{"report_id":"60dad21c-c992-4428-a7a9-168df765bc5b","version":0,"status":"done","tags":[],"date":"2026-08-25T14:08:45Z","url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"title":"Notepad++ (Plus Plus) - The Superior Open Source Code Editor","dom":{"size":111643,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (436)","md5":"70da520ec322e60036192a7add67de15","sha1":"06d9ae11bf2472f3a181d84edf99e4ecd76fb705","sha256":"5fbc976c9bc83e6067d331e10a901685e05c6eb35bf92544d77c541cecf7268a","sha512":"570557504f8e013d62bd82bf747121cb3d53eaffd36c12c59688ad2146603f9c065cdb16f182694488b82d342d61a4124f7ac020f1b6038706043c2e42926ed7","ssdeep":"1536:+e9hnsSOfpBJh+8UsopM1ZXJW2XYi4cMEYi4cMmtQF/CLhDIvbVcfPlDdQTM2NQ1:q+xTi4cMi4cd0GyzuXFiIoOIYk0kov","tlshash":"cab3b52532b1053b68b356b5e3d9762ca229c187dc1bccadb29d4061afc3db9ce97314","dom_hash":"domhashb893da5ead288748347498d6831e1f47","first_seen":"2026-08-25T14:08:49.230834Z","last_seen":"2026-08-25T14:08:49.230834Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-29T14:08:45Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-23T23:05:01.76831Z","alert_count":0,"request_count":1,"received_data":282594,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"notepadpiusplus.org","ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-02-09","domain_rank":0,"first_seen":"2026-07-16T01:37:08.318542Z","last_seen":"2026-08-25T13:47:26.635323Z","alert_count":10,"request_count":10,"received_data":1803740,"sent_data":5217,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-23T22:33:38.023236Z","alert_count":0,"request_count":1,"received_data":495729,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d4025f4c6a334b74a742c3a505969d9d","sha1":"d184607fdea94379771724420873e8310edb768b","sha256":"ac039eb2d078654bbc7056003c970c466c09eac098c0c94a5db1ac8586aed57f","sha512":"d63c51a54290f257c0fa663b479caf8532d5d00b645df1d59a5f7b69afe3cc07f3a53ee87e43f39cb991cd7aaec17d1f0500f939928dd09a6d27d0e96cf83132","ssdeep":"","tlshash":"8dc08c88210b0c7141a72e050f6fa604b009320294906e32380ea2045f20d03d744818","size":161,"data":"","first_seen":"2026-07-16T01:37:16.534517Z","last_seen":"2026-08-25T14:08:49.251595Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1ab8b90f7706366b29fd589443d813b","sha1":"696ca926573a4dbeeaf70c50ae67829039cc990c","sha256":"93c837e5fe52f1b9d8e107213b395fb09837d6406ac69f320b7e312602596c02","sha512":"f651f5375ac6560e5e26929556dfebc32af020582c2d4c69d2f4499f1b1046a372ac4e242a6737a728d01b3e4826e3a9563f1708682929ae97b8efc0337d524b","ssdeep":"","tlshash":"fae0722e30c6003a12bb54a623b7820a2123270bc48e8b127a9fc4d65f24ca2080210c","size":319,"data":"","first_seen":"2026-07-16T01:37:16.535586Z","last_seen":"2026-08-25T14:08:49.252385Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ece7fb8bd4a26e2746c37b660ab91947","sha1":"e2e47786eb36ad1f2be3aae8a65cefe2d8aacf9c","sha256":"cc0ba5910939865c9d1165cef9612de94bd4ae0fc3a285bb2c2f2804c9c377b0","sha512":"e0ad3344ae1aec901b7d44ff0d4a6aa839fdb60ac06f03c2f267e470ba229eb628f94839298548c88f4c70a18ca0509ae4b0593ed1a4b568be430bcbf7db157e","ssdeep":"","tlshash":"8ad0a757f4b1693204df59427357e794361001432744c4073f6c8e001f13e8058f71e8","size":256,"data":"","first_seen":"2026-07-16T01:37:16.536662Z","last_seen":"2026-08-25T14:08:49.253283Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fec7b5ff94fece53d21d045c80e73c86","sha1":"f08ccf2f2e970c12da8db1cde3cf0ff5edd299dd","sha256":"b6a3f1e0a21c2aeb76d334ec6d8c7fab525dd72d848d4a3d1801e96d4b3c5c9a","sha512":"ce30536dcb401351c601aa5f20c28f392905a47475fab67d6575e92788e8fe2d41cdd8d6059632d8fae741f55343680ac1d31087e1d53cf04f0427faabf8a211","ssdeep":"","tlshash":"a221ab2a31e250384b6761e4c3cf388aa304a1577878dd84b84f9b98bfe1b30597648f","size":1269,"data":"","first_seen":"2026-07-16T01:37:16.537717Z","last_seen":"2026-08-25T14:08:49.254074Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9daad0eed3ffed9746ea234997fff1c3","sha1":"aaf0040cec5b165c9ae62523b760ddd2fb104652","sha256":"8a7e8c70b84fe88495545aabb88b5a6281dafc43f292a99ca1960fc937deb4ec","sha512":"970519766a4a330b2effbc8ab0259b3fdd85f68606e2567506002d46681c694279e11f9351d86f93f7d09a76fdbad2596247e78ee38e0fac75067c5b6ed49fe9","ssdeep":"","tlshash":"bb01ddc633e1046d0f420a81c3cb508a9216aa13541dec70796e2f44bff2221da035af","size":674,"data":"","first_seen":"2026-07-16T01:37:16.538786Z","last_seen":"2026-08-25T14:08:49.254828Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e1e1895882d8857477d8a237e114ea30","sha1":"2c7747bbaf53b0c2d2a8de944796ce27e1626a48","sha256":"d3ac118a41708a4799ccea661a4e01163f196bf17405a86460e889971237d9e7","sha512":"0a515f437c5710f1a31f4be2c06e6c6877449fda55b2e20e7f82a2dcb26ed034b93dfb4e417a7ae1204f15c7f3e80845f777194c832fc49f608539b6edb56693","ssdeep":"","tlshash":"4b118c3317b3297601e383ba179fe79626362543a080cc883f6d89450f819a474f52d6","size":1055,"data":"","first_seen":"2026-06-10T16:37:13.813704Z","last_seen":"2026-08-25T14:08:49.255551Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"deaae55828c12fc2ab08e064a21075ee","sha1":"71caffa2f9d307deb3e2818332a5623437a42951","sha256":"75984818f17dc1c4efed5f6a7362b722f5eb7962b741603f781db70ffd9c0924","sha512":"6194f4f744a8ec4dc9e8ffba94d23e5361fc2457aac089b8a64138c691f669b58b5e2c8c02e0746780ce50e6c9bd417371992cce834e031d5f149cb5d24ef13d","ssdeep":"","tlshash":"1f01103e724aa2ba46461443891dba42a97ab5e72857d8a50018f884febcf818437e57","size":734,"data":"","first_seen":"2026-08-25T13:44:01.126352Z","last_seen":"2026-08-25T14:08:49.25623Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-665PP2F6WN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bce6a534ea027eea1142a8ba4cdd227e","sha1":"c419fa5cf997daa42dc044f849fed9f54d331d27","sha256":"ec635479df171a69305bb3a701fd77bd7dc1d7b9eab8bc30ee308fc6b363a11d","sha512":"7fba36f9001874816fcfda535b9d39c72ef339ca51c402e376b219e233820e00af893b525d1b02712e38dfe80278ddbe74ee14e6fb1e87fe9ce4578fc6cc40e7","ssdeep":"6144:Zg92Er+ZMiL+tdZd84SI96HWcqh6WhEOs3yQSfaO7slhKmMkAvPAR:YauuE7fJslcwwYR","tlshash":"9cb4e8ce73d674229396f479902f01cba57b28a2b44cc8a5f189ccd42e74a9a4177f7c","size":495125,"data":"","first_seen":"2026-08-25T14:08:49.24568Z","last_seen":"2026-08-25T14:08:49.24568Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tailwindcss/browser@4","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e84a39f7505c022a92999e035e0fefc","sha1":"2348d4e5c8be01b908e20dedbbe247e0790eff21","sha256":"6d8c473ef2f8ad63feafc0bd76502dda31501a6c135dc4c6173f6268cde595be","sha512":"db7994efe6caf5819f91105045d831ae4c47febeccbd6dbd42075a42626357b6f30e69aa2f7638c2500b9246d2a9b8a898114c1930e17959e20051b39fad63d7","ssdeep":"3072:C1V7nHWiA6b1X/vy9/LB2kiGKwod0PYAs8hMpMcfRtnTEykQqz+8HWiYbh5tILrv:W7HGs0jI+/CMysuox","tlshash":"ea542a353203a03e5fbb83da24de6004d66e6b71a65840e8f382d51b15e5af819f7f39","size":281817,"data":"","first_seen":"2026-07-16T23:27:32.684077Z","last_seen":"2026-08-25T16:42:13.232213Z","times_seen":505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@tailwindcss/browser@4","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.534Z","timestamp":1787666896534,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/@tailwindcss/browser@4 