1F","sha256":"4E:DC:AA:76:20:1A:9E:2B:A3:B0:61:15:B1:DA:5C:C2:E9:5E:1D:58:A8:EE:65:9E:62:8F:AD:09:5E:F3:26:35"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: aleos.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aleos.live/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://aleos.live\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"myzdn309yfuj4w2fxwqb\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:41:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ykb8umN0uiHfDV97jht%2FYGP343eZcbEcihsEIAh5XqIvivOue6ypxF24QHAjRC69yowiCkc2%2FWBNS%2F%2FwY8R2SxZCcK7oJ%2BLk0wlQYngNiCgkqQ%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9c2ff367cc110b49-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3690363,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"78797c00a196c0deac4d11cf72e644b8","sha1":"753f7dc916859fe156881c730f9e449826395931","sha256":"dcd2487d3d5fc77e70cac9f2dce7d28156eb3b8bb89cbfd26ecc99f5f49b0c5c","sha512":"81e04f943046b792ec84be908e669c16cbc85b6ec0527966b595208814de35c4dabaaa9a847ea708aa132ec1dc5a47d8c48cfd79a74e6818623be3062d2d4d28","ssdeep":"24576:DXMSdoggFACZhIXxhDIVpx/Q5hPdIT0smqBxs1tKu+:4Fgwz3whEPxChlIT0sv0zKh","tlshash":"702512d291ab90e33b29d838a6d01ede79ce805ce0d643b26d4cd9c1745e17586ecee3","first_seen":"2026-01-24T13:42:15.150217Z","last_seen":"2026-01-24T13:55:26.235015Z","times_seen":10,"resource_available":false,"data":null}},"time_used":1104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":490,"receive":614,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-01-24T13:41:50.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aleos.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:46:34 GMT","end":"Wed, 22 Apr 2026 21:46:24 GMT"},"fingerprint":{"sha1":"91:06:CE:79:55:58:B4:B4:9C:3C:EE:7D:8F:17:EF:E7:C5:56:A6:1F","sha256":"4E:DC:AA:76:20:1A:9E:2B:A3:B0:61:15:B1:DA:5C:C2:E9:5E:1D:58:A8:EE:65:9E:62:8F:AD:09:5E:F3:26:35"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aleos.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 24 Jan 2026 13:41:51 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 21:37:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OgDhjp9OyiwaMQB8SMwG6PwimdxsyA8pt11ok0J5qBre%2BI2CM2rtRz8xXX%2FaRkdegxcZUZSlJFPj3P1XJW6wijHrpfL%2F%2BJLKeE0%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9c2ff36089ab120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26800,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"8b06765a346da909a9449544e3af4817","sha1":"aa7b260b5902af686ff3f79c39e8f28d78c4803e","sha256":"508600f05791b3457a5c70779fea71c27b26a8aad3a1b8d80ebe35dd2441c684","sha512":"9c06a9e5dc75c8908927672ad9b6979ba286dc7efc6fa0682c677e17d9637d16b87a1e1014d4c31a9023822b3b19743b40127d7e8311581f33b5e70c976c21b6","ssdeep":"384:a7p0xQmWsYFBvyylmQNm27i8xLPCX8hLm3PxRgxDRDRDYxD9yQl08A2WmENM:JM7i8xLPJBBYxD9108BWmEO","tlshash":"79c2b65b5aa312442c13a15c2ff7b7495331e217d80ddc28bded2349cfca9e9a893798","first_seen":"2026-01-24T13:42:15.151037Z","last_seen":"2026-01-24T13:42:15.151037Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":45,"dns":23,"connect":1,"send":0,"wait":252,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/index.css","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aleos.live/","date":"2026-01-24T13:41:51.299Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aleos.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:46:34 GMT","end":"Wed, 22 Apr 2026 21:46:24 GMT"},"fingerprint":{"sha1":"91:06:CE:79:55:58:B4:B4:9C:3C:EE:7D:8F:17:EF:E7:C5:56:A6:1F","sha256":"4E:DC:AA:76:20:1A:9E:2B:A3:B0:61:15:B1:DA:5C:C2:E9:5E:1D:58:A8:EE:65:9E:62:8F:AD:09:5E:F3:26:35"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: aleos.