{"report_id":"6814177f-1f12-47cb-a2d4-b712dd0d400e","version":6,"status":"done","tags":[],"date":"2026-05-26T23:52:06Z","url":{"schema":"http","addr":"candy96-australia.com","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"104.21.60.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"candy96-australia.com/","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"title":"Candy96 Casino | Top Real Money Online Casino 2026","dom":{"size":80034,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43855)","md5":"7f989f02e9498893ff1221aee4e97c33","sha1":"8c9c74a2e3791778608abc8706646c2d80417f48","sha256":"638fe635547539dd2854d2a058c86b50c7e51dfacbe9b71298a61047b1a76b6d","sha512":"4abd279e7a44f21ded8cd28fed99a928f35c7b6e209246b5e5d4e1d099f1bdc83c502ab15ba9b47249ccf16c192a41515f4e67a6e42846a20bad33af3a916bf1","ssdeep":"1536:u9mmMoqxSg0+uEHhN5cm6qUwgABv0IEdkpNWiq9Z8bAzWWXiQphTxLYz2KW383RH:u9mmMoqxSg0+uEHhN5cm6qUwgABYZxTk","tlshash":"f973d673a5408d19122781cafc23efcee3cd6115e75ac9b47be9497cebc5eda08a1244","dom_hash":"domhash01db1496599561c6d875f9dd0d6664e4","first_seen":"2026-05-26T23:52:09.439345Z","last_seen":"2026-05-26T23:52:09.439345Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"candy96-australia.com","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"104.21.60.166","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-30T23:52:06Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"candy96-australia.com","ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-01-22","domain_rank":0,"first_seen":"2026-04-28T15:35:37.520403Z","last_seen":"2026-05-26T16:51:45.463768Z","alert_count":106,"request_count":53,"received_data":1600731,"sent_data":25865,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","size":98327,"data":"","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-08-07T18:40:27.11743Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/59-c691ea1a79667a2c.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c10edb3c1df3c21a2e306a2708486996","sha1":"069a11123e68e54d21946993948e40b2e971428b","sha256":"1a728f7e2cbc616bc37eef8c98a7a5823cbab7d412007dcf4a920b493fd427af","sha512":"025ba158557af698f2f2c9cfc6da21b66abe19e5c88f189c359abe2342f38573693ba44fe4aeff45ada72447bb28d9dbf64be0b0e7e8cab4f09986e7f8d4aa48","ssdeep":"192:uzBOuoWrWLDcto03j4O89PB7/eu6pmepcSXuQPYPKF9:uzBOdL4r89p7/V4pccuwB","tlshash":"f962b56d4a864cae8abd88e8c427520cd7ec6605f154bc70e3a6852771dbddc61b23cf","size":14846,"data":"","first_seen":"2026-04-28T15:35:41.365994Z","last_seen":"2026-05-26T23:52:09.457157Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","size":2571,"data":"","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-07-30T14:06:06.789371Z","times_seen":189,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/4.612c9b0a6ff1a7d8.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8394241978cdc1203655f61149f874a7","sha1":"40a96dd9c8deec72343377b6fbd306a4a5970720","sha256":"f2a9caf4001e690434ebf6cba3e3529ece4c7d815f2edfc2a68ac7d341bfd7ee","sha512":"38d281e02fed34c6b8b2793617f859cb6ad7a4ac23a5fc1ef396d50efb6cd6cf6d12ce10aa15e4e32bd50ae7c24b8d87513a32bfe8bebd8d09e68353c15e56fd","ssdeep":"96:plk1phi3ahACpV+Qm69Byph/5suXcJMDS6fX0ow+f6+T0ow+fdQd7OSszSRSaSxR:pcYlCKl/szMQlGSg1NsIl","tlshash":"c4f19589e0c67fb9bdbf5881662f850d732e210cde164cb5e578a8029590cecb1d67cd","size":7527,"data":"","first_seen":"2026-04-28T15:35:41.386002Z","last_seen":"2026-05-26T23:52:09.44409Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","size":2376,"data":"","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-08-07T18:40:27.13097Z","times_seen":278,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","size":98298,"data":"","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-08-07T18:40:27.16061Z","times_seen":281,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/IQGvQihlxo3B8C-LXcXGa/_buildManifest.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52c1b266e48c9a09648584bb76580d15","sha1":"6935e5c7ee19e124f1c17d86e5bb386134b18313","sha256":"2df3cda0dda9bee4c920c803d6cae572268a7dd39dcbb10b45a2ac73608c6e20","sha512":"724186976a9910823a8705c4830266d99ff721de6ea8023515a33b0d6971a744b5ca4f2bb622bd31b2ad3b191c47211634afa60e9ba2c23b5d1ebc84c7e49a84","ssdeep":"","tlshash":"9011bd82010bf61a2de8fd57373f1363af528036663c0ab69bcc1d6c61900675f3a422","size":1014,"data":"","first_seen":"2026-04-28T15:35:41.351899Z","last_seen":"2026-05-26T23:52:09.46449Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","size":828,"data":"","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-08-07T18:40:27.145505Z","times_seen":261,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/pages/_app-348754e961e05b61.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ce65356e5587d51ab16f3d40dca3251","sha1":"9b52dcce11dd8837343525c7877241e9d58aa55a","sha256":"3be47aa2bd4da818222c84191d050848539631c25c502dd2ce9fdbed628678f4","sha512":"5029a6c6f3f75c26c067946b156b60fbef882252e4782bb4b29a47c635b89b5eaaabc9dd6a25be61ae3a3f2a28efed00aefdd8994206a245e1244ea82acd34ca","ssdeep":"3072:KqJDcrse3siOIFlUo0kn5DU+dHh1ozNmwO56/oQX+OB6xOEowsB489M4cZkcxZ9J:KqKgecijBOO5JQ3wGhJi1o1ejp","tlshash":"e9a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","size":487966,"data":"","first_seen":"2026-04-28T15:35:41.343683Z","last_seen":"2026-05-26T23:52:09.468877Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/15.15fac68198436cf9.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7b11e4d68dfd5dfca276735b05d6a61","sha1":"f6cb58ae2b5548287f2d2a12a1312ba8fa9c31b0","sha256":"2cd69c5258d421f4a93bc2890e11633bd9ed5dfe391bc4d4f94033f25f896c8e","sha512":"185f7f4f56114a0ac350b0755b517d4e022b2b132138a6e15fba9ef32a685bf5ce42dcdf10e9e84106d6b5946daddf7a19d0df9ea085116697a1737b44196c22","ssdeep":"96:p+8tQg5U6n2qKoJn2qK86n2qKYcBEOVSL9gHpDeRyJy1yNQ9Q0:p+8tbn2qKCn2qKZn2qKfpQ9Q0","tlshash":"aea16687a0c7f9989197fcdc801a8a5b703f8589b82954f6f960da3d0415ac0b257f5d","size":4946,"data":"","first_seen":"2025-03-27T03:50:55.684571Z","last_seen":"2026-08-07T18:40:27.114601Z","times_seen":154,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/webpack-eb3c56b423982054.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67b1988a79333943f50da180090c7f97","sha1":"96b5a463e49ab891ec9a9748d3d2f07c20fa594d","sha256":"afca427c496eb4a9e4072eec10bca30d224a99332f5df79e254c50234087cb11","sha512":"d14a0a69ad4cf4c7acae311c62893cbabe79fe66ea7e9b663bb0b076284024dd830429903b96f83982665da5a1150c0d7c27fc013917d3efcbf952f764938c96","ssdeep":"96:Jcz5E1qxQnR3aEKjmvPqPS1kks4X9F9VKsiVxHGjnE2UNd9QnRVGeTVWfeMVLBOu:e21NndaEMOPNkM9F9iPG6NdqnRVGeTVY","tlshash":"f2c1b69e7294f9b6268364e0483f905bf13b2467681ed4b0d70ac8f4bc34a9d4623fe4","size":5968,"data":"","first_seen":"2026-04-28T15:35:41.34156Z","last_seen":"2026-05-26T23:52:09.46333Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","size":141013,"data":"","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-08-07T18:40:27.122406Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","size":8192,"data":"","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-08-07T18:40:27.121062Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/IQGvQihlxo3B8C-LXcXGa/_ssgManifest.