{"report_id":"6517816b-1097-4068-aada-518f6fa4de9b","version":6,"status":"done","tags":[],"date":"2026-05-03T08:43:10Z","url":{"schema":"https","addr":"rectifyprotocol.pages.dev","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"title":"The Decentralized Protocol","dom":{"size":81203,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15085)","md5":"72d1f1af5142e63d1f3d4cc8eface8e5","sha1":"5f56bdde491117f651677fa63f45c6a5872aeaec","sha256":"4d363883819250182dc855a10ca229499dcbe897b8b390529460d939dffb91f3","sha512":"a50956fea62853017dbaab769185a5512911f1cc448cab106038acc85cd9b041a6b89198e6a17c18b6d1fb0f76995550247fa4cbd7edecb064ce2b08437e59ec","ssdeep":"1536:zebx/c64Jysq7vFwKudUxYAaH2Z86m9XeTWhHbLxxh6rVfZ+1S6hAahETUv6Tihm:zeHwjb2Z86m9XeTAHbLxxh6rVfZ+1S6Q","tlshash":"b583d859e4e2221a550b54495be76b19a731e003ca0fed957bcd05c8cfc7fc498e3b8a","dom_hash":"domhasha23041fc10be9be96d6b82b5f31f4398","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.47.23","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-07T08:43:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":1}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-05-03T08:42:47Z","timestamp":1777797767,"ip_dst":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"ip_src":{"addr":"Client IP","port":44242,"asn":0,"as":"","country":"","country_code":"zz"},"severity":"low","alert":"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)","source":"{\"timestamp\":\"2026-05-03T08:42:47.082962+0000\",\"flow_id\":420614913862256,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"172.18.0.11\",\"src_port\":44242,\"dest_ip\":\"188.114.96.1\",\"dest_port\":443,\"proto\":\"TCP\",\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2057746,\"rev\":1,\"signature\":\"ET INFO Observed Cloudflare Page Developer Domain (pages .dev in TLS SNI)\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2024_11_20\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"tag\":[\"Description_Generated_By_Proofpoint_Nexus\"],\"updated_at\":[\"2024_11_20\"]}},\"tls\":{\"sni\":\"rectifyprotocol.pages.dev\",\"version\":\"TLS 1.3\",\"ja3\":{\"hash\":\"650c82854aed91a22996035b295a0c3e\",\"string\":\"771,4865-4867-4866-49195-49199-52393-52392-49196-49200-49171-49172-156-157-47-53,0-23-65281-10-11-16-5-34-51-43-13-28-21,29-23-24-25-256-257,0\"},\"ja3s\":{\"hash\":\"eb1d94daa7e0344597e756a1fb6e7054\",\"string\":\"771,4865,51-43\"}},\"app_proto\":\"tls\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":5,\"bytes_toserver\":789,\"bytes_toclient\":3482,\"start\":\"2026-05-03T08:42:47.076400+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"rectifyprotocol.pages.dev","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2026-03-20T20:34:51.871988Z","last_seen":"2026-03-20T20:34:51.871988Z","alert_count":15,"request_count":15,"received_data":2860078,"sent_data":7070,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/config.