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.3.3\r\nx-jsd-version-type: version\r\netag: W/\"44cd9-I0jU5ci+AbkI4g3tu+JH4HkO/yE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\nage: 13130\r\nx-served-by: cache-fra-eddf8230194-FRA, cache-bma-essb1270075-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 70039\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":281817,"size_decoded":70816,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65267)","md5":"3e84a39f7505c022a92999e035e0fefc","sha1":"2348d4e5c8be01b908e20dedbbe247e0790eff21","sha256":"6d8c473ef2f8ad63feafc0bd76502dda31501a6c135dc4c6173f6268cde595be","sha512":"db7994efe6caf5819f91105045d831ae4c47febeccbd6dbd42075a42626357b6f30e69aa2f7638c2500b9246d2a9b8a898114c1930e17959e20051b39fad63d7","ssdeep":"3072:C1V7nHWiA6b1X/vy9/LB2kiGKwod0PYAs8hMpMcfRtnTEykQqz+8HWiYbh5tILrv:W7HGs0jI+/CMysuox","tlshash":"ea542a353203a03e5fbb83da24de6004d66e6b71a65840e8f382d51b15e5af819f7f39","first_seen":"2026-07-16T23:27:32.684077Z","last_seen":"2026-08-25T16:42:13.232213Z","times_seen":505,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":11,"connect":9,"send":0,"wait":10,"receive":14,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/media/feature%20(2).jpg","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.548Z","timestamp":1787666896548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET /media/feature%20(2).jpg HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-5b004\"\r\nexpires: Thu, 24 Sep 2026 13:46:53 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WI%2FnrZJhzNT5BIcpzrKDD%2BiXJzT%2BNGln2ifYcP9NBKQbMeOM%2Bu%2FGItzGGfDT8cMxXNRTbig%2FVTtCMZCbCy3J7A2cQ%2FRMK9rLTwV6cuM6AWkQ1GajOynsoyYNU1%2BgR9w6JZR9NsUa\"}]}\r\ncf-ray: a30b2af76cf81525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372740,"size_decoded":340157,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:41:09, width=0], baseline, precision 8, 1919x1080, components 3","md5":"e51ce9d41b6f5ca30d2da6280ba76fee","sha1":"bdcab2a56a7f8da35d7d2538d35c8fa4ae201863","sha256":"9cd98a8e28d3a7beb19991a488085f373654ec57e3090b2fe0ff43d41484f9b4","sha512":"8f677cdde7f1213c5253e067ebda6f390519d385beb3a2837a124ed044d406af57190a1945290f6946fb13b4562d88f1cd97044fb406bb7295d1b993fe3705d2","ssdeep":"6144:17BffffffffffffffffffffffffffffffRFkfffpfff3Qslffff4g1mfffTsjGf1:17Bffffffffffffffffffffffffffff/","tlshash":"6f84e0012e6fc4d66d73e1fea8811b0b1ecc01dc6962359edec13979f297a61d528ec8","first_seen":"2026-04-25T01:22:14.570969Z","last_seen":"2026-08-25T14:08:49.23677Z","times_seen":14,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/media/icon.png","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.851Z","timestamp":1787666896851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET /media/icon.png HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Feb 2026 21:55:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698a57bb-c5fc\"\r\nexpires: Thu, 24 Sep 2026 13:46:53 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3ivVANkWVN987ZnDglIsAoMmRKxHT93qlPGehCeBUNP%2BI0HilnBxYAHxts24GtulrCKGAJE24gA%2BMDyEy1ChgrQ5QASjVSaHJZig503kfakF6RFteFPL0cNu7sGq%2BTjd8F3Y2poG\"}]}\r\ncf-ray: a30b2af95d6f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50684,"size_decoded":51438,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit/color