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","size":77,"data":"","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-11T05:54:18.63008Z","times_seen":252312,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/492-27fcff75637ccad1.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/492-27fcff75637ccad1.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"18017-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7g%2Bu2%2BysNV%2FEs%2BxAixs59taOQtqqAW0Qgmz5uQ7t4oCTIlOBGNgnDmCyl2Nu7edxVB231vmkiEE6TchWPHQ%2FSqcj3tYPy6%2FVsYx3dgwTAY8hlnzvLhfgCIdoAFaDbOyG4BCV0Stpc%2BA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceaea56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":98327,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"33a3b66aeadc3f947af1a3e6b40d8dc9","sha1":"571b79088328bec4ff380e3bdbda28ae5e49b676","sha256":"cedc3412d27395c225ff730e22f06a0a579dff72b81b4dcfd1e9cca6633dbd0e","sha512":"3313106d76774c6a8a8235284cddaeea6ba1e92a25d46cc3dfd438c92115bc818ee82004aca8bb2e952b1f1c4efc0b8ac19758cbe5a13d6e2f4f96d8d5f5cbf3","ssdeep":"1536:hwu9CI02UwAnwvb1gxTdIZHolguxq8fyBh9GpNjpCq30H/atJU71cuz:G3JJk09Icuz","tlshash":"bda308da7361b1b593eb12579269c141e3b608887409842cb1b88cdb697d99c13ffff8","first_seen":"2024-10-15T23:35:42.529902Z","last_seen":"2026-08-07T18:40:27.11743Z","times_seen":281,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/IQGvQihlxo3B8C-LXcXGa/_ssgManifest.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/IQGvQihlxo3B8C-LXcXGa/_ssgManifest.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"4d-19d0aba884f\"\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mpd0Ilvyy2CXC%2BumzoF5AdP7n9anzBesPzWq6kyOLdREMHQZh12Gp2sS8T%2FWSPxRyiwl7erUoNo87LoAmx9436JgpSBzAvgMcNvAwthI9d%2FqJl4d4X4%2F0FySYwXUBDgitQzAcAcz9DU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae656a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":77,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"b6652df95db52feb4daf4eca35380933","sha1":"65451d110137761b318c82d9071c042db80c4036","sha256":"6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e","sha512":"3390c5663ef9081885df8cdbc719f6c2f1597a4e25168529598097e9472608a4a62ec7f7e0bc400d22aac81bf6ea926532886e4dc6e4e272d3b588490a090473","ssdeep":"","tlshash":"98a001e0943cdc60aa63dd1c136413128fa05122651d28938afd3044c0301510300d90","first_seen":"2023-03-07T01:03:02Z","last_seen":"2026-08-11T05:54:18.63008Z","times_seen":252312,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FWild_Tiger_1966af7d51.jpg\u0026w=1920\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FWild_Tiger_1966af7d51.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: image/webp\r\ncontent-length: 28508\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 2r0XZ7XAqYTRvCfDQjs6oiYb-Pb-ClJGQ6rumpcx5yI=\r\ncontent-disposition: inline; filename=\"Wild_Tiger_1966af7d51.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=krTo52wp%2FE5fHW7o4bb2T7ajeUGqaeBlf8jpnb8yfDhuIxmUqNU9Rxk9pQRI0ZqW664CNApqP15jD6pHZaZFQVtjfsSiJkuk5n7CcmRhmERaMkrnn15LZ2XWsNrQNK8OOHUqVjAJcjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08dcaf756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":28508,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1047a66763bb4d6fbb4b0313e3d61907","sha1":"0ef3fe07f00fc035258904269ad8d18f1943363c","sha256":"dabd1767b5c0a984d1bc27c3423b3aa2261bfcf6ff0a524643aaee9a9731e722","sha512":"ee0778a4db384d5100ad5847b6848326adae8263c117aa560a7d29337020d6a3e1c3e5d31f9fb447d478f8eabf12120c49c778e35942f5c90da51e1a2659786c","ssdeep":"384:UJMoXqWYoZzSjN2xp98evLCkT6tM0fMNTVDAk3FJV71JR0X1WPqqerwmD9ZShAlF:OBr8ejMgR0y/JRG3wASaAN5i/mmd","tlshash":"69d2f1a80abab54ec5fc09b1b3c81ab17aa057917bdaa3295245f5d0c437cd7cb3504d","first_seen":"2026-04-28T15:35:41.354056Z","last_seen":"2026-05-26T23:52:09.442206Z","times_seen":9,"resource_available":false,"data":null}},"time_used":584,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":280,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/media/c1b11e140b58cf5a-s.p.woff2","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/media/c1b11e140b58cf5a-s.p.woff2 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy96-australia.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 15108\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"3b04-19d0aba884b\"\r\nage: 25221\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IROEGGzI%2B6ijO9U7Bcdt%2BZKIlJQbCopMCAmBlUbCKLbKWWD9rUzqcQRDZlAYP89iXwlfeGYMX84MYM0O%2F26Eu64dWlQJhQBareDmhafKGBqJXDwQqTZ1d18vLDBYZrGe%2FXRwxKh%2FQ94%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a020b08cdad656a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":15108,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 15108, version 1.0","md5":"368f3e99ee207a4a2e2584eba7d3c82f","sha1":"9f907e41605807c4bf4f960745698b1e430a716b","sha256":"963fc62d2cf3e59e6f338db71b85b5ea86dd009fff859116d51a31a9b98d1d30","sha512":"2eb180c4cba21fa77eb89d801d6e55fd10acebe3a25e99228e3ca5861447a393aa60420a21f3cd573cedf5107dd391b5e5e1fcf5e09e799f2cbe7a6826eda2b2","ssdeep":"384:VHJTAkiZnTfVU4LSYdh7Db82J2Werb7VVX0m1+cz7aNw:VpTA9xTfVOA5o0erb7YmcGaNw","tlshash":"c562e16e92dc05534d2bd6f84eebd8cc7bd0f8548133af233905a62a854b810f218be1","first_seen":"2025-06-16T02:04:53.862041Z","last_seen":"2026-08-10T03:54:41.826593Z","times_seen":385,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/css/3bda6d4ca9304bde.css","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/css/3bda6d4ca9304bde.css HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"dc9-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7oY6yEdMA4fGB4zcEpCYXVIv4gEceGxFI4OuvMA%2FsYkCeK%2B%2B%2BKGvYqllVt9ew8ILsVxM3TIIs2Z9EtT41TT0xIlCLqegXBBcqL5aUV2ULx77KpXwqAesqX7odugdy3s6sIttmiEUG2I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08cdada56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3529,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3529), with no line terminators","md5":"01ce09a5b03cf044607a0960b19ee68e","sha1":"77ee0c8a2beef0412c1bf25560a9903a8734e9fc","sha256":"460f6f84ac47584af249e7525a01b93aa6fa2589abd99b25861058a10c5ced23","sha512":"428ac46d7d2015690eeec14942ff4a4220d01f83188ba00d1338949b73d9b25f4c2dc8aedb1ff247a20b160dc4847a4e89768245fa3835d1b1a47e5283a60848","ssdeep":"","tlshash":"1471f21a2e9e7b186cffc81765b26748236cd409cd1712a99013d76e49cb3925bf1b4c","first_seen":"2025-03-27T03:50:55.673324Z","last_seen":"2026-07-30T14:06:06.775662Z","times_seen":220,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/4.612c9b0a6ff1a7d8.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/4.612c9b0a6ff1a7d8.