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0931430deeadfa118a68b09bba150cf8","sha1":"f7638f1792a9c06d50e459a4566ba3e3bbdab831","sha256":"269f1bb1004c71afa2b2062be515cf96315740a063a0061060f0c5cb6fbcbf0b","sha512":"bb49bb769bc12fedb120888a0f32ec4a2e1ca60d1099b5c10153c726898380bedb44365e698d4ad94571957408917f8b3893157136ec3477ec707c25348b35ec","ssdeep":"","tlshash":"cbb092782822302a00a65a1f875f266a22a300b222151eb8a18ef4092a56513d6d8688","size":109,"data":"","first_seen":"2026-03-20T20:34:55.424547Z","last_seen":"2026-05-03T08:43:14.106157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"87a68fcdbbf46eb9d68c3ebb07e05ab5","sha1":"3393dffff4bd0169982086b4c106dabaa7c7b40b","sha256":"553d056934826331085a101ed640eb8c5ed5650be909709ca821e04a60e0aa1d","sha512":"8837c1de9e548bfdad4e1ecd9528baa057cb840dc0ff51fa27b6355c12d2a1c6fb2de3fa4bbe1df6a4837c938577092193884cd6d043b4a6fa95581ce45c86e9","ssdeep":"","tlshash":"8ee0c2286a5615bd26732591cb1f6240e8a000b35081d801fe1ce68a0f94b1934a5bd9","size":343,"data":"","first_seen":"2026-03-20T20:34:55.42546Z","last_seen":"2026-05-03T08:43:14.117977Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/assets/index-DJ0xwRJa.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab323531b38a8167e7fc1832d49cec91","sha1":"d784a8a60ffe4e8a9bf95f74054d85f4da0dc0e9","sha256":"1cdf0de98d2e2e7aa2442562ccd8103fbdf48fff549d748e9faf1bdc3dbaa5d5","sha512":"a70d0742e3f58e0757bca727473706d1bcaf6064e0560cdf7bb9efed293ec2533a66512c439f36961649f6a124edb168da64c269c13e3d554eaa97d5d4f577db","ssdeep":"24576:dz/nm8y6mlcyyyNeJZP+yhHuTP84B4FbdDpdLd1t/La22Y7njKHd:Bnm8y6mlcyyyNeJZP+yhHuTP884FbdD8","tlshash":"f7556c8072b6b03147a755d4107b1103f2386855340dc4a8f6acedfbbfa998986bbf79","size":1383891,"data":"","first_seen":"2026-03-20T20:34:55.426524Z","last_seen":"2026-05-03T08:43:14.119202Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/assets/sha3-DVSzrknm.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"83b1b689d0c9364bd13e5ff43fba1c1f","sha1":"0fed4e0aaf332ad079b54ef4406ca0983ac34203","sha256":"0dec000be8e8018b5f7afbe02ab1fdb9e68c6df1f775f6c373f40d7aa4b29e6e","sha512":"e899543b212d62e33beeb008f60ff5237e4e3f0f0f4110c50f53650d76fe241ad1b7ba5f445e3a68648ae14711950b1dfa5ebbeaa8d9f1a1ca64dfaf51b530b2","ssdeep":"192:RCyXgWHWuZrR16ZPHrz6zj1ydi8LI9zMyZCLcbwENkCtUXCmOOlXJ3UoUFKD4SaH:MDWHWuZrR16ZPHrz6zj1ydi8LI9M7Lcf","tlshash":"f322888422c4a0a7a3d73de5447b401ad420bc30704a885cf75c4f6badea77d96f6e3a","size":10218,"data":"","first_seen":"2025-06-21T18:52:51.020723Z","last_seen":"2026-07-19T11:53:45.565274Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/assets/index-B8GuECpg.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f536ca7cbb2ef226169b6a0eee34596","sha1":"80c4c4dde7082d1d87e720d3bac4e37e083559dd","sha256":"58238b11d4062d2091052234b595bbcd51353ba6d6c1c4ec26da6e78b1c42d60","sha512":"410e5dfbeca0a9a2f32f6bb3bcaa497370888263e247fa49c17854192f7617b6a562ca281eba28afadceda37afec05fe4b93db8cf7a440220a4020060ac6237a","ssdeep":"1536:bGK4sMo24Owf/WVZ4jzCx61SQv/Joy28IzSNePOQWaAW4hAiRuImimc/C1zLE:bGK4sMo2Uf/Wv4jzCgt/Joy7IzQJQWay","tlshash":"23833a9031b5a17047da94dab0b66203f334a819f84cc07cf6adccfb5a699496327f79","size":88253,"data":"","first_seen":"2026-03-20T20:34:55.421238Z","last_seen":"2026-05-03T08:43:14.10333Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/assets/sha3-DVSzrknm.