RGBA, non-interlaced","md5":"f4934f99046e64f6cc6acde24e52ce8b","sha1":"d8fa6da8483824d9b169c8931771bba8a90f0fb8","sha256":"bb6689767192d574dcbe3c27a069d5245ddbc72c77750a13523ac27a0320f19a","sha512":"e2b28a2899b14d57d2c13cea62842c3f6e5ee27860b1bade96785e9631f54cbdd3b9ae603b18dfd90b6282d712cc29e9ee27a17119a39cb36e1651b02a19b792","ssdeep":"768:IXF8aXmXyho07vVZ1zuYzj5qskjqPqrDtvo+0b7NwYrynsbLjruLmFg:IVzmg7vVyYUsDaw77NwYryOiLma","tlshash":"3d3301e0a5ca09cf3de7dcf6f1bb608459428f1da9bb69fa444755a0350c239ed009f2","first_seen":"2026-04-25T01:22:14.582746Z","last_seen":"2026-08-25T14:08:49.238557Z","times_seen":12,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/media/logo2.png","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.543Z","timestamp":1787666896543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET /media/logo2.png HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Feb 2026 21:58:50 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a589a-10996\"\r\nexpires: Thu, 24 Sep 2026 13:46:53 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xMq%2FH747fEyI0R1VguoxOX7mOSbeJvsU0%2FYvVqSpelXJYNXNP6pkDxtw7wOMmENpBOQH5s13f2dn%2F7fnRr1eg%2BMX5T%2Bo6gff1fc5pP1BNcTw0bgzlygfi5SzupnjsEjeVstksOKz\"}]}\r\ncf-ray: a30b2af76cf41525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67990,"size_decoded":68785,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit/color RGBA, non-interlaced","md5":"fa5b7b4c3059b96d1a68690aa6e3cf1a","sha1":"8e2a7cf792d1bb5f71368c9030e4a4b722bd1aa0","sha256":"836f133e9b040fe04fd3652e3e4777af4feefed2b81f407588dbdca62622463b","sha512":"f8d71d05b227ffcc57c9fe07f1c561d502ef118718f42134876b0c23966f5f08cd36ee226ac764b27015d845b8b17e54005cfcca8bd9f3c3c5cac6ae78017961","ssdeep":"1536:keben9AwC4+yeX2uP/HN57+oRgpy0x5VzFi0eIQUuS:kei9Ae+yo2uP/HNwomJx5ZdtuS","tlshash":"89630286ae76084e028cb30f252c8113b2568ff54dd615fd82b13b361b4f6c6bd5be98","first_seen":"2026-06-10T16:37:13.804423Z","last_seen":"2026-08-25T14:08:49.241162Z","times_seen":7,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/media/feature%20(4).jpg","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.551Z","timestamp":1787666896551,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET /media/feature%20(4).jpg HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-59b12\"\r\nexpires: Thu, 24 Sep 2026 13:46:53 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2mssyZe3%2B%2BBeFcgH1%2FFBeWvmcQj38Y1bpIjZpCAyb4Jqsw9mnPByG0uXWw7l%2BS8E93VQok3sGuWs5FXmBwnKW4VQEd0QFSza6FyGWFe5%2FdmICYpwV1%2F3aGRfSA2Msx6hoS9g5pI\"}]}\r\ncf-ray: a30b2af76cfb1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367378,"size_decoded":336644,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:30:01, width=0], baseline, precision 8, 1919x1080, components 3","md5":"7af3ae87879966d5b0daca48baa671ca","sha1":"b6012179effa682a2f02ab07622a9b4b6324b54e","sha256":"e5c1df7a34b85e15c80ae162728fc0e130595fd298c8a5a00dd56f7f4d788ac5","sha512":"0af38f5ddb4478bbdbd998aabe4eaf6a6af66793c356d0ea48a77492a18a45807b160a7064ed3eeddb89ecfe2dc9506f793f90919770566c581c22fdc298366e","ssdeep":"6144:kffffffffffffffffffffffffffff2mGZSfYffffkffffbffdMffff+ffjrffffu:kffffffffffffffffffffffffffff2m2","tlshash":"1874e0446a7fd5d2ac3be0ff38911a0a1d9c10897c2375ae8c847878f796e61d42ecd8","first_seen":"2026-04-25T01:22:14.573421Z","last_seen":"2026-08-25T14:08:49.24247Z","times_seen":14,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/media/icon.png","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.848Z","timestamp":1787666896848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET /media/icon.png HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Feb 2026 21:55:07 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"698a57bb-c5fc\"\r\nexpires: Thu, 24 Sep 2026 13:46:53 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bS7Ed5S%2FBa7MOoq2hL2YiUdn3AXb5o1Vz3mQ1YivTb%2FZEU%2Bx4cp7cZEcmsVkKyJF73a9TaochnyP1C6lhgBX7PA9cHwNURkBBqmmA5y%2BQ%2BX8O87rWd3WqgM4PBYZxXKv95k%2BzOMc\"}]}\r\ncf-ray: a30b2af95d701525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50684,"size_decoded":51444,"mime_type":"image/png","magic":"PNG image data, 224 x 224, 8-bit/color RGBA, non-interlaced","md5":"f4934f99046e64f6cc6acde24e52ce8b","sha1":"d8fa6da8483824d9b169c8931771bba8a90f0fb8","sha256":"bb6689767192d574dcbe3c27a069d5245ddbc72c77750a13523ac27a0320f19a","sha512":"e2b28a2899b14d57d2c13cea62842c3f6e5ee27860b1bade96785e9631f54cbdd3b9ae603b18dfd90b6282d712cc29e9ee27a17119a39cb36e1651b02a19b792","ssdeep":"768:IXF8aXmXyho07vVZ1zuYzj5qskjqPqrDtvo+0b7NwYrynsbLjruLmFg:IVzmg7vVyYUsDaw77NwYryOiLma","tlshash":"3d3301e0a5ca09cf3de7dcf6f1bb608459428f1da9bb69fa444755a0350c239ed009f2","first_seen":"2026-04-25T01:22:14.582746Z","last_seen":"2026-08-25T14:08:49.238557Z","times_seen":12,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":8,"dns":0,"connect":0,"send":0,"wait":35,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-25T14:08:15.811Z","timestamp":1787666895811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: text/html\r\nlast-modified: Thu, 06 Aug 2026 23:55:12 GMT\r\ncontent-encoding: zstd\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zq6K0ot0pcz7JXXhbGEQ0wbiTK81gtrhItOK79ZBMVM23iEydfBU4T6jMYr7y23nyG6wrHHimnHOUqVOCUJkb6I%2FP5%2BGBHHCa1HUhku%2FoX2CuFg3ncR%2BXSgMrmveT%2B4R2462aaCp\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: a30b2af35c5f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76515,"size_decoded":12472,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (370)","md5":"d5828d8c92de35e6b7c24278e751948c","sha1":"2327fb02315b7044e8fff525d3ed8c44bfefb7e0","sha256":"408867b2a1e072447cd4cee67a401a6a4f4edf34fcedaced65e377e3556fe762","sha512":"d6d717cdc0fcf45cd406b53ddb73b9e10d40fe471895368dce2cfa5c31a2a8bb5e4727f6c49e4e10fcbddbbd1b42cf26830f7b374e459b261255a821d1a675ef","ssdeep":"1536:e1v2XYi4cMEYi4cMm+O9F9vtfPh6wVm/cQSnxKkf9F:eTi4cMi4cd+O/9vtfPh6wVm/cIoT","tlshash":"1c73942623f0092f11d742b1e2a17f3d9aa98bc7d917946cb26d40a17fc3c5ace57394","first_seen":"2026-08-25T13:47:27.691763Z","last_seen":"2026-08-25T14:08:49.243594Z","times_seen":2,"resource_available":false,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":67,"connect":17,"send":0,"wait":185,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-665PP2F6WN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.536Z","timestamp":1787666896536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=G-665PP2F6WN HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\nexpires: Tue, 25 Aug 2026 14:08:16 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 