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"1d67-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f%2Bjnotb%2FhLdnhom33R%2Bb877Wi%2B%2BNWDD4v00IoqGSum%2FcpAzCtRwXkzAPWGyOpGQ5ODuTDDtg%2B%2BKyiUBUAGnRlVE4V61v9JWnhcRU9J8NKz0ydP5CI0m%2BVU6RZYTMCNXl69njTFlf62U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08cdade56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7527,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7527), with no line terminators","md5":"8394241978cdc1203655f61149f874a7","sha1":"40a96dd9c8deec72343377b6fbd306a4a5970720","sha256":"f2a9caf4001e690434ebf6cba3e3529ece4c7d815f2edfc2a68ac7d341bfd7ee","sha512":"38d281e02fed34c6b8b2793617f859cb6ad7a4ac23a5fc1ef396d50efb6cd6cf6d12ce10aa15e4e32bd50ae7c24b8d87513a32bfe8bebd8d09e68353c15e56fd","ssdeep":"96:plk1phi3ahACpV+Qm69Byph/5suXcJMDS6fX0ow+f6+T0ow+fdQd7OSszSRSaSxR:pcYlCKl/szMQlGSg1NsIl","tlshash":"c4f19589e0c67fb9bdbf5881662f850d732e210cde164cb5e578a8029590cecb1d67cd","first_seen":"2026-04-28T15:35:41.386002Z","last_seen":"2026-05-26T23:52:09.44409Z","times_seen":7,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FMagic_Spins_7658e25478.jpg\u0026w=1920\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.578Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FMagic_Spins_7658e25478.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 26088\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 6f79iok6Zpjct9jcIa-swikFskkvIVCxAONJDp4dURE=\r\ncontent-disposition: inline; filename=\"Magic_Spins_7658e25478.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BpLA5jkz1evm9SQuwBIDEtyg3e3FP4yEKfadPbrWe0gErFimfp5F54baHsFcDB%2FKsvKgnbmyDJaLJ8GD%2FBJYyFOoJtm9a7WRZAsHF51MsfCGf4vdBgk0Oa0%2BNeHEzg6rAwGJmAuYuDg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08dcafa56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":26088,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b742afa805c806acb8158333a3ca5002","sha1":"daa86ba9c6fd628d7e1386ec8b2e02f3b4cfab8e","sha256":"e9fefd8a893a6698dcb7d8dc21afecc22905b2492f2150b100e3490e9e1d5111","sha512":"fd19104bcc9e45d032ab492171571b03ff3a1b26448f9516601d9d76c435160ff6e1e71b5a3519a2064149e6c5432f6ed2955c3905e9a8e2774d0efc4f6de435","ssdeep":"768:fuEsog8jJL1cjD2gPe0vk2CMmyGOHIoTu:fubohJL1cjD2WnnCMW2ry","tlshash":"47c2e180c1a78b684d21cb158d13a477b13bc631af35974bbc0c906a5af1abc97c0af7","first_seen":"2026-04-28T15:35:41.409701Z","last_seen":"2026-05-26T23:52:09.44481Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1466,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1177,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FLegacyof_Dead_c6355a0cec.jpg\u0026w=1920\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FLegacyof_Dead_c6355a0cec.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 37340\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: r6pI4LkFeghQmUkc57ySI4uhM148r5fUQqGNP0wstn0=\r\ncontent-disposition: inline; filename=\"Legacyof_Dead_c6355a0cec.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=22JtMd%2B%2BjPpkwY4gQ7bYaKIM1jUItNrbomgVroBvDJ1VtgG4VY7E2aZNtZAg6XiAtCwh3%2BZNPmfQ0sUakPWXEiwe1aFwY%2B6V4PjilOJs3JMJyRpj6fbiZIqrXI5n37Bqjn%2BvgjLTshU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08dcafb56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":37340,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"702729b5025ce238338bef5d85328536","sha1":"8d1759e015c2b4493ba1c302f3aeca3cadd4b197","sha256":"afaa48e0b9057a085099491ce7bc92238ba1335e3caf97d442a18d3f4c2cb67d","sha512":"0d9c8fca150d9e00c864ef9ba4e6d642707b9f58de17b394c0f51562ca132d9b31123f412875d1caefdf96221766dfab6a13861cf99b284d908dbe566caecd82","ssdeep":"768:XWqFhgjiyxjBv06nsN5jXWfSsOxgakJIJlQf5oE0VlAmurD:XhFyiq9vdsN5jWf/jk+SE0rAma","tlshash":"17f2f1428a414d6ba99765b35c2c542e0b13834f2c1487394bea34fb277f91ef7825f2","first_seen":"2026-04-28T15:35:41.356449Z","last_seen":"2026-07-28T18:40:59.464249Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1507,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1177,"receive":330,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.582Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-3.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 2872\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: OCeyBa9dqIJvgkicFaVXDReSu6lIWhkViWkMV02bx38=\r\ncontent-disposition: inline; filename=\"total-3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8CeypiryqhjxxfHaVmusmeyPJEe768l3lgZObvuNIClS%2B2SWMBo8BaOpD7d0YtijOEwBxjAnVKgJt0GUS%2FxjrLEpVqxxJaHfaYKDBF9fPGJwQ5kFMGNGPFsBbOG0wu1%2BThGjO%2Bf0%2F98%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08dcaff56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2872,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15d5c9005a37678205724a79e0c94ecf","sha1":"f84013d6e304be3f339edfce9188a5b40a10a8d3","sha256":"3827b205af5da8826f82489c15a5570d1792bba9485a191589690c574d9bc77f","sha512":"610f90da66f2799eccb5895b7a32fa1b4ab6cbaf7234c5740525f9fc953374052e20a11a32f879934fa28beb9772a47b6a8724484c20a71601ed87631dfa9b39","ssdeep":"","tlshash":"10513b1625223524dc707e718a2b13aca80ba84c0fffd767f1428d634c1496e67db8a9","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-07-30T14:06:06.788602Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/booongo_b709e30cb3.svg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.825Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/booongo_b709e30cb3.svg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/booongo_b709e30cb3.svg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.890Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/booongo_b709e30cb3.svg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 20 Mar 2026 10:08:38 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LA%2B8jAdILcOCLrqbm77EGk1TX83afb%2BLgMy67kB7dsg3jTOd%2BkBRTh5CqWVXi6y2jPS7UIZyA3U31QxSa3fokNsfvB8CCpWcBH3AJOJ0Rp9dtpxcucS4MS4ULF8bU5PT%2BmYKMYqxwz4%3D\"}]}\r\ncf-ray: a020b08fcb1156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7892,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9d36111238ebdc02b399179321f05da6","sha1":"bd9d29b7284196f820e2a08ac74b077ab224eec6","sha256":"fbe5c23b42c63cc5a53681770398ff216c09233f77264e1015897c5d16882b7b","sha512":"9c2feda322c25dfc1b8a06c93d6d036c546497b89812e873a627f1caa30b166995bf889de3d0f0522b81c32d2237f7078d62596f52cf19537810936684cd237b","ssdeep":"192:8ER+gEUfHk5lFFtDb7Pc242vA9lvvRkd2uNncaxh:vR+gEUyl1AF2vAz2ceh","tlshash":"c8f1ded5e7eb43f6f0848be8c43684076f9a38bfb906cc79c16c6d457a164cda0864e2","first_seen":"2026-04-28T15:35:41.359055Z","last_seen":"2026-05-26T23:52:09.446905Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/css/dd79dc2c5a9a9197.css","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/css/dd79dc2c5a9a9197.css HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"a112-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dciHhuIBN9yI1Fv16VCyD56GCC5neRTf7q2wpWtcI%2FqtXPimjcvAf%2BkY7wT4y%2Fab0cModEWg2brsRmqIV60cMHARGqHzzbxMzDY99yvvlFaBarNPtWTttGZVE0amysMdSoyc22Cpq5Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08cdad756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":41234,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (26798)","md5":"93e37c199f0ae59faefffcafacc5f00c","sha1":"a18665363dc58467e599d2bd59c1d63443bf8902","sha256":"d91a05b2ad13ad076307787468b87cd94e7dec4beefa460fb9b6c1e13473ccb5","sha512":"22f1cce98b2a8190e8fe8a83f883915899f1eeed64ebc5006757b2e0bcdba68ac5ef53f2f69439648c2dd3a9d58d0cce4585b5e5b79516718e9e2e3d73959d28","ssdeep":"384:gi4OZg6oxkmT0Ew2zXf0MrREq/XisHZ7aVWMMqLswaDGvi1vPTnx6G8S3yvVQW78:f4OZwQ2x8jeDqeTnwVA","tlshash":"4003c921e619702dd8fbcc6732ca7f1766184402f5950d69fa1b866ccecb9271b93bc8","first_seen":"2026-01-03T15:12:30.994041Z","last_seen":"2026-08-07T18:40:27.147707Z","times_seen":266,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-3%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1214\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: ek0UevHZ-FAi0Kfsh5KGMvAuZZH89YxPoXyU38sWils=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-3@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6SBKFcvsInqCxyMGkPLx3zz%2FPvKAPBNP8MGwuFMj9QxVSOkDPizrytn7edRY5FmUc8mvoyKjDKOexqkGrvCMxje2KjaN7xSPg02x08EhwHiODlA75qqRJqg3rfzMghnLGLYE5Xo1ytg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08ddb0256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1214,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6460dceeec5235200dceacf11eb0b7ed","sha1":"dc487405685aba83b1df520c2aca70571b903f5d","sha256":"7a4d147af1d9fc5022d0a7ec87928632f02e6591fcf58c4fa17c94dfcb168a5b","sha512":"9bc78b3f48c093a1c113f20fc42273c525d9b47d42e29c3d94b363298e4fd865cb62866064fbb2319664bd40b19a196cb664650d405ca3f78496edc15d613046","ssdeep":"","tlshash":"6921e79fe0b1083d0d800023a027016f42a2419e769b0ae034524e520e1f20d4ebb7a7","first_seen":"2025-03-27T03:50:55.648055Z","last_seen":"2026-05-27T00:33:43.230227Z","times_seen":116,"resource_available":false,"data":null}},"time_used":1151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/spadegaming_fdfeb5c0f4.svg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.829Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/spadegaming_fdfeb5c0f4.svg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/rabcatgambling_11e9f133a5.svg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.891Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/rabcatgambling_11e9f133a5.svg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:47 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 20 Mar 2026 10:08:38 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7ieA5oUQdpvd1aiSkW4MWne093cKuLfVtLZPbToSCjNg2MbUMYF%2F%2FLDiScH0D4SkT9HJQL56gUYGRyvP5O4g7aqk0I7SeHAq%2Fkbu%2FganBhkQhSb7MwFy%2F6ujAukJHfoBi8UTwKIcqxM%3D\"}]}\r\ncf-ray: a020b08fcb1256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":4881,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"773ba55df283faf9f1297bf36e2b8592","sha1":"4068f6bc34fd8464bcbb5dbfa3c5f8e139a42460","sha256":"5205f073f42e0dc7a49c550c695bf3b75cf86bfb0365acdee4e81fe9cfdb1cd3","sha512":"31a368b9c81d833422e97aa518fdd42fdee4f3d2df1970fb8a5eaef3308161a00aaccdf37c77cebe3f98388dc0de1c5184e24ebea4047ecdc0e56f3ddbddf087","ssdeep":"96:AnnktMbUIcElLtOsG8clWDP9+G2pAASRC8LnEj10yo+E:GgIfL5vDPgXSRC6nEj1Zo+E","tlshash":"efa16ad8937dca4dac76dae80929f7f0967f28f23f545d5ec2a9ac25001683d21990f8","first_seen":"2026-04-28T15:35:41.379745Z","last_seen":"2026-05-26T23:52:09.448455Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/css/352d5236847d301d.css","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/css/352d5236847d301d.css HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"644-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ROudLvzsV%2F8TtRDKKfSO7VT6z47oH54CD99r%2FsIPyY9xX9QlLw5tQ2qoJkAUZuQ%2By1el9zGtZTJmNtHiZQtfmZ%2FreTCo0NMC2EYxtRSQwzcCgUCd4lDXIDNmUejB%2FcW3faWMB0jF6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08cdadb56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1604,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1604), with no line terminators","md5":"d861c7ab0c20ce2a7a153e0a29f1f60a","sha1":"fc6bd3dab3f134d21c58832d9de3f830d62f1ec9","sha256":"4ded20bf9809d391e7e962e1395b3522283ca30f52fe7a86155d1d5b4b3789d5","sha512":"0f8ba9f03c97e33b8a6a9c2cda9bb1a130f8e2b72e70254c382de16ba63d39be6516245f7e740cb52a947fb85c32939217c29b9d982f330bed19c438322db91f","ssdeep":"","tlshash":"0a31bf1195c2af35f9bba4a95fe0367f7816584887fa0ddac2d5f35582ce0d2831c54c","first_seen":"2025-03-27T03:50:55.637284Z","last_seen":"2026-08-07T18:40:27.159991Z","times_seen":278,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/css/02660251b6f4cb66.css","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/css/02660251b6f4cb66.css HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"647-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6MeqZoTyjOGrOtl3DxJpMWhVftg47kDSn1EJgwYRvDgtvUci%2FrNFquZw925ojEf56%2FXO%2BtAhskK5%2B0yBQXOYnW5sKDTsFS5dK0d6qvMdWpNgvmAJyepyROT9g3DqMTkxTJGhPWvf00k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08cdadc56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1607,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1607), with no line terminators","md5":"052642617ed7f811791f601117385ba3","sha1":"d69d36b5f6b4ee6ed717ac8b147b1c0d4dac7e01","sha256":"7f8a26b02a5a62e50adc44a3555c0e632ca411c3393431241ca011aa3ae67430","sha512":"64c5c597ed4d4a9b711ce5d2a96ce6d17e99fb4e92aae02c233613e6dafebe3128e57f036638bafda053613db779f9982350aac232c9eac81fbffe26380fae6e","ssdeep":"","tlshash":"513103731678a4387cd5582b09f1a25f3d04ed33ea6f79c4eb31907c92efa5910625c5","first_seen":"2025-03-27T03:50:55.66801Z","last_seen":"2026-08-07T18:40:27.156134Z","times_seen":154,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/966-2601235ce9ca419d.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/966-2601235ce9ca419d.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"2000-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sy2gFqMJ6qx5mLCr%2FUp%2F08AhzKEoGSTkRAP%2FyiIX3ayJ20VXtk4wQO1iAkMOfMmLOFWLM%2B4a31cvAMgEhynLp7pN27zFGJO9g%2ByfT2YSHxz1gfM60zOlRAO1sGQPRZ8VpEvguq4qQlY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae756a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":8192,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8192), with no line terminators","md5":"3916183d5387e7871a478a2753108c78","sha1":"d6c20ccfb0ab889c2783026c0faba3360097942f","sha256":"5e1379964fee60bce05cde87c8c634a2600371fa60bba4aad38e1ad9b2737bcd","sha512":"d8900dcd34a78a6964c4deb4f6b17e6af8d6120e7081a62a7575c5238d6c1ce129df74a73a69c24b534e4e770ab7e9cb0655a3871da3ea81f188ab9231632edc","ssdeep":"192:vbZDMNJAQDemeCjuUZXXmwEy4HxpEkduQh:v9ba/5z4kkduQh","tlshash":"95f1c6b27782f90623c5d4a4c17ab01fb5ac9c2b5d0b50f8b569cdeea9e015460a0f75","first_seen":"2025-03-27T03:50:55.682304Z","last_seen":"2026-08-07T18:40:27.121062Z","times_seen":279,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"89fc-19d0aba884b\"\r\nage: 25221\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OtrE58mhnkM2ENdhHIOGh7WWYtVH5i3fZvJLzWvoMOnFiDR1vGBsPskHNXrcT7OtmOo%2FyFgTv%2BjNE6TbP6y6h3eYdU%2BUbtsUYuZIW4c1a8QCmUCui%2F%2FTCl84zEcNlHFwrf0O0tb5jf0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08d9af256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-10T20:06:55.594883Z","times_seen":2349,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/candy96_logo_adc0cffd49.svg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.575Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/candy96_logo_adc0cffd49.svg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 20 Mar 2026 10:08:38 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iSK8PG%2BYTZsGL3j7iSBGZET8305zPk%2Bzc1XL35GK%2Fhn07ebIZNij4FyAywZA5rQE%2BX%2BMe8Pcs2%2BhODK2No9y%2BoQZR0C%2FJZ1Ohl%2B8YmdvpVB3lj%2FVN0185c2%2BpVVJL9XdYs7NZW4pVxs%3D\"}]}\r\ncf-ray: a020b08dcaf656a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52879,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1fedebae1cce8223031cb5105daf86d9","sha1":"39b98992ea88d3ca712f4b0ecd15f4c616fbff32","sha256":"6ecb58004d45fc7755d615ff410778e1dff841a3f15fa8be0252a96c16975187","sha512":"b9b9081c562bb4a026e712f315229e95e22b66dece2be0e024c9239720db52d7abd3a960fc36fb9f1b314c00eb670d6fb38d3fde8aea1fc732022851e77facd4","ssdeep":"1536:Y49e2U9NeY4h4hm5h5nu3mf4DBfKBZRGlg:Y402+w59Hxu3mf0txg","tlshash":"383359656113cfbeeff20d12f21aecf29c26699cc0838169db601a664766319c7c4ef5","first_seen":"2026-04-28T15:35:41.368985Z","last_seen":"2026-05-26T23:52:09.450912Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1715,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1154,"receive":561,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FUltra_Luck_fcb7a5124b.jpg\u0026w=1920\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FUltra_Luck_fcb7a5124b.