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /assets/sha3-DVSzrknm.js HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:48 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cH3sCggRiGvOxuJMn%2FHDgfkPKsRlZj0Pq%2BO2yLiaAr4Rn6SvWuP1XyRLkiaQO%2FlZAomAfod82SFmL51pN1YmkaZCKz5uP%2FedIFzyYnvtJNvl2DC7N82eOgvHtW9%2BROrFCBG2VFY3LHV2GbRA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d4c936ae03fc807a6f53c7717e6ec699\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df971e9d88deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10218,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (10217)","md5":"83b1b689d0c9364bd13e5ff43fba1c1f","sha1":"0fed4e0aaf332ad079b54ef4406ca0983ac34203","sha256":"0dec000be8e8018b5f7afbe02ab1fdb9e68c6df1f775f6c373f40d7aa4b29e6e","sha512":"e899543b212d62e33beeb008f60ff5237e4e3f0f0f4110c50f53650d76fe241ad1b7ba5f445e3a68648ae14711950b1dfa5ebbeaa8d9f1a1ca64dfaf51b530b2","ssdeep":"192:RCyXgWHWuZrR16ZPHrz6zj1ydi8LI9zMyZCLcbwENkCtUXCmOOlXJ3UoUFKD4SaH:MDWHWuZrR16ZPHrz6zj1ydi8LI9M7Lcf","tlshash":"f322888422c4a0a7a3d73de5447b401ad420bc30704a885cf75c4f6badea77d96f6e3a","first_seen":"2025-06-21T18:52:51.020723Z","last_seen":"2026-07-19T11:53:45.565274Z","times_seen":89,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/assets/index-B8GuECpg.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.987Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /assets/index-B8GuECpg.js HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/assets/index-DJ0xwRJa.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:48 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iXvTuCgtODtm3Lp9vVfhtCYxjwZE%2BZC64SPwHoq%2BRhjo3sHUpFWadcOif9JBVDcy9%2F%2Bz3EonPJ2tZhoGjMVkKhaTOfgIDRELQxEjtqST2aNJo99UDMRoKRzj%2BC%2FiPa0xBLFhaRxTa46qQh8Q\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"62a80a7c04ff565111512ce5114a6107\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df971e9e58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88253,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f536ca7cbb2ef226169b6a0eee34596","sha1":"80c4c4dde7082d1d87e720d3bac4e37e083559dd","sha256":"58238b11d4062d2091052234b595bbcd51353ba6d6c1c4ec26da6e78b1c42d60","sha512":"410e5dfbeca0a9a2f32f6bb3bcaa497370888263e247fa49c17854192f7617b6a562ca281eba28afadceda37afec05fe4b93db8cf7a440220a4020060ac6237a","ssdeep":"1536:bGK4sMo24Owf/WVZ4jzCx61SQv/Joy28IzSNePOQWaAW4hAiRuImimc/C1zLE:bGK4sMo2Uf/Wv4jzCgt/Joy7IzQJQWay","tlshash":"23833a9031b5a17047da94dab0b66203f334a819f84cc07cf6adccfb5a699496327f79","first_seen":"2026-03-20T20:34:55.421238Z","last_seen":"2026-05-03T08:43:14.10333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/favicon.ico","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:48.044Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:48 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=S5qn2yw482WzmlKWM3rHgpUq9OfcvwUnABZKBRj%2F0dB4iBfICSUhB6Dku2vzSzmSSooz%2FWJK7GCUUv31jb2Tu9xCUINqPESkCjdgXMSd6FyWbP8Ol2Z2FbOd0zYN18hGC9LXlnxDXVxoWbtK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df9724b1b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498305,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (41459)","md5":"cc60306c96b500a008a549e2fc1aea9a","sha1":"9044e1ce85c594d9627d025059bff71afb0acc62","sha256":"4fbe76f463bdc0d0677d80a38bfebbba5278848d524040c2c350e2768397f4c4","sha512":"9025b2230007ff29117322089f0eb99a01deb8011fabe1a8f89c908040612b8ef9756f06c297466e3ec40ce24496df674dd6d4263644380dd1f4c3f59a4c91d5","ssdeep":"6144:Vi7atq3W7atq3R7atq32D7KBFn8UwWt2jBdfIUqZyYhULBHcAN/If+GIZcb2hfCZ:Vc3I3f32vAFFwWtGd107hO8AN/Ife5Zi","tlshash":"15b4f1ba98f2221a1557805d22fb3f063f25d517c41fae967acd47848fcbbc088a3795","first_seen":"2025-10-18T17:11:24.942062Z","last_seen":"2026-07-26T00:52:50.291698Z","times_seen":4,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":84,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/config.