{"report_id":"62e07a1d-7f69-448e-b621-f303fe0e1bcd","version":6,"status":"done","tags":[],"date":"2026-02-14T10:36:27Z","url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"172.67.128.225","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"title":"Zama - Open Source Cryptography","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"172.67.128.225","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T10:36:27Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"presale-zama.com","ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-20","domain_rank":0,"first_seen":"2026-02-12T20:38:01.206071Z","last_seen":"2026-02-12T20:38:01.206071Z","alert_count":20,"request_count":20,"received_data":5102773,"sent_data":8892,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-07-27T15:32:00.187505Z","times_seen":3403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"b15064fd0a2482295cd853dc8bb59522","sha1":"0846c1872d89042e664adaaf0acdef1568f22e25","sha256":"65e3ce6ab9a393a8b0c9029650c806b2465dc941f28676752d7eec2bd54fd242","sha512":"a67499f4ef44d53c7365e48f9cdc8fd04b31c726e3c7bb3a18cc73fd8233f13255c8c20279a2186ae2004eab6ca3c00b07bf0a0c7ac8138103f2e682e0906262","ssdeep":"49152:Qri1lpgKRUYHLuTgYUpSkqSRR+AwW2QUSvhjG+EyY4bfO3xrQanJfCpszVt8Az:d7vRUOL4zkisU","tlshash":"7f0623862c17e5b2cf44036970a39c0b209d0c56aadda1dae79df9c1385efb481ef479","size":3692924,"data":"","first_seen":"2026-02-14T10:36:31.463867Z","last_seen":"2026-02-14T10:36:31.463867Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-07-27T15:32:00.185707Z","times_seen":3363,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"8de04e3dc63af7585af0e827672eb149","sha1":"02ee5e4b4e73e430d629744c4b7a3e38c36ed06d","sha256":"123e2a4c9c65ad62ea2b0992b1f80073e18a341a810f9ba40d1c4cdc31f1e759","sha512":"a42fcbfd4fc45305b75c0093524abafcf73f7d10f3bbe8cf573f3ea87803f672ae7fd293a116e7c24aeb0ef9fb24b9ea32e48200a56243187d5b550407631184","ssdeep":"","tlshash":"a911cce0aa6c599781c2095034894b02b13cb020203d9fd0bf75f0ce7c7c7ec96d262a","size":1000,"data":"","first_seen":"2025-12-20T20:03:49.143914Z","last_seen":"2026-06-07T00:08:21.702938Z","times_seen":1701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-07-27T15:32:00.186605Z","times_seen":3258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/solid.js","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b65efcc5397f6523955bb16bd384760","sha1":"6090bd87217d0b12aa7c3665c24788dc92815717","sha256":"75ba9e6a966dea930715cc95d9f447568a854550f9d9f0da0c2e3aea5e5e759f","sha512":"5a19ad0ee481f9a960ad4b97e22fd618bc13eb57486c6f13965f981d5a57549f65702f6ce51c4b32755e857eac56d760207df507a4209f75d001ca6397d5e52b","ssdeep":"768:V/vkQcBIhpMfm0jDHtYJKDyrjqbNV+2YMc7cscZcxcNcwcycos2Hcax9jT4bfFez:1pKjZLfbNY4s6kbf8ilOcGr","tlshash":"b2836fe5990bd0e48e1521ded437ed15e4280963cdacf2a3ba2cdec1781df66c48727a","size":83875,"data":"","first_seen":"2026-02-12T20:38:16.057258Z","last_seen":"2026-02-14T10:36:31.456807Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-07-27T15:32:00.183904Z","times_seen":3189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-07-27T15:32:00.195005Z","times_seen":3318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-07-27T15:32:00.188421Z","times_seen":3154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"presale-zama.com/c169e6dc4900b93b01c6706a760b44f6d20eb4c8.woff2","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /c169e6dc4900b93b01c6706a760b44f6d20eb4c8.woff2 HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 24648\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: \"69700f55-6048\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 136706\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=82v9%2BNvj2GcmcdtXavQoMx9sC0%2Fe0Sj2wnxJmORER%2FRBWIh%2BhmGOV9Wwm%2BoNBawKgFPEnkB0NsW19EBRfCeoaliz5Cto%2FoGDE6wAq7av8cA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec1a29e74453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24648,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 24648, version 1.0","md5":"6778559dd6e3df54dbe37c24313514c4","sha1":"c169e6dc4900b93b01c6706a760b44f6d20eb4c8","sha256":"1cfb889abf6d7461708accd9a1ab963ee7d5ebafb2e6cda1ea984b7abbd3bac4","sha512":"500d01c4fbfe1ae543403828d5ae7d60d7402a9cb84ab945491903c4715a98749192c7715b65ab5f646d7091aed3451d1a186cee2fc159cf3cc6da07369efb58","ssdeep":"384:BJfJC3hjLyDRwZoSDJp8DAL+dQH98etYNfu1NVg+WbxOXb5xKCV:/fJC3hjE6o2h+C9byY1NV5mxOr5","tlshash":"bbb2d03b87d20d7a40d3ad362479ba19f17a738aa3d6c1de2de6503f1b1300e6906f56","first_seen":"2025-07-12T23:22:57.271648Z","last_seen":"2026-07-26T08:59:38.797304Z","times_seen":489,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T10:36:03.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y2QTjvc5suYmoOKwvgngVUj9L2Wi3oCcx6GY0tvvhM89MqCeSsxiUtynxsBJsSZUYA1U4bhgn70EQSxdZdWrcG2LXrrGzmoUUxdIvkfFkAY%3D\"}]}\r\nage: 50290\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cdbec175cbdaa08-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":503188,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (5915)","md5":"d2e22beded3c6707409917cf1ff0ac99","sha1":"b4af94b06befaa4870656bf2adcc9d585e8c767a","sha256":"65db5a3007b7012c56ed95849a6a8c0ff5c165a0cb39f840913e2b87836aade9","sha512":"f91630373242cb079e25d920c817f995a9b7123eccd37f406509535ae3c002b573f0f0c8ab8c39cbe114b96a5cd7ad978ca340fa937cce9668320f0bc18d2c20","ssdeep":"6144:Ys9J34kRtRGDUqDZJUdFT8IVKpMl+ZtyeSXQCeXTuOuwifKc:hJ34kRtRGDUqUdF8YkZQeS0DuUiB","tlshash":"91b47e6895d310d1a423486d37ebb664f125ac439805fd143bed3384cfcfe6698a67ac","first_seen":"2026-02-12T20:38:16.061755Z","last_seen":"2026-02-14T10:36:31.450404Z","times_seen":2,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":72,"dns":40,"connect":8,"send":0,"wait":36,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/ee0a07a5d0eecc819536d621a50f21fb5d535c11.svg","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /ee0a07a5d0eecc819536d621a50f21fb5d535c11.svg HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 50290\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69700f55-2b2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NceDS1srj8cqs7kIFJJ3YHCihnIDShsjekokzQFxHd7yiVRBzwHxcTMSl6DDAB2WoatO6rounCb20RS6ugCkI8UC8uM14pjqGpwHLON5wEg%3D\"}]}\r\ncf-ray: 9cdbec1a09df4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c8ef633d7fcd32aa9a2e54c9ed343d61","sha1":"ee0a07a5d0eecc819536d621a50f21fb5d535c11","sha256":"8160e3f46e4f62a629de420aafa5d497deff34df769f939ee31a8102d234d398","sha512":"ed1192f726a2d558d3232f4f627b0f784654483bc6431f35deafa91e31050a39bbfabbe27f62b25a6f02d79f94ceb0c2c62b727eac6c940c55e2bf240d2f9311","ssdeep":"","tlshash":"fd016b63b14af60884055bd703ace5f9e083b9d96b1e8108fb80754ee88c9c7ac2018f","first_seen":"2026-01-04T09:38:05.148172Z","last_seen":"2026-02-14T10:36:31.45144Z","times_seen":323,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/f9548c4d65085af31ff16fca941aa226d2e44c8a.png","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /f9548c4d65085af31ff16fca941aa226d2e44c8a.png HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 1186\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: \"69700f55-4a2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ivLNcpOZwxINDlr71lPuP%2FDOacVXsca60wE8vY%2Boo4oc%2FsG14DaqwuxV0XQIpHfKL9Zla4UiqcXOBPLT1BGz1NyxXJqPDa8K3rLMDyCvOqU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9cdbec1cea694453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1186,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"daf86b7c0767a7eae1d542d78f43ee24","sha1":"f9548c4d65085af31ff16fca941aa226d2e44c8a","sha256":"d4765e2871081c0410b0f57cdfe3cc92138e86d2bbbc8aff92801ceab67c8168","sha512":"700479c5d72b4a53da67668958de2827bed9681e6696e285aae5d9a7b4ff4b5fbc71662f62bb8805280896a71803650dd8f3fc1947bf5269ecd84748599f4000","ssdeep":"","tlshash":"9a21d7e063c49acc03d42c72a90e50545c0995f6a5d9d8bbc0079eb163c9524f4aaf07","first_seen":"2025-07-12T23:22:57.260478Z","last_seen":"2026-02-27T18:22:54.829501Z","times_seen":337,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":222,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/css2.css","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: W/\"69700f55-1a01\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 136706\r\npriority: u=2,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=32Zav7rR0dv0J9d32qJze%2BeXbzBWUn85Pu1umeu2Nd%2FD2PTb3Rvr3iuiXV%2Fa6asaco3SamdSX1affcQh%2F%2FiUBv6HbFtT6x46dKuMUbscqno%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdbec18a96f4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6657,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"ce7ad8f4ad7ad856c1099fc81b1b7648","sha1":"1ad43c1dcc0a01e0f43ee5385596b6950ccee64a","sha256":"673efc1392c23c179e818ed5a87a15c4c73b015995d1e6d7b021300935ffc337","sha512":"3c99af3c3067d88019bdc48c29b808c8ecdf4ddaa416e40567feae3f5c50f92e525a2202d2caa81bfd49f32daed65767f781c4cea4bd6f45db38ccc934c6d937","ssdeep":"192:9TNe7m34MJD7TOdUm3/TJ8eTrUdm3iWJlk:h/P0NNS","tlshash":"5ed19b91042b5100e7971cc627cf3f366edc2149a049dabc2ffd189aaceadb913a574d","first_seen":"2025-11-16T14:51:55.272416Z","last_seen":"2026-06-13T11:01:21.804407Z","times_seen":49,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/946788179dbe0f7b3482508116485595d70dad14.png","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /946788179dbe0f7b3482508116485595d70dad14.png HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 7976\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: \"69700f55-1f28\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 136706\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aF93WAeh%2FqbuFBLmCbA5nI0rOppXaiMvE7A0znCnwSUEbe8J9JUmspC2aL7OS43Dphv1i9URvUxuACWSG07MRxsyfXXOFMWGD1pL743a0E4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec1a09de4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7976,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 506 x 550, 8-bit/color RGBA, non-interlaced","md5":"765bee2da6337a8a0d33a67baab0e94d","sha1":"946788179dbe0f7b3482508116485595d70dad14","sha256":"1b01547ea4c89df692fa2ddfa597941023ebbfd23dc537493ffa353b6f6883fb","sha512":"cd5b2907a1e2d0fd530b3e41389c5ff7f86d42267c6eed174413a14ca12752b6442ee0007ae99d601ff23bd0db95c64a5a3778642ebb1c3689c34428fccbc027","ssdeep":"192:veCI2QpGu+2beFFL76LiEXtjjSkCCVyMofC6Ipj5xHxq3:xXn/a4FL74dpnZo6B15ZU3","tlshash":"0ff1c845e7162837b36a1988e422784b68d06d79b824fe4918d7a69f3b17f3c8c34dd8","first_seen":"2026-01-21T17:18:08.217971Z","last_seen":"2026-02-14T10:36:31.453061Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/bad4cc62190ed18d413125424b947aae4471d1e6.svg","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /bad4cc62190ed18d413125424b947aae4471d1e6.svg HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 