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 20262\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: eAuEpOZ6AW5zTkiAA0iqMA1SWyWvH2t11rMQpdXI4yE=\r\ncontent-disposition: inline; filename=\"Ultra_Luck_fcb7a5124b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cRI%2FcVToho4jSE2cpCy%2FVyPVkD95X8ie6tNyicgGu46SZ%2Bz%2BG1p%2B0ZDtVp7%2B3vH%2FCH81LKuWGfT7NyrWU%2F8Cwh0LJ%2BljFOSJBx%2F6b6X8b5xFX70MVjWK6ohKsJ3mgDbmQnKPGyP%2FaGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08dcaf856a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20262,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8c77125ad49ba969e649eb99eca5bb90","sha1":"0afec00f47fd3370e8fd82b27b9ac4e72bf0c5c7","sha256":"780b84a4e67a016e734e48800348aa300d525b25af1f6b75d6b310a5d5c8e321","sha512":"70c82cfd44adca9b8f1284d1b270812c75c9a071a3e7d00585073d39655055dbf86a2f40f6a1f1fa94873a852320430beb309ecfc15a1f9ac926db8439484d6d","ssdeep":"384:asCwmOQl2z+t9lXfpKcDIbrxfRrZ44Jaq1J0dWFNQ+xaeVOT:aImOQlTFlEbrxfc4JN701X","tlshash":"a992d00e9eae115dfb8ed279d8102535438271142fced1960132e37e3c54f6a9aaab7c","first_seen":"2026-04-28T15:35:41.405667Z","last_seen":"2026-05-26T23:52:09.451393Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1175,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FThe_Wild_Wingsof_Phoenix_a500f5f671.jpg\u0026w=1920\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FThe_Wild_Wingsof_Phoenix_a500f5f671.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 29462\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: FdBJXwjSwYa7V22rNq8m9FJTySmoQFQjLB0AjbdKxLU=\r\ncontent-disposition: inline; filename=\"The_Wild_Wingsof_Phoenix_a500f5f671.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KWTOEqHj7t4nsVmlS39XFQVlD%2FjPdLgG4Y0D6ytJCJW%2Fuz2UbXOzCqs3Tx2JdWZTdd3oyGGhIq%2FffWPbCw61ycuPtVvMao%2F0cj0RlFNSEg5u2tg5W0xowazL0iJAavtS90%2BHviq8Jv0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08dcaf956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":29462,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b1b2d9986b568899f81742eb5ffcd3d9","sha1":"6587452fb1624bec3e9ee20748cbd71d8080bcbb","sha256":"15d0495f08d2c186bb576dab36af26f45253c929a84054232c1d008db74ac4b5","sha512":"2c455351d3a9f014907dd3b17f5c1236480ad5713bb6ac509b542dcc05112825fd24a70745e4954e8c3ab93d95d0433a3f3cb9da7ea712a902786df891ac3194","ssdeep":"768:FefjCsaEekCRbdUw0fpYGz/QErSDfkhxQY2KNwGqrTCkKNrXhR:FefGsaRM5IEjdwuNrz","tlshash":"cad2f2ec45b1e5c8f076dde2901223b219afc8390e8da504bd55e541e903bca4a9e7f3","first_seen":"2026-04-28T15:35:41.390872Z","last_seen":"2026-05-26T23:52:09.451882Z","times_seen":17,"resource_available":false,"data":null}},"time_used":1441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1154,"receive":287,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FCosmo_Classic_1f94a25e20.jpg\u0026w=1920\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.580Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=https%3A%2F%2Fcandy96-australia.com%2Fuploads%2FCosmo_Classic_1f94a25e20.jpg\u0026w=1920\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 17156\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: 97adPdSjhkfji3dNKRWpvLbtxfPfVA6yHMhpsVraKms=\r\ncontent-disposition: inline; filename=\"Cosmo_Classic_1f94a25e20.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7hRNMxbqwe2JtHNlt4XqtPZCnG8FXL8shGKAfx9Nn7nKnAA4F7hs13iiDLZecSXYRQ0w80f2VXguKXB4l5GwfUA2%2BBwSlExb5S0nHAATu2dvhRd%2F2a0Fk4tGSI6AQ1a9b817lMpLtU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08dcafc56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":17156,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 400x560, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"878f3656d87ba170294af2c1778488ca","sha1":"187efae1943ca195895d61ffe8a6027131f447d1","sha256":"f7b69d3dd4a38647e38b774d2915a9bcb6edc5f3df540eb21cc869b15ada2a6b","sha512":"b298618a25b4655538128b9987b654948043d57e61175230b9e02c33aee897fd6be6cb154fe28ba7dfebaf2d899764b89a633d9ffe3da0fa7928e7566f06849a","ssdeep":"384:eDh1vmc+cqS2YXD8R84bUX+7BHpl6WmSpxNH11Qfn/b+rqhc:GhQ7cZ1i84bBJ6hSpx1Qfnj+sc","tlshash":"2a72d0f74e9a801da2e46cbf9297b6783c32cbcae1514f17712314ac91b6b5484eb970","first_seen":"2026-04-28T15:35:41.410682Z","last_seen":"2026-07-30T14:06:06.777845Z","times_seen":35,"resource_available":false,"data":null}},"time_used":1402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1127,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-26T23:51:43.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nx-powered-by: Next.js\r\ncache-control: public, s-maxage=10, stale-while-revalidate=59\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nZYx%2BY%2B3EhjgaFcv3Iys6jrBPAq9%2FQGThH04YZ7jOctcpj1BVsWf9wByfjijQfkeCUEbwBGayNaZEDAhuBeLTFWwQ31ocAXLDIok1K2Op%2B60GRN%2B5u6kLQrzlkl5yblJ1qpolQYwg5o%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: a020b082cece5688-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63200,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (60714)","md5":"6967a4acb684aaec206554d71d53ee44","sha1":"5eb12d3b06f39059a898a3b15ff5394247029787","sha256":"15878a20f15a4388878b2291edc8c4ca8b644f308ac14043576ea15b9506474a","sha512":"6e42b3cc2094258c7d363f3ce7bc287986d2e7628875367872a738916c9fe6fc83acbb837e6cc2ec769680cf33bf53d0fa0800dcfacdba9ff5215d20e5475a2c","ssdeep":"1536:Qmm6qUwgABhwaYGDlOsJ9ZebAzWWXiQphTxLYz2KW383R3WCS:Qmm6qUwgABJZvThV383R32","tlshash":"3453d872d1909c2e426b84dbf837eb9fe2c93015d7995e907dfd8a69f3c289b01b1244","first_seen":"2026-05-26T16:51:46.503093Z","last_seen":"2026-05-26T23:52:09.452914Z","times_seen":4,"resource_available":false,"data":null}},"time_used":1507,"timings":{"blocked":19,"dns":0,"connect":2,"send":0,"wait":1469,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/media/9f0283fb0a17d415-s.p.woff2","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/media/9f0283fb0a17d415-s.p.woff2 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy96-australia.