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /config.js HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:47 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEA%2FAWiT6QuDNKDZADob2XtdgQpdl%2BFm%2FGHY0G88QDh%2FZHZG0NWruq87%2BteXrGwQj1BYaczocKfDqbMwyY4Wls8zXzcvCIwQTFQ9yf%2FPsRZ4DmtJVN8ElBblmTLKzLAheQ%2FotOTzBHRHO%2BVT\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"37146400e1099d69a835a1804048cead\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df96e78268deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109,"size_decoded":0,"mime_type":"application/x-javascript","magic":"ASCII text","md5":"0931430deeadfa118a68b09bba150cf8","sha1":"f7638f1792a9c06d50e459a4566ba3e3bbdab831","sha256":"269f1bb1004c71afa2b2062be515cf96315740a063a0061060f0c5cb6fbcbf0b","sha512":"bb49bb769bc12fedb120888a0f32ec4a2e1ca60d1099b5c10153c726898380bedb44365e698d4ad94571957408917f8b3893157136ec3477ec707c25348b35ec","ssdeep":"","tlshash":"cbb092782822302a00a65a1f875f266a22a300b222151eb8a18ef4092a56513d6d8688","first_seen":"2026-03-20T20:34:55.424547Z","last_seen":"2026-05-03T08:43:14.106157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/assets/index-DJ0xwRJa.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /assets/index-DJ0xwRJa.js HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:47 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8sykUTDZoF8V%2F4wnZydhkoWTQloUizI3yMbP2FLS0PFhzOC%2BP9Y7IFzJ1zLTHYwEIHr9IBuorjgajFiwWV%2BEuxIOXgfQFzUpbTfgh7udI%2FXwkZHXGjEvkfK%2Bj44S73CN3piqdxTixki95auf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"a43592424a82245577acf1ca43cc03bf\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df96e782b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1383891,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (41078)","md5":"f0708deba1c5bddb382335a46a926ba1","sha1":"b972fcf122596846166a2c113540912b94bf89e5","sha256":"9229dc06a1c07d2194ce4450ae09d91f64f2ce613c7a610f64a5f22332c01ed2","sha512":"188b057f59d6271ddcedd5b38df69f64712965351f38bb3379599760575a96d680ce16c0a1b19470f3d7af4987075fdf3f7184fbfc783846e7fc4c58fa56ce4a","ssdeep":"24576:dz/nm8y6mlcyyyNeJZP+yhHuTP84B4FbdDpdLd3:Bnm8y6mlcyyyNeJZP+yhHuTP884FbdDB","tlshash":"0a256d8472b5b43213a745d8607b1103f2386825340cd4a8f6acedfbbf9988556bbf79","first_seen":"2026-03-20T20:34:55.420269Z","last_seen":"2026-05-03T08:43:14.10759Z","times_seen":2,"resource_available":false,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/20c325c67692b9015ddeb34d34f0925f0fe01664.png","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /20c325c67692b9015ddeb34d34f0925f0fe01664.png HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2143\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"78629be98aa522018b7007be740e89d8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwlvPnNyHVLvVafi%2FasACBE3EfILk4wmhrQODyqrp5Agp9Fhw%2FKf3%2Fc9QOKqcSlUk8uXXgK14yEo8CoyXmqmSDPkVieG%2BO9AVa9z9Mbr0ftmpwyFXieulHsen8z7ITPzSgB7fageTa2QUXEm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5df96e782e8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2143,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 