136706\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69700f55-2b2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5tyixeFfWf0qyR3QISVmTfwtoULPMSibAJ3EOi0jtaBTOnRiPhtpPvjrBnok8dMVy4%2B5F3n1fvdHTrh23iyWfsECLFPyt453fYiXEDn0q6s%3D\"}]}\r\ncf-ray: 9cdbec1a29e24453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c1b644bf022f9ecdcbe77e7efb405d6d","sha1":"bad4cc62190ed18d413125424b947aae4471d1e6","sha256":"b5888990fbd0a2cbe55212d4448059cda56f4b5367e1d72d83f1ec6196bd435b","sha512":"06aaee31e6b8d5b4a3b8d0521b7f1d668d9ff17bfe3748f5aaa8cac25ef9de38820b0c93431ce1ed21fa29c66b3a74ea4b3b5ca5acfa96b06ae1869c1c984453","ssdeep":"","tlshash":"55016f62714ed619e404ab67072c74f5f413b8d6529d4104fbc03907f86c9c7ae205cd","first_seen":"2026-01-04T09:38:05.133875Z","last_seen":"2026-02-14T10:36:31.453576Z","times_seen":323,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/d4f3f3c42c52618d594e66b90a8d05d08aa45d06.svg","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /d4f3f3c42c52618d594e66b90a8d05d08aa45d06.svg HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 50290\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69700f55-2b2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKB5cEJ%2FyMhTszSvr6gLbwM%2FWQED6nscVLzBcDfs4b7GlSGMVCzRmZGp7TaH33Eqi%2B33oaZvvPmRk8jVWI2jh2VOlOZ532nu9mRXgBKHcwc%3D\"}]}\r\ncf-ray: 9cdbec1a29e14453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1caff2fbdbd06ce0b006a41430c19c04","sha1":"d4f3f3c42c52618d594e66b90a8d05d08aa45d06","sha256":"031d727922689b179197c4c9baa63b1a1d1226992ad34753bb233f639e92988e","sha512":"bd1c59442389457c4b0809af33b50344a56f7d4227ae0d7b940cb7703816adb2b2d68bc5fbb95dd792479702f12b0cea408d10e59757c93f6dfe78be7a171343","ssdeep":"","tlshash":"d2015c667246d7088834aa5713e864f5e10ffc96731d214cfb813947e84e5c7ac2014d","first_seen":"2026-01-04T09:38:05.095816Z","last_seen":"2026-02-14T10:36:31.453975Z","times_seen":323,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/afabd8a679e563c6a0e04929d73fe6c19dc82af0.woff2","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /afabd8a679e563c6a0e04929d73fe6c19dc82af0.woff2 HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 27228\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: \"69700f55-6a5c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BGtlBb0R60qxOdqX27yMrN%2BCCcDJeAVq3SsDOQNmA4e436JAGOlHGzBn9QHKsI%2FYF64Dl1bTKfq8Cj5X70p0lbyWkB0R4KnCyhlJX%2B%2BzQRw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec1a59ef4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27228,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 27228, version 1.0","md5":"e417dbb625b3727e5b8ba658ee3ee317","sha1":"afabd8a679e563c6a0e04929d73fe6c19dc82af0","sha256":"8de09e832bccd0ddefb2aafcac9cfdb84d5225ab014e1b07189adea1cc60ae3c","sha512":"215dfd116a1ed82764f05c5ab53cdfb59f8731f6323cb2a282a1d9ed7a297450fb0de44519a9dba128283a75805286a318b134502da9902ecdd30303e833d14a","ssdeep":"768:uD8yxu7aDlc3g/bXjsVAFQsEww+IsMID4BPcWFEJ4Y:uDy7MlccbzJQsHw42UWFk","tlshash":"89c2f16e0f651fb3c50ba27c910d6b4132ee6932a86075f2ddbdf08e895770d39a0da0","first_seen":"2025-10-08T11:31:56.479257Z","last_seen":"2026-07-26T08:59:38.864502Z","times_seen":337,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/secureproxy?e=jscdn/getFile","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://presale-zama.