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 21336\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"5358-19d0aba884b\"\r\nage: 25221\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xRA9vj4c7u%2FHnzR1fTfkITCr4cwPTgyIYQZdY%2FKxeDr5e2wqAe1jl%2B%2F8ttXUWl5WsHoZ9iyikYjtNM2Ew5fAQkTOmgWsTnP1IKxx1Z1d%2BcaLh%2FTWUhj80TORm5VEWAaC%2FoGRPzwkFI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a020b08cdad556a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":21336,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21336, version 1.0","md5":"0e35c6fd40c2ab9ef2d5b97baeca2f2d","sha1":"781b1852315aad9bcf111a3017ca734ab6dcd6b9","sha256":"07a6f958db51de42694ef87e2c01b9cf5ee415047b2fd17ab1c313c772a6804e","sha512":"7f76da76841e131252106ff1d70e22908753364d612e9b807d9332f89b13c759b1b9d05ac5983055b48bf99b441a2a07301db2c93fbb79323e492c238df1d7a9","ssdeep":"384:h9WnIiwq4BeuEc4AZTT4ZWgC9UCzpulxbC9WzQFvCY98IW1NoTXVY23sC6:LWIix4BayT0ZMUQpulJCuQF6IW1NgP3O","tlshash":"4ba2e1080f4b3a18eda72c8972acb57498741c208f8ee2770cd42859365e652fe3fe57","first_seen":"2025-10-20T15:26:06.98799Z","last_seen":"2026-08-07T18:40:27.111166Z","times_seen":280,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/pages/index-67c545f8362cb3f5.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/pages/index-67c545f8362cb3f5.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"33c-19d0aba884f\"\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jzr71lrisTIJcKH9BeRl1YtODSIeEG00rKL%2FC8cdn0WDoVnsib9%2FriGLrQHHuqo9hPGk6hFXDoerOH%2Bzsan8uI6YEj7b4mbkDl1VUoXKvWQwhUta5hmeElMh2aBOAOE8ZBljI%2Bgey04%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae856a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":828,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (828), with no line terminators","md5":"045dc07f95969c2df33cd4a214e83717","sha1":"b89af6510652f59367921b09cf4a68bebdb27dcf","sha256":"9d8c30be80230957002ab1fdbc8babe834fdefd49204879c1e609a5491fa05aa","sha512":"76205eb0e13934fa7b15710243ed9e6da746e20ff36b77dbed304ce80c27d6c9bb9ee005c6be3125aec1b75b9ebde613fe9d54dafae5eea366e872085eb026f7","ssdeep":"","tlshash":"18011298b493be086b2750f8462f310e63be795e153e49a0b25284c83af231d1a91fcd","first_seen":"2026-01-21T17:57:31.276517Z","last_seen":"2026-08-07T18:40:27.145505Z","times_seen":261,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-2.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3112\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: 1IQ8dZLvJzt7jJSWdq31UItS+8IY-kyELSYl7ymzCN4=\r\ncontent-disposition: inline; filename=\"total-2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Cd5bE9i5bUzr7YbybkWgNLggurOJh8061maRvbV0CcMQzg2ZuZmQLPZ%2FA%2BZ%2FZYrKVo%2F1jetuz409jdLzLl6yt9QMaQrwhQ82YkCGiU6GCWb2cYJSRfveZBVbfsAVZjheoDizF3QgYjY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08dcafe56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":3112,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9266ec4c0b5e7ea801409c213828352c","sha1":"d902439770a2f68009eb488fcb951baa968cf6bd","sha256":"d4843c7592ef273b7b8c949676adf5508b52fbc218fe4c842d2625ef29b308de","sha512":"91beb28dafe0f3410ab30fa27e1757ac7fd3107e540330bfeaae0e2246cee3e1d628d577072bd51c169e8a066dd03c9b5c371bc833eda40f7703cc3d55ce9aab","ssdeep":"","tlshash":"7e513b5748b32183decf3207914d412d0782d0df18854db9e8bc2ddea97a2f085898e5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-07-30T14:06:06.743208Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.583Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-1%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1412\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: NWcNEApufzPN1Z6+CYAf9TbOYMw9v7XHucYwPA8FnBs=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-1@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s9cG2xONoB7DiwZDv%2FEhWMgjcLzx82EhQjT4Imh0CqvkWJN%2FVx7vdFoJ3v5YZj2B3rXJ9qqiasjcEqB3TlOjlwKtV6410oeN%2Bk5ugTQyI9Lro6qKIJx27UQDeA8Xu6SkYSGrZ2q5km4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08ddb0056a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1412,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3c79467552a70a7e3b9aac5361dca35c","sha1":"c185808d79c2a23b02504ec935117459b1c1b799","sha256":"35670d100a6e7f33cdd59ebe09801ff536ce60cc3dbfb5c7b9c6303c0f059c1b","sha512":"664ee68f3c1334fc77beabd6037b226504bf74cc23bda66ca67f20612c26275690e730cf2eedca94bed50a3554144240c1c59229d98fd63cf7abcf886b877584","ssdeep":"","tlshash":"56213810768cdbf8e771087b765008810acfa4a290370201ee3f4ea4e62af6b2c3c482","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-07-30T14:06:06.793143Z","times_seen":126,"resource_available":false,"data":null}},"time_used":1166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/netent_1ddb34eb5c.svg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/netent_1ddb34eb5c.svg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/api/report-error","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.896Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"POST /api/report-error HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy96-australia.com/\r\nContent-Type: application/json\r\nContent-Length: 93\r\nOrigin: https://candy96-australia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":93,"data":"{\"text\":\"https://darkjuraustralia.top/8MKmmLm3?aff=art-kor\",\"domain\":\"candy96-australia.com\"}"}},"response":{"raw":"HTTP/3 308 Permanent Redirect\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:47 GMT\r\nx-powered-by: Express\r\nlocation: /api/report-error/\r\nrefresh: 0;url=/api/report-error/\r\ncf-cache-status: DYNAMIC\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ClDGfyU7j0D8esiUMSpt5AVe8FBkT3pW2eSHcLJcAWFt11dJ0fjJjl7bNfZbwKGvw7uVs%2FNHCzATCJVCRiCeY8lpp81eQJDIPfhbe2uEVisuAPkY4q8AUQNMnauZ9dC979AsgAPeTFk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08fdb1456a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"308","status_text":"Permanent Redirect","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":6442,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"d01f57891e833ded51c406587f29b1a5","sha1":"062560afd2c64d0bd48f7c242aa40d56da34cd5e","sha256":"a24e95624896c090ac610ba310b5a47353e70aecd24ebdd84a83cf89c46a4f6a","sha512":"012ceb693d51147cba81adf08821f6d4abc9a97671707dae0315488f7dfe605dff4f7a61123e84e4c548b1b6743a1aed76649567eff5ecb6b2ceef16f6f2c5a4","ssdeep":"96:1j9jwIjYjA3DK/D9KUnUFG4Fh8/G4Fwg5UW424FDf+skKmtmniT7RLlNjaQxP:1j9jhjYjoK/BrwevUBVMnT71loeP","tlshash":"ffd14371b1b5127a10a382933695ef1a79e0c213cbef5594b3dcc2632f9ee81a943294","first_seen":"2026-05-26T23:52:09.455785Z","last_seen":"2026-05-26T23:52:09.455785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1175,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/main-69b63e2e16716907.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/main-69b63e2e16716907.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"17ffa-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zisf7%2FOiTyJl2tsJccTw699U3WQbPzVeGBaLgBoDIw9H5mf0CayxfwrPjWvdaahoyHEdKcrrAWydFM2rytFabTDYGw4PZTcS0NB0CzVmbKP4AygTD0oz46A%2F0XPT27wRbVVNg1JSfXA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":98298,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"88ac3c4d4d8044e62af740c79450b794","sha1":"204aee73c4d44e8b1ee68be86228e42488153b13","sha256":"174c4c9955f35a80888ee630b848e2122b15bf6b47baa1c2d3529e924c79bbb9","sha512":"b079ff7c1455a3fe79f8481578928b8d8fa37701e8b15c9d704a393f97564dd9edd1073e69461673a79313c3a0c9fecfd72c9322bb1324b144a8949ce3ddc1ba","ssdeep":"1536:MpLDGYjwpNLTvpKp0Q78ILsDQs7G5j8SCmaoaYCOU:1pqCQ7fLsDQs74VEOU","tlshash":"15a3f9b676d1f8a213cb41d4883b1006f2761d7e642f6045b3eadcd6b96098e90f2f79","first_seen":"2024-10-15T23:35:42.506487Z","last_seen":"2026-08-07T18:40:27.16061Z","times_seen":281,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/59-c691ea1a79667a2c.