27, 8-bit/color RGBA, non-interlaced","md5":"de7206b9069f4a6c346a07ef975ede7f","sha1":"20c325c67692b9015ddeb34d34f0925f0fe01664","sha256":"98168d5347388aaf54de17a7a6ada10c8c4a8564952854ac3f968bc9a9d7075b","sha512":"f96fba9438f09902c823119056a2aa67b7f5c45bd61dcba814fcd6e4624fce2d40b99b2bd418d02ca4c0af6016d73512b3d2019d6e075a416853bd46bfb3213e","ssdeep":"","tlshash":"8541b586f8401d40754adb413ced20375d234f809ae5d4a2bcee841794604f6da1e6e7","first_seen":"2024-08-20T08:53:20.252076Z","last_seen":"2026-07-21T17:30:09.376289Z","times_seen":43,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/da39a3ee5e6b4b0d3255bfef95601890afd80709","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /da39a3ee5e6b4b0d3255bfef95601890afd80709 HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:47 GMT\r\ncontent-length: 0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"af1349b9f5f9a1a6a0404dea36dcc949\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UKlmzKopoIWfuL2qWj74llAEFuxT6hd9SioDs3lg0TuqH1D9Vw3S0DLbWXwIys2zPZcYN8zPp19uUAxhRMzzM95%2B3SGut%2Blt54LAaT4KR82zwTj4jg4LWnT0Rw1hIKOIRyh48JfuQE1Wnfcz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5df96e78308deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-28T07:56:17.395008Z","times_seen":17575932,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/cc002b643055b6fc2209d365639b3763e3626a2f.woff2","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /cc002b643055b6fc2209d365639b3763e3626a2f.woff2 HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:47 GMT\r\ncontent-length: 74352\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f3a8bc24b523c920ec671c622c613ce8\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pX815Cn9mwULg2NS%2Bh%2BQy%2BokY5o6Kkp8gfXIkJKDHocTpF7M6fqVDiu7tH9aERvmkUyvQyF3k%2FJ5dJVK2k3P5PNVo8TZnoY615ToN%2FqYwg4%2FTrJ3PDK%2FrWqkypL49TgBV%2FH6O5ROtWk6Olm%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5df96f5a9c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74352,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 74352, version 1.0","md5":"2b275f1810cd5a7d2c37504b42ca994b","sha1":"cc002b643055b6fc2209d365639b3763e3626a2f","sha256":"4656ebfbae4ec6b6c6704330ce568c3def93610f1e883ba0de4ddf03ce2ef241","sha512":"ec5756e0c5f7e171e937a9a552c7a612476991aa9decc44962215015b75f64ff7329f05cd8fbb9a25bc79d952e06c28413614bfcc3ff951d78f56885e85a7eaa","ssdeep":"1536:7e6LFcWGnDj7BL2uF2A44rdx9rhHMDD5LGl9xOIYhmipL4cL3I1zajka:7VWWGX7BLnMAVrd7VsDJixOIYh9pk/2F","tlshash":"507302ffe27b2b95ee4c5fe200150f842c5945e234ae050ab00dadff3ea9ac97509a55","first_seen":"2025-02-16T09:21:41.290681Z","last_seen":"2026-05-03T08:43:14.111049Z","times_seen":9,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/favicon.ico.html","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:48.033Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /favicon.ico.html HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\ndate: Sun, 03 May 2026 08:42:48 GMT\r\ncontent-length: 0\r\nlocation: /favicon.ico\r\naccess-control-allow-origin: *\r\nreferrer-policy: strict-origin-when-cross-origin\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c7tqP9eyVPh%2F5O4BHhrX%2FKD0cMUJUwgxsfi0NaoqO7qlSYxExuaRQD68ml5w73bSSBC5vl3Psi9mKT3o1PrEC%2F3AXMNO96gqavM%2BWVZB6dfq8QXm40LSb79kGIjLDmFwOTdYzUKnhyn2eDD8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5df9723acb8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":498305,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (41459)","md5":"cc60306c96b500a008a549e2fc1aea9a","sha1":"9044e1ce85c594d9627d025059bff71afb0acc62","sha256":"4fbe76f463bdc0d0677d80a38bfebbba5278848d524040c2c350e2768397f4c4","sha512":"9025b2230007ff29117322089f0eb99a01deb8011fabe1a8f89c908040612b8ef9756f06c297466e3ec40ce24496df674dd6d4263644380dd1f4c3f59a4c91d5","ssdeep":"6144:Vi7atq3W7atq3R7atq32D7KBFn8UwWt2jBdfIUqZyYhULBHcAN/If+GIZcb2hfCZ:Vc3I3f32vAFFwWtGd107hO8AN/Ife5Zi","tlshash":"15b4f1ba98f2221a1557805d22fb3f063f25d517c41fae967acd47848fcbbc088a3795","first_seen":"2025-10-18T17:11:24.942062Z","last_seen":"2026-07-26T00:52:50.291698Z","times_seen":4,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":5,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/assets/index-B8GuECpg.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.980Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /assets/index-B8GuECpg.js HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:48 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=4,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P83cTYNaPSTMfv%2BQ8%2BfBW9NKqwR%2BY8dHo763AreGWiC%2FnjWPUNWfMTJrdoKGC0PHo9sjuV%2B904KJWkclbdWmkF4yWDCTtaNhY7e3AlZbnBZdgVCH46cSMtyyLPqzkiw8f8O6Wte0lavwT6Yx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"62a80a7c04ff565111512ce5114a6107\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df971e9d58deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":88253,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"5f536ca7cbb2ef226169b6a0eee34596","sha1":"80c4c4dde7082d1d87e720d3bac4e37e083559dd","sha256":"58238b11d4062d2091052234b595bbcd51353ba6d6c1c4ec26da6e78b1c42d60","sha512":"410e5dfbeca0a9a2f32f6bb3bcaa497370888263e247fa49c17854192f7617b6a562ca281eba28afadceda37afec05fe4b93db8cf7a440220a4020060ac6237a","ssdeep":"1536:bGK4sMo24Owf/WVZ4jzCx61SQv/Joy28IzSNePOQWaAW4hAiRuImimc/C1zLE:bGK4sMo2Uf/Wv4jzCgt/Joy7IzQJQWay","tlshash":"23833a9031b5a17047da94dab0b66203f334a819f84cc07cf6adccfb5a699496327f79","first_seen":"2026-03-20T20:34:55.421238Z","last_seen":"2026-05-03T08:43:14.10333Z","times_seen":2,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/assets/sha3-DVSzrknm.js","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:48.047Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /assets/sha3-DVSzrknm.js HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/assets/index-B8GuECpg.js\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:48 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxrSiKu5YVRmex3ct0Ii%2FVJH31P%2FD5srQH3AiCw9Y43gSr4vaR0ECsqqmrw1hEdOlvG0j%2BEtun1KfYkKSfD6owKK2vPV0WcwSYoJHwQucpMk7MpWToeBqiqr3r93t51%2Fqzu%2F8ahsxLkZANXM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"d4c936ae03fc807a6f53c7717e6ec699\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df9724b2b8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10218,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (10217)","md5":"83b1b689d0c9364bd13e5ff43fba1c1f","sha1":"0fed4e0aaf332ad079b54ef4406ca0983ac34203","sha256":