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aleos.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:41:51 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 21:37:57 GMT\r\netag: W/\"697298b5-9f0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pf74GikwUYZiECAANlK6ZurjyEKy%2BTisfSYzcGaAIK6k6aSi8%2Fb2vVYebba%2BLxkNJmB6foRWteW3VbTXKk8%2FAwbt8y%2FPwjzU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff3639bd20b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2544,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ddc1e8d7fc50ea467e68d0829e77277d","sha1":"3a3cfcaac16dc8c220ff0c3e783bd397e9a16229","sha256":"c4acfec65ca8ca622ae628eaa79e931c52d98005fe0e2e9066f4896db8fde800","sha512":"5b722cc01abacbc478c0a6d5cb0e0cf43382590c95d9d412e7f7ccf31d31bba6fb87ce214deb630c3a96c9def65ffede3552b2782d9dc05f14b411edfddfd38a","ssdeep":"","tlshash":"c851be7104353500a6d71c612bdf2e07190db16361cb9926ef3e0d844fb6d349362b9f","first_seen":"2026-01-20T01:59:38.166289Z","last_seen":"2026-01-24T13:42:15.152012Z","times_seen":2,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/akHKgPA2zS6V.jpg","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aleos.live/","date":"2026-01-24T13:41:51.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aleos.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:46:34 GMT","end":"Wed, 22 Apr 2026 21:46:24 GMT"},"fingerprint":{"sha1":"91:06:CE:79:55:58:B4:B4:9C:3C:EE:7D:8F:17:EF:E7:C5:56:A6:1F","sha256":"4E:DC:AA:76:20:1A:9E:2B:A3:B0:61:15:B1:DA:5C:C2:E9:5E:1D:58:A8:EE:65:9E:62:8F:AD:09:5E:F3:26:35"}}},"request":{"raw":"GET /akHKgPA2zS6V.jpg HTTP/1.1\r\nHost: aleos.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aleos.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:41:51 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9627\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 21:37:57 GMT\r\netag: \"697298b5-259b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ssAErnAhHOk90J5466r98qVrR2%2BLUrtCj%2F%2BcPOw94%2BlTu2GXn7h1f4H2GTHIeahwEjB6RL8epUtG1FOSC4rjtaoo4ggOoC8O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff3639bd40b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9627,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 400x400, components 3","md5":"0804669c4dcf5e17439c67e7842598e0","sha1":"23c3da67941a63cfc2e100ed514311f981e6e73d","sha256":"0b45a754e9cf775c80dfe0edb1bcf235254a9297d6bc4bba1a680c54368b82b4","sha512":"585b3762b21dc240fe8d66b52381384d41ac754b49035b1831a1c861d6ccb78645743974b9a352fd6c419cce5240ab1e395bf6a975b41fa09e98e63fdd52a102","ssdeep":"192:C+aMSJGOOdbm6m0ovcQIBgcOYYBzlpNA2wUWissvtyWG+gR4yN9:DaMSJGEUo0QIBgchY1lpNsy1zG+gKa9","tlshash":"ad129e64b05799cfcd73d6b466629520facb282fec96665dd2cc0c169b32e2d4bc1708","first_seen":"2026-01-20T01:59:38.167212Z","last_seen":"2026-01-24T13:42:15.152919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":222,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/rxjs-7.8.1.min.js","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aleos.live/","date":"2026-01-24T13:41:51.303Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aleos.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:46:34 GMT","end":"Wed, 22 Apr 2026 21:46:24 GMT"},"fingerprint":{"sha1":"91:06:CE:79:55:58:B4:B4:9C:3C:EE:7D:8F:17:EF:E7:C5:56:A6:1F","sha256":"4E:DC:AA:76:20:1A:9E:2B:A3:B0:61:15:B1:DA:5C:C2:E9:5E:1D:58:A8:EE:65:9E:62:8F:AD:09:5E:F3:26:35"}}},"request":{"raw":"GET /rxjs-7.8.1.min.js HTTP/1.1\r\nHost: aleos.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aleos.