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.452Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/59-c691ea1a79667a2c.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"39fe-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dkL8WRsbGhtvhN%2FYKxtCn2hqYKM9weqaSTMkzhtn5is0v37ox1HCx4TTbd%2B%2BaRb%2FoD3ujvj523Ohx7WVch8vNsbE7pM%2FIyNmb3rRHWM2g4q0qmL6RJHZqiwdGAaJoP6GSIRB7C4laMM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae456a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":14846,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (14846), with no line terminators","md5":"c10edb3c1df3c21a2e306a2708486996","sha1":"069a11123e68e54d21946993948e40b2e971428b","sha256":"1a728f7e2cbc616bc37eef8c98a7a5823cbab7d412007dcf4a920b493fd427af","sha512":"025ba158557af698f2f2c9cfc6da21b66abe19e5c88f189c359abe2342f38573693ba44fe4aeff45ada72447bb28d9dbf64be0b0e7e8cab4f09986e7f8d4aa48","ssdeep":"192:uzBOuoWrWLDcto03j4O89PB7/eu6pmepcSXuQPYPKF9:uzBOdL4r89p7/V4pccuwB","tlshash":"f962b56d4a864cae8abd88e8c427520cd7ec6605f154bc70e3a6852771dbddc61b23cf","first_seen":"2026-04-28T15:35:41.365994Z","last_seen":"2026-05-26T23:52:09.457157Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=%2Ftotal-1.png\u0026w=64\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3382\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: qtgseq43yCPlc4q7UqXglchdAt0qOBOx8mfDTvJp8OU=\r\ncontent-disposition: inline; filename=\"total-1.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OhhDbBufRi4efaNgsZaH4Ou2h7%2F9EUg96QHsrVmice2ZdcCI5WQoFQt0fYTwNPWoxIx7gVFkEIuCRjdEI5eOtLOizIhtIihNYdmbofPdDVAcwWm8fQiapvWAW%2BMMnvdEtCr%2BaGl73IU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08dcafd56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":3382,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"50d69df7565f2adff718b334b2be696e","sha1":"32684076332a394e40ac306390e9ef110369572d","sha256":"aad82c7aae37c823e5738abb52a5e095c85d02dd2a3813b1f267c34ef269f0e5","sha512":"6a0091fdf8e0b8f300404d484bbc5883cd3f7e03a1447acc692b051566490697ba2eeb42be05ac285abda18967cf518a9711bb86ca09bb58e7ff6dcf933b5df8","ssdeep":"","tlshash":"5c617e98605178c1c69be8a146878163d1564650d3c6c874bbf4e62472acc7d4331cf5","first_seen":"2024-07-03T04:48:14Z","last_seen":"2026-07-30T14:06:06.792259Z","times_seen":133,"resource_available":false,"data":null}},"time_used":1170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1170,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/api/report-error/","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:47.076Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"POST /api/report-error/ HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/json\r\nContent-Length: 93\r\nReferer: https://candy96-australia.com/\r\nOrigin: https://candy96-australia.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":93,"data":"{\"text\":\"https://darkjuraustralia.top/8MKmmLm3?aff=art-kor\",\"domain\":\"candy96-australia.com\"}"}},"response":{"raw":"HTTP/3 502 Bad Gateway\r\nretry-after: 60\r\ncontent-type: text/html; charset=UTF-8\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nreferrer-policy: same-origin\r\ndate: Tue, 26 May 2026 23:51:47 GMT\r\nx-frame-options: SAMEORIGIN\r\ncontent-length: 6442\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: a020b0973c8256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"502","status_text":"Bad Gateway","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6442,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (396)","md5":"d01f57891e833ded51c406587f29b1a5","sha1":"062560afd2c64d0bd48f7c242aa40d56da34cd5e","sha256":"a24e95624896c090ac610ba310b5a47353e70aecd24ebdd84a83cf89c46a4f6a","sha512":"012ceb693d51147cba81adf08821f6d4abc9a97671707dae0315488f7dfe605dff4f7a61123e84e4c548b1b6743a1aed76649567eff5ecb6b2ceef16f6f2c5a4","ssdeep":"96:1j9jwIjYjA3DK/D9KUnUFG4Fh8/G4Fwg5UW424FDf+skKmtmniT7RLlNjaQxP:1j9jhjYjoK/BrwevUBVMnT71loeP","tlshash":"ffd14371b1b5127a10a382933695ef1a79e0c213cbef5594b3dcc2632f9ee81a943294","first_seen":"2026-05-26T23:52:09.455785Z","last_seen":"2026-05-26T23:52:09.455785Z","times_seen":1,"resource_available":false,"data":null}},"time_used":895,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":894,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"1759-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=boqoj7S53xKG7Lnf06BfPLeh5Ueo7GPsZmcFx75RBxoAKNCPy5iCgHz5MTB2mz%2B6l8FJsmPrroys7hI8LGaCY%2BjLEfIStyuGMECzDleS1F1qhQTtCKVTg7BlZqLm1Z1Qi1z4FJljsEk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08cdad856a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-08-07T18:40:27.109447Z","times_seen":274,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/927.a7dc7992c436ba78.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/927.a7dc7992c436ba78.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"a0b-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rmnh8wmkvm9eCvW0uGDzfnkAbf3JmM7mncCCDuAAO8EQl%2BZgVKf5LBi%2BZ2gnrfeGnFswLfokh4zPqtw6kCqgociVtjVpQf%2F04%2BqYDBhAmBNT0ay5MX2p99Yqgpt1VWHP8yNH%2BqQlnFo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08cdadd56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2571,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2571), with no line terminators","md5":"169204fe2bcc42c380af5e1ac2be7fe3","sha1":"8a03ce5223655c895c434033b81080a819fd917b","sha256":"e77204d4fe82687b08d2c78d02e066935c1b0c697a95682b12decbf3776b528a","sha512":"d47937c3eca1582d992d537eaccc779735e73d5450fdacdb27f801abff617ee8dd60a5fbdbde063b15a402746facd53cf439b115e864099f1c7537b218b3aed3","ssdeep":"","tlshash":"905131059986fdf9f9ba0cc9925fd53e762eb40f990c8da8fa7488414c098843603be6","first_seen":"2026-01-03T15:12:30.935058Z","last_seen":"2026-07-30T14:06:06.789371Z","times_seen":189,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/15.15fac68198436cf9.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/15.15fac68198436cf9.