"0dec000be8e8018b5f7afbe02ab1fdb9e68c6df1f775f6c373f40d7aa4b29e6e","sha512":"e899543b212d62e33beeb008f60ff5237e4e3f0f0f4110c50f53650d76fe241ad1b7ba5f445e3a68648ae14711950b1dfa5ebbeaa8d9f1a1ca64dfaf51b530b2","ssdeep":"192:RCyXgWHWuZrR16ZPHrz6zj1ydi8LI9zMyZCLcbwENkCtUXCmOOlXJ3UoUFKD4SaH:MDWHWuZrR16ZPHrz6zj1ydi8LI9M7Lcf","tlshash":"f322888422c4a0a7a3d73de5447b401ad420bc30704a885cf75c4f6badea77d96f6e3a","first_seen":"2025-06-21T18:52:51.020723Z","last_seen":"2026-07-19T11:53:45.565274Z","times_seen":89,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/2695c647628d29316cbe4e06c172e6a4669274a3.png","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /2695c647628d29316cbe4e06c172e6a4669274a3.png HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 2140\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"78e976ed4085959a22a4c4a5ca1955f4\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OJnN5pu6Iukf9lJOuZ1aXFM3cBvYn9bJQaYei6yG711Xcl%2FBM2xdS2XRZiEZT1KNsC5aGKIxuHUtXbZQDqRJqccBq8pcaZKD8W1i1Vz%2BPER3oygQMOvy1RYrrVK6r52t2D4OXo5NDZnzMPX6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5df96e78348deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2140,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 28 x 27, 8-bit/color RGBA, non-interlaced","md5":"2eb7c586c9ef53da52182fd4b009cda1","sha1":"2695c647628d29316cbe4e06c172e6a4669274a3","sha256":"be127cd4dcbe34fee18064e662aaea2a1135e9abe21e0b80cee64496682d5865","sha512":"4ed14b066e0aa1cc26d43452ffee209018a57ef0cb2c21079a72b0010f3a98e607f7e1549343d90967b8e3e477f8164f0ceee2688649e2c245ff1eeb2223340d","ssdeep":"","tlshash":"7d41844bf952ac40984bdb862ce962577b2747c0cbd1e065acddc9371a700f98d1c6d3","first_seen":"2025-03-11T08:05:42.659444Z","last_seen":"2026-07-21T17:30:09.361609Z","times_seen":42,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/xclod-img.png.pagespeed.ic.S07_z6sv1Q.png","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /xclod-img.png.pagespeed.ic.S07_z6sv1Q.png HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 63483\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"e180d58aa6ab37a6886bb6f7a2bc0658\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHO6TqAAYva99CCmMIRR2sZLw%2BaQkFO4F2wMSU2BaqMrg2BFgjgAcGUsgUIAhVqnkuvcEh8aVH%2BPMskeQCOYLj0uE%2BznFkWqY1nPX5Jf94BF0zLpl%2BvlIwnmiX%2FeNOTkVjlyltyZdEkBlgCE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5df96e78328deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63483,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 427 x 296, 8-bit/color RGBA, non-interlaced","md5":"4b4effcfab2fd50fa44e07b9b01d975b","sha1":"a20e264e3076f91d24b5bad266352f98887aaff3","sha256":"5b124d78a1fa16e3f3933e860fcb70debf4c305fa7feb1e3931381fd48eddcfa","sha512":"134f2a4a72be6dd99e56fb38be682448433b41f0c03716c75dc9a82872416a94a55e5d572230f6e83f1e7a88a1d60e518329acfb380550ef3af94818a96b7f08","ssdeep":"1536:aCUIi9io47Q2/BYMiKb95tJ/fVz0kdG2v55LARglE:a8i9in/4Kb95v3Vz0kdFTLARGE","tlshash":"4a53028d486279d3bddcef62d8a01245644ddd140e7320208d68ba75cc677a3b9bef83","first_seen":"2025-08-08T12:39:21.591838Z","last_seen":"2026-06-29T04:43:24.013121Z","times_seen":19,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-03T08:42:47.055Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 03 May 2026 08:42:47 