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:41:51 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 21:37:57 GMT\r\netag: W/\"697298b5-d342\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GJqsuJXMftdC5bZka6yEmm%2BeeBdNfWSS%2FUbKVLFXelSDYQyBnbiqOmp%2BJnst7pAhyqoFb23OQTJ6%2FC2UO6iFOGjskBI8IAEF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9c2ff3639bd30b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54082,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54082), with no line terminators","md5":"817c19e80f3b8c91cf0384f49c1fe439","sha1":"a5b4282b7fa2348dcdd7fe1ab1a79b1a1382ba32","sha256":"c9faab09673cda5ea35cfff7828ece42ff7bcd75efcf6c0b4086a6b70ab3e819","sha512":"7c7ef084cb90a7276844245363b62ac712f8217b65745bbbab2cb5a69e45c512fc2b18641368e6a3fa1ff07fac1b440a3d0f4dd73a6d3662300115af94263655","ssdeep":"768:ZKCsdEcQy2h7WDgfypETfU9er2ZAFGogR64KGEG3:aj2xWDuyeU9eOXogRY8","tlshash":"b133e6d96916e0d48d9120ede83fe219e4641d07ce6cf22bad3cedd1352df26858b13a","first_seen":"2026-01-20T01:59:38.168088Z","last_seen":"2026-01-24T13:42:15.153831Z","times_seen":2,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"public-assets.typeform.com/public/favicon/apple-touch-icon.png","fqdn":"public-assets.typeform.com","domain":"public-assets.typeform.com","tld":""},"ip":{"addr":"52.84.50.12","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aleos.live/","date":"2026-01-24T13:41:52.268Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"typeform.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Mon, 14 Apr 2025 00:00:00 GMT","end":"Thu, 14 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"04:DC:6A:FE:F2:B3:4A:73:B4:AE:83:E1:25:4E:DF:05:B4:26:3B:D5","sha256":"A6:CE:98:88:54:75:2A:83:AB:50:50:80:94:79:FC:80:7A:DA:1F:DF:AB:A1:D2:77:44:64:7B:3E:41:9C:E2:E3"}}},"request":{"raw":"GET /public/favicon/apple-touch-icon.png HTTP/1.1\r\nHost: public-assets.typeform.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aleos.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 2060\r\nlast-modified: Thu, 22 Jan 2026 15:20:52 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: CZA6BrQNRPv85LC.W2JdoMuQU_exLbXr\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\ndate: Sat, 24 Jan 2026 13:07:39 GMT\r\netag: \"24ecbb9bfc09ac85171fe23180032485\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 4ecb87f89fb78847d0c397cc575bc254.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-amz-cf-id: 9zlaf_i8Jn81z0eaT5QBY2YGwU8qeMgUwppAweRwrmUtBvx_ZfxurQ==\r\nage: 2089\r\ncache-control: max-age=31536000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2060,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit colormap, non-interlaced","md5":"24ecbb9bfc09ac85171fe23180032485","sha1":"5d5c620b441684842772b81e00b2d0d1d55c2ced","sha256":"5684c80975e96907fa59487e58b691ff509575bc6b8d774eec22875bbf4d9b0f","sha512":"218c3889faff130ef125c511b785484c87666f53fbee37d0f926a83cff2018c4e0fe69ec58c105c450ce6afb3164ce7c8f9c95c23ac753cda15d4d1328af66d2","ssdeep":"","tlshash":"1c41ea8a30bdd5e4c06908bd8041528aeafb5a7324a2bd5c7f97dd065e7c28942c0c04","first_seen":"2023-09-12T14:56:42Z","last_seen":"2026-08-03T07:45:05.858354Z","times_seen":537,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":57,"connect":1,"send":0,"wait":3,"receive":4,"ssl":27},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/favicon-16x16.png","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aleos.live/","date":"2026-01-24T13:41:52.271Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aleos.