168905\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":495125,"size_decoded":169509,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"bce6a534ea027eea1142a8ba4cdd227e","sha1":"c419fa5cf997daa42dc044f849fed9f54d331d27","sha256":"ec635479df171a69305bb3a701fd77bd7dc1d7b9eab8bc30ee308fc6b363a11d","sha512":"7fba36f9001874816fcfda535b9d39c72ef339ca51c402e376b219e233820e00af893b525d1b02712e38dfe80278ddbe74ee14e6fb1e87fe9ce4578fc6cc40e7","ssdeep":"6144:Zg92Er+ZMiL+tdZd84SI96HWcqh6WhEOs3yQSfaO7slhKmMkAvPAR:YauuE7fJslcwwYR","tlshash":"9cb4e8ce73d674229396f479902f01cba57b28a2b44cc8a5f189ccd42e74a9a4177f7c","first_seen":"2026-08-25T14:08:49.24568Z","last_seen":"2026-08-25T14:08:49.24568Z","times_seen":1,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":5,"connect":15,"send":0,"wait":42,"receive":47,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/media/feature%20(1).png","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.545Z","timestamp":1787666896545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET /media/feature%20(1).png HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: image/png\r\nlast-modified: Mon, 09 Feb 2026 22:01:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5949-89fa\"\r\nexpires: Thu, 24 Sep 2026 13:46:53 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q59GP%2BeAxErz7simnESwSa7RulbZMZYo%2BG6%2BCLZrIVbDRpMirBAZzJWb99aUUzSCl%2Brdj3L%2BFGLhUnc2aYjpGbst7E8WITRj%2BbGX%2FdIPumDoMR4HP3uAB9q%2FHZw1Y0qXoOhH5sbT\"}]}\r\ncf-ray: a30b2af76cf61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35322,"size_decoded":35013,"mime_type":"image/png","magic":"PNG image data, 1415 x 729, 8-bit colormap, non-interlaced","md5":"40d0470ab7513b417ef10da0c4fe8fd1","sha1":"623726d58e30b605b8e4bcb3bc00febb2bd2fac9","sha256":"d39404017c3a5354d78167a4ae69178241d5fabfeea7141c79d53b233e38be3d","sha512":"8fff234506d2d1002fe4df7bbac255d4c32e1264798d172064646abbc832fff3d1c144b08327ac8a3bbfc1a960b3abbeff3e0cda88570f6997555406e02f1c78","ssdeep":"768:F+M7QcJguFiA9vcDzbcf7M3hf/81khb5YBJcqVEQIlrA5u8aJRFQ+drJ:v7qq9kDAMx/81koJfVVIVAA1nFQirJ","tlshash":"7ef2f1e491e855924857e3f302f14747bcbc1f7d208372095ae7e05160c92d6b9c6bad","first_seen":"2026-02-02T18:40:33.076912Z","last_seen":"2026-08-25T14:08:49.248055Z","times_seen":18,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/media/feature%20(1).jpg","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.547Z","timestamp":1787666896547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET /media/feature%20(1).jpg HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-510c6\"\r\nexpires: Thu, 24 Sep 2026 13:46:53 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pZyl5EKeFJMAkmCabn%2B96OXtZFDjebOt%2Bj4KP8Ay4jbu%2BfIUeHGLrSF73Ovq3fBTAIOUd22fCcHEOKTqT%2B4rIjapLoiiZh8vZ9FKz2iXAoqkAwBLugmP1TrBJpWVy%2FiaegPppbrt\"}]}\r\ncf-ray: a30b2af76cf71525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":331974,"size_decoded":295379,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:37:25, width=0], baseline, precision 8, 1919x1080, components 3","md5":"b58e383320aa850ffa3eca9b16a7a7a1","sha1":"b9b4f260e85e448c084e1818747266d15de3f2e8","sha256":"9c3e02abe758d7547eaa9a93092bebd30222b614aa34dc0ff3ce8f8f1907ebd0","sha512":"af29e38d11381e41c087f1ecd55f2875dc00e9552f2e21c7a06721feaf4e8041a54b2febfc53945dd8dd27ef832fbe8bb796ade73afecb8ac025226977698e1a","ssdeep":"6144:NA4d86ceuyBjSfjLOd3DKaAQojgk1j+QJQodmxdxDjnL:i2vce9SLL0Iz0GaQWodcr3","tlshash":"7864126d0f7a863dd5fc4eb541969f8d53d08a382ef113fb66c26024c37e265ab0a21d","first_seen":"2026-04-25T01:22:14.568217Z","last_seen":"2026-08-25T14:08:49.249101Z","times_seen":14,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/media/feature%20(3).jpg","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.549Z","timestamp":1787666896549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET /media/feature%20(3).jpg HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-2dcf9\"\r\nexpires: Thu, 24 Sep 2026 13:46:53 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U1K2noMy6%2Fmnrg%2BE0pJhQc1yr%2FCBDsHrQh8gLQ%2BYmKzaImChaRzXG9S25vJNCv2JptVCnjL6kkfuH7rplYc7501bYMYgY5TzyqLgjn%2Fs5NRueYylUxDKNfP8XovTvaho8RdZzbpO\"}]}\r\ncf-ray: a30b2af76cfa1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":187641,"size_decoded":152168,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:44:41, width=0], baseline, precision 8, 1919x1080, components 3","md5":"d0673df9420dddf937d8a64683517332","sha1":"adace107bc71a379104263008edb76323a1c0271","sha256":"de78bbed34fea8c7b1578372f9da628100439e905acd1cb0a6c93c17a81879be","sha512":"2adf910ad95c19f4af64f59f4af787bf00d2b1f118da053d44b40fab41575c60ec0defcdd57d22cd233930260e49a231e2f39eaad8443d79b9a23ac91565fe47","ssdeep":"3072:p8+9Aw0caAS2ZIvs5LY+rhg+n8pKsKYR84K/LgY:h9Aw0BfvgYAe+n8pKs9xosY","tlshash":"7b047c81ad6259905eaf0bf66c839503e69a5020bff7fe3c1d563de4ea11f0d8746342","first_seen":"2026-04-25T01:22:14.588915Z","last_seen":"2026-08-25T14:08:49.249967Z","times_seen":11,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"notepadpiusplus.org/media/feature%20(5).jpg","fqdn":"notepadpiusplus.org","domain":"notepadpiusplus.org","tld":"org"},"ip":{"addr":"172.67.137.41","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://notepadpiusplus.org/","date":"2026-08-25T14:08:16.552Z","timestamp":1787666896552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"notepadpiusplus.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 15 Jul 2026 03:38:48 GMT","end":"Tue, 13 Oct 2026 04:34:39 GMT"},"fingerprint":{"sha1":"81:71:22:63:70:3F:67:FD:EF:B9:74:B6:58:28:67:80:BC:56:91:7F","sha256":"BE:9C:83:A8:0C:66:42:8F:28:4E:15:D6:93:0D:3E:CE:70:B3:6A:49:12:E5:A2:74:04:45:72:17:C0:39:B6:E5"}}},"request":{"raw":"GET /media/feature%20(5).jpg HTTP/1.1\r\nHost: notepadpiusplus.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://notepadpiusplus.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Tue, 25 Aug 2026 14:08:16 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Mon, 09 Feb 2026 21:45:29 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"698a5579-3e597\"\r\nexpires: Thu, 24 Sep 2026 13:46:53 GMT\r\ncache-control: max-age=2592000\r\ncontent-encoding: gzip\r\nage: 1283\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tT0RXQhelqsskP6ASJvOeVhkIOVHx2Ib7gHERFKM%2Fqm1yG%2ByTHF9WY64g8zNfY4OCUjWI3wZrbGI3DaU83n15go9OFk70mdiPBZq23gNFIHHQtejGATrVY4mk54YeAWTyTZSqIuq\"}]}\r\ncf-ray: a30b2af77cfc1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":255383,"size_decoded":223869,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=6, height=0, software=Picsart, orientation=upper-left, datetime=2026:02:10 00:35:17, width=0], baseline, precision 8, 1919x1080, components 3","md5":"d534f9aaf1a10a709d47026cacdc6def","sha1":"744eeba9a02de19808dc178c97e8bbf4abc8283b","sha256":"8888c33f2cb6649b3195a17f8ebf99f5062b82ebeb0ceeb116a6ca10510cab4c","sha512":"6d1aa1457c78ad1ea3a21197ab7c62292d5dec7a53b365e417ae7f10bf3b432d235eff89e2c38324ecd168290777a9282913d36c5e44c65443aa647c2eeecad4","ssdeep":"6144:3Q2iHIb6l66/x4SFQaILelHlocuoC4lSDBg:g9eS/L3Xocs4SBg","tlshash":"d744020db5729e9ff43fabb6330b956503a5b975047b09c622638856b0bc334e907da3","first_seen":"2026-04-25T01:22:14.577039Z","last_seen":"2026-08-25T14:08:49.250781Z","times_seen":14,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-25","alert":"Sinkholed","trigger":"notepadpiusplus.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}