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UO4fBDboxRfIgEErMcwZ4xYfVrIm3%2Bv7G1Lqz4Cru51DwV1POQchp1%2BRhONn%2B5TiAP3HWPOLuBkOEk9RhAQQ9oOWfudO%2Fwcs7XnWGzDw%2FWn%2FWBgAZYjcTmVCprA2uNBrbuQ1VFrttKkjzoaK\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f5df96c5c48120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":65376,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"227ceca066a2e404b688b5a1e2cd1458","sha1":"e35f34358556fbd33e9e287aba1762316f7e4449","sha256":"c407a732218a4a7463272b0f7fc2ffd351a0e28f86adce1db6b7bf528c506cd8","sha512":"c1794fe18843fc8ee05b2ec27518f36fc1a74a3d517d0b50f97e6b263d9a5f76c145fa8b8cb334629555e31b04d0b0b3f241118d59823d47068e2f4bdffc2680","ssdeep":"1536:ZKudUxYAaH2Z8U0vFAZohlR17Pr89TBTMrYM3SghyZWpolmVogJPwZHILs:Zjb2Z8U0vFAZalR17Pr89TBTMrYM3SS4","tlshash":"8953716a80e2220a550784895bf72b066765d113c60fee95bfdd16d8cfc7ec4c8e378a","first_seen":"2026-03-20T20:34:55.419317Z","last_seen":"2026-05-03T08:43:14.115021Z","times_seen":2,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":44,"dns":31,"connect":1,"send":0,"wait":191,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"rectifyprotocol.pages.dev/background_homepage_header.png","fqdn":"rectifyprotocol.pages.dev","domain":"rectifyprotocol.pages.dev","tld":"pages.dev"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://rectifyprotocol.pages.dev/","date":"2026-05-03T08:42:47.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rectifyprotocol.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 24 Apr 2026 18:23:00 GMT","end":"Thu, 23 Jul 2026 17:52:46 GMT"},"fingerprint":{"sha1":"1D:02:7E:03:E0:A6:79:98:9E:6E:C3:05:14:54:AD:4B:D9:B7:30:28","sha256":"8B:E8:F2:51:E6:2B:6B:0B:3A:BB:44:99:DC:3E:8D:BB:97:17:6D:75:16:F7:7B:CE:66:17:8B:5D:69:02:CD:D6"}}},"request":{"raw":"GET /background_homepage_header.png HTTP/1.1\r\nHost: rectifyprotocol.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://rectifyprotocol.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sun, 03 May 2026 08:42:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 63618\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"b2c0113f7eac23583f2ff919643c9c03\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BWAyL6rLMAQhqqgWLGWCFPO5nZVj6QftfMEZ7XMvkD1o84XFEmD16O75H5n1dozh3JcQ0e9VzHUprLV0xKKoUWsZhgj3DPP8xh8%2BU5sfKsqJhSqi8WBFMi%2FmWRDDAzgncO53hessEkbQVwx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9f5df96ef9968deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63618,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1354 x 1072, 8-bit/color RGBA, non-interlaced","md5":"f8398d91d5c395368aea6110ea15bf0f","sha1":"908048f7a0b0f132834e84510f755b3cb9011b65","sha256":"56422b4f7ecd1915f9b070cbe47fc680495b776c8a3770d63af006caf5545ad7","sha512":"bdb3c720af5b67ad7f4a836a6fd628da9a7e143fcd96decc361b81f832936627a0e788246e5f67c8f6d1c8b272c9bae7765a4e079e602d2950baf776db042211","ssdeep":"1536:9BVCBPOVbnfz0mQNeKgQ/rJA4XfmiYOGqnOYmO9PQ:bVCwbnpudZ1YsnOYmOVQ","tlshash":"7653e16abec14db3cd8d2a77a7327609b57a41ae8953800c537e42570cd9362dbe87b0","first_seen":"2025-08-17T01:57:21.669244Z","last_seen":"2026-07-26T00:52:50.249088Z","times_seen":7,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-03","alert":"Sinkholed","trigger":"rectifyprotocol.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}