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:46:34 GMT","end":"Wed, 22 Apr 2026 21:46:24 GMT"},"fingerprint":{"sha1":"91:06:CE:79:55:58:B4:B4:9C:3C:EE:7D:8F:17:EF:E7:C5:56:A6:1F","sha256":"4E:DC:AA:76:20:1A:9E:2B:A3:B0:61:15:B1:DA:5C:C2:E9:5E:1D:58:A8:EE:65:9E:62:8F:AD:09:5E:F3:26:35"}}},"request":{"raw":"GET /favicon-16x16.png HTTP/1.1\r\nHost: aleos.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://aleos.live/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:41:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 807\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 21:37:57 GMT\r\netag: \"697298b5-327\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3goDIRfBkvJLOiyaNwAc4EDLo94J85MXGjZi4AwavUceoNt4Dtd2241d1x6aF02uB03Sz7AT3i0TjjQP1FQ6sbB7844HRaED\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff369bc3e0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":807,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit colormap, non-interlaced","md5":"bb5adc2625db890a6de2d2f5a5d58860","sha1":"57eb1a57cdd12cc42f1d6178a6ea3865180c5ddf","sha256":"f86e09951d5f7ed4787bce5f7618ac358828e89a25b27187bc5a668dd6ff9264","sha512":"abcc523a52fc6472f0fcafd5562b1e37d7c48c39c30e3e7f04ac94beddefb070f6bc55f342b5d31f9f8905bd6e380f6e8f8bb633753c65a4616ba38bc94abedc","ssdeep":"","tlshash":"f60144ca8c389ab1c4df1f535b451b44ba354c0a3ac6cd8c6970f4294dbed8898e87a5","first_seen":"2023-09-12T14:56:42Z","last_seen":"2026-08-03T07:45:05.862946Z","times_seen":536,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aleos.live/aleo-latin-400-normal.woff2","fqdn":"aleos.live","domain":"aleos.live","tld":"live"},"ip":{"addr":"104.21.61.26","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aleos.live/","date":"2026-01-24T13:41:51.931Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aleos.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 22 Jan 2026 20:46:34 GMT","end":"Wed, 22 Apr 2026 21:46:24 GMT"},"fingerprint":{"sha1":"91:06:CE:79:55:58:B4:B4:9C:3C:EE:7D:8F:17:EF:E7:C5:56:A6:1F","sha256":"4E:DC:AA:76:20:1A:9E:2B:A3:B0:61:15:B1:DA:5C:C2:E9:5E:1D:58:A8:EE:65:9E:62:8F:AD:09:5E:F3:26:35"}}},"request":{"raw":"GET /aleo-latin-400-normal.woff2 HTTP/1.1\r\nHost: aleos.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aleos.live/index.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 24 Jan 2026 13:41:52 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 14792\r\ncast-mode: default\r\nlast-modified: Thu, 22 Jan 2026 21:37:57 GMT\r\netag: \"697298b5-39c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x9W2F1dQSFCuRHHi30ZxDSnSfOEaijbfhs8jSrMNXZqHKhz4bxh3xZOd%2FHEgCRemPWC5opd04fe5KmEp9qbqEEBGQvDBIm2o\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: 9c2ff3674c0a0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14792,"size_decoded":0,"mime_type":"application/octet-stream","magic":"Web Open Font Format (Version 2), TrueType, length 14792, version 1.0","md5":"18692235bf4b668d90247e4d9b3c4644","sha1":"937acde22ad03946b7ab938e90e6aa5fa3d90ebc","sha256":"501c4156a3477737901c60b0307e45788909054d28752d8cbe635e1ea46989d1","sha512":"5da0696ad3887fb1c4ef0d4a01b4f3f0ebba60fb94ddf88aebbde67c2f7ad63afee4841b78879ce163c36a97008adbd1022c01bcfd4cfdc8ce9b278cd9c3fa91","ssdeep":"384:nR+RCDf+I+qiEDeJesUOJA+b/Mku/LS864sQ4vSUlqb55r:nRo2GbEKTUOvMku/Pxxvf","tlshash":"4362d075ac67af3cf33e15715a893840c3c2a4cb2581d5ff8c6d80b512829c7a896369","first_seen":"2023-06-28T19:02:59Z","last_seen":"2026-01-24T13:42:15.155748Z","times_seen":208,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":228,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-01-24","alert":"Sinkholed","trigger":"aleos.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