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"2u6i8ejqiocqyvxg3m9m\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:04 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hFuFHGDq47b4WBXrglc0R0FuPqwC2cMrHqzC19%2B%2FiDrSbPpMlwz5x5ppOkaDwXzL8CG%2Fb1UShtroJUAP4cSa8czpQ5MEuGj77YBvLTHYnbPhaw%3D%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec1b1a174453-ARN\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3726462,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"24d0f1f7af9e0968960a2a8ddbb5ece3","sha1":"68ab8649ab85a8e9ec7800f32162aad977c86d50","sha256":"5ea4408b76e1beda1aebe7f7fb5cc02131f807dacf1bceef5c5fa749ede0b1b7","sha512":"24bdabf88fbd5fa6539b425797cf421979e4b74d61505bfa0c09c2cab08a5d000cdebd64e522c901475cb3c2cd30b1265a4a0434d55c226f5c2a89a02959d183","ssdeep":"24576:fdJnz/7iThtcYPx50jEG8L+M0YvzKr8ja/8JEywb+:fjidtJ550AHL+br848J6+","tlshash":"a12522dba012d0a36b75462437c142dd38da409de6e50b729a58ad80b48f99dc3ecff3","first_seen":"2026-02-14T10:36:31.454982Z","last_seen":"2026-02-14T10:36:31.454982Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1045,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":511,"receive":534,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/download.png","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.309Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /download.png HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 124683\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: \"69700f55-1e70b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 50290\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9UhJfDuEeYZttmEx30SsFzNE60RSfEOXok4zKg6gUVITekUSEv25HvouLoKtph3QWKt8U0trpaWEp0pTVgBBUnUCaHwKEmmiFicnfwM2acM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec18a9734453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":124683,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 480 x 480, 8-bit/color RGBA, non-interlaced","md5":"7fcd2d2512cddd8bae9a106042c94015","sha1":"cb3c1f4ef75d4008034f12a0b671c3945e9fb029","sha256":"b2819f9060884d2bc24216b35060391f8b33115a1c29a32406d82fd2af6f55b1","sha512":"cca88177e95b925267f39895f9489b98c9a0f95f3424e710af5d152193f230e57d30984a2f3568fd27f4aafe57f026cbe9492fde04f202e02443109950c2944b","ssdeep":"3072:wXYrdsjBo35LvNHo36ARrZKLLJvQzujWwFx21/:wXYC9o1NHo36qrsPJvWujWxN","tlshash":"68c31226d5a391aa51ef8bfdf5c3225715b311438770b5e06a620aec5f662bc201bbcc","first_seen":"2026-01-21T17:18:08.166006Z","last_seen":"2026-02-14T10:36:31.455882Z","times_seen":3,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/solid.js","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.306Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /solid.js HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: W/\"69700f55-147a3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 50290\r\npriority: u=3,i=?0\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UhSP%2BNfqL1jCRISQWx6Hn%2FDwk8ByBo3AHp9AYASBKFhuY3Ph7DxO4r%2Fx761zqA382bIGzpA9eODq%2FOJ8Hy9PRNY%2BeE52n1Me1%2BQIqDyIJYY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cdbec18a9724453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83875,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"1b65efcc5397f6523955bb16bd384760","sha1":"6090bd87217d0b12aa7c3665c24788dc92815717","sha256":"75ba9e6a966dea930715cc95d9f447568a854550f9d9f0da0c2e3aea5e5e759f","sha512":"5a19ad0ee481f9a960ad4b97e22fd618bc13eb57486c6f13965f981d5a57549f65702f6ce51c4b32755e857eac56d760207df507a4209f75d001ca6397d5e52b","ssdeep":"768:V/vkQcBIhpMfm0jDHtYJKDyrjqbNV+2YMc7cscZcxcNcwcycos2Hcax9jT4bfFez:1pKjZLfbNY4s6kbf8ilOcGr","tlshash":"b2836fe5990bd0e48e1521ded437ed15e4280963cdacf2a3ba2cdec1781df66c48727a","first_seen":"2026-02-12T20:38:16.057258Z","last_seen":"2026-02-14T10:36:31.456807Z","times_seen":2,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/index_1.html","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /index_1.html HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nvary: accept-encoding\r\nage: 136706\r\ncontent-encoding: br\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FqZSPXg5zOl3FnL0fUr2owhkIJSX8BlLzAXiFJcThDBIiuk73ZnEj7E8olC%2FjDJeFJ6W%2F9JiMXSUXzaXe%2BX%2FbHCS8AOm9fBXPmB4rKP7OQo%3D\"}]}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec19e9d74453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with no line terminators","md5":"948c3b0b89a440438cb10c44dfb25fba","sha1":"e4d35e5e283c4cfea043a022a3b06f0e85d231eb","sha256":"3de2c358acd98dd93f54af55a7d89ae64cca5757d76fb95ae74db8bd63389bdd","sha512":"fb5a9b43f60c13b8fa0fc50299d4083c2d3d1534753b8dc29871250020448c54f220d9ea2cad18d8515ece5afb532d23486cd870bce845d2b2d3d22630c9b7c0","ssdeep":"","tlshash":"72b01276d811080f6c50afe0cb8ae1c48400d838f0214c047ca5b180dd9c132c013a84","first_seen":"2023-04-07T21:29:48Z","last_seen":"2026-07-27T07:09:34.288424Z","times_seen":1134,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/631989bfba8987f182866cf85e266c82a797fe31.svg","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /631989bfba8987f182866cf85e266c82a797fe31.svg HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 136706\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69700f55-2b2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RxhMWZ6%2FY4f8ORNggxIMbOr1KIhHUC6a126GtRRoQpE0ZbczBdAbIzIXTM4e8zOs1U7Pt4z%2BvX5fEa3fer2q8So8zyFu05lQUDFYI01z6Wg%3D\"}]}\r\ncf-ray: 9cdbec1a19e04453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":690,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cdb2c7d4946f1c3220ccad70760c471f","sha1":"631989bfba8987f182866cf85e266c82a797fe31","sha256":"e51e428c118b858816b0c604ff79ca77b0027643cb31f7952e373548a728072f","sha512":"76a9248165210f4b6c41f01a75f0e3e8cbf0fd79a761e8268fafb5583d3ef0a755977e065109a1aafa3392692e5d19f5196704a42172da5de014b78a62dfedd5","ssdeep":"","tlshash":"97011862b34ed70c88045e570358a4fde057f89d769d9208fb81351ae84e9c7ec7218d","first_seen":"2026-01-04T09:38:05.157603Z","last_seen":"2026-02-14T10:36:31.458122Z","times_seen":323,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/cbdf9d6617c9b249e742e6bab5904c5135bfb5b7.woff2","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /cbdf9d6617c9b249e742e6bab5904c5135bfb5b7.woff2 HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26176\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: \"69700f55-6640\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Va1ERCwbG3nlXwE8Y2%2BBPcEX7bFCFgJEz3%2Fqnb%2F9a6FGLw5nY6W7SQ%2Bp1E73yx8kq4IVNs%2Fv6iQJjzcM9mTj5UpXrSVbqgPA5%2BhD%2FoJYjUs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec1a29e44453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26176,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 26176, version 1.0","md5":"f4c74eb7f80ab4cf238b61a021ea7fe9","sha1":"cbdf9d6617c9b249e742e6bab5904c5135bfb5b7","sha256":"c01d8b381d17060934cc12bb687ff45bb94ed0611918fbb5acba3563dbd4429b","sha512":"b11f5dc0d446442915d2adaf92f6f5de613a43ad1a4de89ba8db81b748c280d1408e383b6a65595906374c0d63b8aa8d2d1729703cfea90a1a388c4a3fc7a10b","ssdeep":"768:IFo67C1f8mfTcEzUlxIDHJXj7Ho063pa8mhJU:kJ7C15fFdbhj7Ho1pAhJU","tlshash":"d7c2d0c378bf270573443d34fc82a2a469074a05e9a57bc55efed7402ed2877da82b1a","first_seen":"2025-01-31T21:48:31.434695Z","last_seen":"2026-07-26T08:59:38.861173Z","times_seen":509,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/6bbdc3176149b6eca0466d3a067bebe33486a5aa.woff2","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /6bbdc3176149b6eca0466d3a067bebe33486a5aa.woff2 HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26060\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: \"69700f55-65cc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rohcd0J0w%2FMwSwDlem3tQn%2F%2FJ4JrXQE7%2Fm5XHgSoJG8ha9xopkFUmqpT2t7k149hdmvpwAcwWVRH7WrtEENevDNaBh6IO5bH2yaOr%2FvbwrM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec1a29e54453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26060,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 26060, version 1.0","md5":"148a87e4f6390bfd837d1982049b644d","sha1":"6bbdc3176149b6eca0466d3a067bebe33486a5aa","sha256":"c2fae0f78096f01906a20a1399a2c0f9c520d3c11231b314dadddc3e135d1edf","sha512":"89bb36f853aa4106c59739da9b79dffa3702714f431a06a4b848c6544629e75464e114591c386a63f2fce02e44533c96c5fd16feccede81bc862b50b65deb119","ssdeep":"384:9GDlGlHNzjDEPxunLxhmQx1NfEGcKQky1DknuXcSjTz3CB1PXyEpi3avQe:99xaxWLxhmQx1NN9yynuJbCbfyBqvQe","tlshash":"4dc2f1af1e4b1358e86c162409f7e2a56032721a7b1bfd1c6c5424300879df81bb7f5e","first_seen":"2025-10-08T11:31:56.448535Z","last_seen":"2026-07-26T08:59:38.814286Z","times_seen":330,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/f521290cee7bf0d1b4c87cff67ff711cd9e622f5.woff2","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.565Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /f521290cee7bf0d1b4c87cff67ff711cd9e622f5.woff2 HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26932\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: \"69700f55-6934\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=2592000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UkyRviMhTliuTQAH1cO9yLr68qx4d520ms9S5odbQLhh4CZS0nRy%2FtilwWFDg7U%2B6fiimtjpe%2BNfJRY10JgdbpfghjZyQgFd7F29e3jZR2Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec1a39e94453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26932,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 26932, version 1.0","md5":"30ed321199a470fb94cd7971559dd091","sha1":"f521290cee7bf0d1b4c87cff67ff711cd9e622f5","sha256":"abd1355b956aa617f051c81a94e34e51b775d6ab974472deda3ea4bc76964f02","sha512":"d2105ab4db58094248a50efc1c1dc5a57c4be60ea58c0781608adccab05003b0784185aaeedb40e0ed649ec4c050ea45859f378f3f4a7f59799c1eca9bf284d7","ssdeep":"768:SreRAjdozix/0+7GfOeIDddzaOq3o4i5Jmma:Sr3o2/GkdzImJmma","tlshash":"e1c2d1808da753e2ca75d639face1b19b1f13d5abe308154c09c5e6efb4802441afab0","first_seen":"2025-07-12T23:22:57.268171Z","last_seen":"2026-07-26T08:59:38.796149Z","times_seen":496,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/c76d3479e8221e55f0af10e3446ce68f020082b7.svg","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /c76d3479e8221e55f0af10e3446ce68f020082b7.svg HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 50290\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69700f55-1152\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ssrfmbM5hQrFL0lIig%2F%2BrtT%2BO5futj3ex6n%2FqbU8knhusaGNqthbM5qoqa%2BNdV2DXxaV%2BEAknK%2BCxuLUVXJDfWc%2Bl6jPqUXoc46QxT1QInE%3D\"}]}\r\ncf-ray: 9cdbec1ada004453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4434,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82c34073e8413e6d7dc773b416fb8dd1","sha1":"c76d3479e8221e55f0af10e3446ce68f020082b7","sha256":"a3047baf37896d575719db9744f42adc416264df88696f43e22487e0610908c8","sha512":"4d2c35eae1ace50fc88bc7aa75723c605ad941c686c3069e5141f37378ecd989481561d78f5f790da28f81734c5a9510d3eeb3099c238546eb7f363dfd48355b","ssdeep":"96:+hFVGJdVlCQ7GvQNRe54jvBDY/ne7nqqthGfKY1hK74yJ:SURe5mSYR","tlshash":"8e91adc1f14442752aabe7f4e4bc90d754733dcc8b0ac45b328aa674dc2956ba93fe60","first_seen":"2025-07-12T23:22:57.272644Z","last_seen":"2026-02-27T18:22:54.821292Z","times_seen":331,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/a5a0125a8cfa2347dee27ef1a8f26bc5c77ffde7.png","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /a5a0125a8cfa2347dee27ef1a8f26bc5c77ffde7.png HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 7912\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\netag: \"69700f55-1ee8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 50290\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oLZdDC%2FV%2F6ans1ZiEk6gwsfFnA9LEAWNBJyd1SJmRFmGITkGg6sVj56aItuQthsCyKNrDoPEz0oCw5K6gqMp6qlxZjMolMMDFab3ZDIRIAo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cdbec1a09dd4453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 528 x 528, 8-bit/color RGBA, non-interlaced","md5":"6b01cb28303be63e6cf6950ed6054e6b","sha1":"a5a0125a8cfa2347dee27ef1a8f26bc5c77ffde7","sha256":"0b7f2f7e09e3f12dd0982ff5cea0f93a222d3bfd2c434b9c14493e9e8be167e6","sha512":"24c0f2f28527df7e014310702b6ef917a57903d796631967c067be6a203874b7accb7ab125d6062360a2fa830c20ac762e7a4c8f847f13b4060eb2f70d17ec0f","ssdeep":"192:qeGDlpQ63DBIIKZo7ZVJSQ4eOxLnGDpFA:ClO6FdKZo7pS/eeGDpu","tlshash":"09f1d65dca2a4433f29a226de41194578ca8ad32f464ef2915e7b5bf2313f749c35cb0","first_seen":"2026-01-21T17:18:08.185188Z","last_seen":"2026-02-14T10:36:31.461148Z","times_seen":3,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"presale-zama.com/f1d06662297a431330169ec6376064dc0fa0a165.svg","fqdn":"presale-zama.com","domain":"presale-zama.com","tld":"com"},"ip":{"addr":"104.21.2.73","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://presale-zama.com/","date":"2026-02-14T10:36:03.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"presale-zama.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 20 Jan 2026 22:30:58 GMT","end":"Mon, 20 Apr 2026 23:28:13 GMT"},"fingerprint":{"sha1":"52:D6:37:8A:3E:E5:CE:0D:1B:CE:CA:45:23:5A:AC:50:61:58:78:94","sha256":"5D:77:C2:CA:2D:57:02:B7:83:D0:95:67:DE:9B:F7:C7:45:5A:D7:F0:8A:0F:A2:28:FB:C0:77:18:B7:52:DB:91"}}},"request":{"raw":"GET /f1d06662297a431330169ec6376064dc0fa0a165.svg HTTP/1.1\r\nHost: presale-zama.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 10:36:03 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 20 Jan 2026 23:27:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\nage: 136706\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\netag: W/\"69700f55-762dd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=14ZSFpMbe2NMv6jNQ0DQWur6s1iSIbXAvV1U0zf7cYPmHjTI6LJyScVi0FokTWPQ8Vpy%2FhbWuhG5ksr6IHyvVfH4emEfTnX2q7ieEFOVeLQ%3D\"}]}\r\ncf-ray: 9cdbec1ada024453-ARN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":484061,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6e9fc953cf904251447d474723a80f1f","sha1":"f1d06662297a431330169ec6376064dc0fa0a165","sha256":"e1cbd9440540ea749539e21281737fd61f3785b8a95824f06d9804c491e78b44","sha512":"7157b93f2a98eb693e1c0197a7c9f7114626ded6f3d786b71cc28fe19f98300c1bf41dc2bde33551947e74ea3e6fd44b1fb10caafef916bc32fdeb34857c011e","ssdeep":"1536:683K8GJ0VxUgV4qOjiJJw1Homu4xjxZCmpiKVxy1rHNluVHWllyMyj1Bf5L2LYr9:TKWs2G0tL1cT57T9FXi1qUY/Lj8+l9","tlshash":"eea450df3f7011d94accdbdb7f1140ad619be8b25a814e14c2accf6e599686ec841b83","first_seen":"2026-01-04T09:38:05.152401Z","last_seen":"2026-02-14T10:36:31.462041Z","times_seen":323,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-14","alert":"Sinkholed","trigger":"presale-zama.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}