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"1352-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0I9DOIH8NMmUQfOM3K51IlAwcfTlcLszhY%2BJju02dzm742Wcoh8qPUHhxudW8VLtVYIWKel7aZQf2DphWhD0ur3huDPJeBu6iCBk47NKcN6fJEdib2zRp5jwJjvsyBc8xxCC6YOFEHk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae056a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4946,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4946), with no line terminators","md5":"a7b11e4d68dfd5dfca276735b05d6a61","sha1":"f6cb58ae2b5548287f2d2a12a1312ba8fa9c31b0","sha256":"2cd69c5258d421f4a93bc2890e11633bd9ed5dfe391bc4d4f94033f25f896c8e","sha512":"185f7f4f56114a0ac350b0755b517d4e022b2b132138a6e15fba9ef32a685bf5ce42dcdf10e9e84106d6b5946daddf7a19d0df9ea085116697a1737b44196c22","ssdeep":"96:p+8tQg5U6n2qKoJn2qK86n2qKYcBEOVSL9gHpDeRyJy1yNQ9Q0:p+8tbn2qKCn2qKZn2qKfpQ9Q0","tlshash":"aea16687a0c7f9989197fcdc801a8a5b703f8589b82954f6f960da3d0415ac0b257f5d","first_seen":"2025-03-27T03:50:55.684571Z","last_seen":"2026-08-07T18:40:27.114601Z","times_seen":154,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"89fc-19d0aba884b\"\r\nage: 25221\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTT55UXw0B7skkff9FL4B5eef7YM1BSIC8NOJWa7gYT8B8F6c45N0E5GPEBhTxB4%2BGK8rt1JITlnFlVMYsfd6gWX7W3ehka3P1vn1N2IZ0gsJrD7B7FZVUpwSYvRXZRf3UwBiwPjrts%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08d9af156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-10T20:06:55.594883Z","times_seen":2349,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/spadegaming_fdfeb5c0f4.svg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.892Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/spadegaming_fdfeb5c0f4.svg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 20 Mar 2026 10:08:38 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pqadNtDeDlCEoPLMuBv2q30LgcnjAwKjEaQ79FuQ0RsKGwIxhUkfLbTHPG2%2F1E4pdHhfVG60Gn9zBI30NRQZ0a4JP4AnxoS5bchj2VVcjvt%2B0%2BDShVCE4CEGZasDwyxQ67HXP3nIMvE%3D\"}]}\r\ncf-ray: a020b08fcb1356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d833a51efe32e7f7834b18b6b045a6fd","sha1":"67379a21c04848f0cadc64bb7a1c104398b95d32","sha256":"724fd323a4eecd9c3a50e8f48b079de1f88b9e41506e3bf84d0d1fb6e084e636","sha512":"36c338280949198c3a745f4a342b8ff6c497cb2a2c6a8bc1d1ce43a412e3d44611f24d2d913946e54f37a7512b1693539450d1002dd45e8813bf32c51b074f5f","ssdeep":"192:Vj7JhlSppRkGxflnwThYrLWo/XhS2om8zbnknAgfsCHohq6YRksk8Hse1ysm8XNK:p73lSpp1CK/Xhz98Xn8fTEq6psk8+yg7","tlshash":"8e62374e93b16bec69470bd85813f1ed38fe5c773e6685a8c7c646c296320ec4c9c692","first_seen":"2026-04-28T15:35:41.39535Z","last_seen":"2026-05-26T23:52:09.461806Z","times_seen":9,"resource_available":false,"data":null}},"time_used":1351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/css/b8b51d0b3a6f4866.css","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:46.018Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/css/b8b51d0b3a6f4866.css HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://candy96-australia.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"1759-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25222\r\npriority: u=4,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fbd12CXyx4CFMZQb0gjnSyCTqHUoQp4zqlM2mO8v1kIKDL80YGDS85riGyuup8%2FzCeUzSsFnKhgkiH5BCQlBp26NBc0cy9VepzTJ0YEjRcXGeWdQil3%2F0aKDhC6JL3Qd7CWelyShq4k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b0909b1856a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":5977,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5977), with no line terminators","md5":"ec84f0a7a2055c970d4f253ab08f0c70","sha1":"c5d3245c2d4085779d873705881d9d7330eeaa06","sha256":"6a0b091cfe2a46fb254fc84ca7036ea34c6c542f83fcaf2fda6b54a828c13fd2","sha512":"195afb216b85d37b9d702a5263bd852f66982769652e1ae73285a60c57ff5aa1a34d949a08723746d58fe3e576aa599e0a493ce98fdb7b767ebe32b94f968ec1","ssdeep":"96:PB5mSJ+MbpDAKneQYX6Jl/0hSvRneZ0jVMR9wfX+9Ecl86djPfUQjSf902G:3mUJbiKneaXshScZXRj1zyCj","tlshash":"4fc1e5b30712ed25d6b26d6744a0ee8ccee4a103de33d5b8f841953ccbd96680270ed8","first_seen":"2025-04-29T14:40:21.754106Z","last_seen":"2026-08-07T18:40:27.109447Z","times_seen":274,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/webpack-eb3c56b423982054.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/webpack-eb3c56b423982054.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"1750-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdqD2NYaWSUoPDzAZ6VmKyeJtlWK2TiYVIjItZfnW%2BmuOkixR5BI%2FP2GRtkVgRt4CQ44BQXIpRz%2BlVsJAvQWgs2Vlh5T5mhHxox7CwxtGOoaPEY1JtCOTusE0fpweYBi5NcKwW54Qzk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5968,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5968), with no line terminators","md5":"67b1988a79333943f50da180090c7f97","sha1":"96b5a463e49ab891ec9a9748d3d2f07c20fa594d","sha256":"afca427c496eb4a9e4072eec10bca30d224a99332f5df79e254c50234087cb11","sha512":"d14a0a69ad4cf4c7acae311c62893cbabe79fe66ea7e9b663bb0b076284024dd830429903b96f83982665da5a1150c0d7c27fc013917d3efcbf952f764938c96","ssdeep":"96:Jcz5E1qxQnR3aEKjmvPqPS1kks4X9F9VKsiVxHGjnE2UNd9QnRVGeTVWfeMVLBOu:e21NndaEMOPNkM9F9iPG6NdqnRVGeTVY","tlshash":"f2c1b69e7294f9b6268364e0483f905bf13b2467681ed4b0d70ac8f4bc34a9d4623fe4","first_seen":"2026-04-28T15:35:41.34156Z","last_seen":"2026-05-26T23:52:09.46333Z","times_seen":7,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/framework-10ae643bd7ba2303.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/framework-10ae643bd7ba2303.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"226d5-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X7qt8CTYNjZZeqsPUNfV5%2Bxtw%2BPp7sR6NZntG7VE7mE9uj3UcMnuHDh%2FENm%2F8XrM8NgD9O4vnib0RgChVdKUi69LuDl7jn5BgMvZOIFvdgEOmNvoNK51MuviOVWtI1POYp4jfxc7TYU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae256a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":141013,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65202)","md5":"91eb10e0c5b60f80501425850b7ebf82","sha1":"8344750bc431fbb9e8a5170a82d08c7664639609","sha256":"4c185f58731fad68b5e3ef26e102ce9b3cb56aa8257d39aead25b675152a339b","sha512":"bae75fd66f5ebfd2cd4b3904defe212456502a8cc1ab092c8b58605c6bdeba1d9fc2fa0200ba9a6699df89af547ba3d51b8783dad8061210ad62f240b6ff18dc","ssdeep":"1536:2YjvmNg6kMuR40esfdznYBSq6vvnwGzQ2N0mIQa:Djv4hudzno6nwq5a","tlshash":"33d308e87996f6516ab311a700af2803733d2a1b280c4d60e215fd9e75b841bb17bfdd","first_seen":"2024-08-19T23:48:37.498483Z","last_seen":"2026-08-07T18:40:27.122406Z","times_seen":298,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/IQGvQihlxo3B8C-LXcXGa/_buildManifest.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.456Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/IQGvQihlxo3B8C-LXcXGa/_buildManifest.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Accept-Encoding, Accept-Encoding\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"3f6-19d0aba884f\"\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fPHWhZgOG9XHuz133Z1lrcIqdBNuENxhWOhOQ0srh0XWQMw3G52L%2B0h9O7I2K%2BcYj%2BoP5y7gif53iR%2FZgKTDhI9UEhjLW9vsUFa8aauNaO%2BeepgnfZWtUvQrCacDLDciYKo2gKS0ORU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae556a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (1014), with no line terminators","md5":"52c1b266e48c9a09648584bb76580d15","sha1":"6935e5c7ee19e124f1c17d86e5bb386134b18313","sha256":"2df3cda0dda9bee4c920c803d6cae572268a7dd39dcbb10b45a2ac73608c6e20","sha512":"724186976a9910823a8705c4830266d99ff721de6ea8023515a33b0d6971a744b5ca4f2bb622bd31b2ad3b191c47211634afa60e9ba2c23b5d1ebc84c7e49a84","ssdeep":"","tlshash":"9011bd82010bf61a2de8fd57373f1363af528036663c0ab69bcc1d6c61900675f3a422","first_seen":"2026-04-28T15:35:41.351899Z","last_seen":"2026-05-26T23:52:09.46449Z","times_seen":7,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/candy96_bg_ea959a045e.jpg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/candy96_bg_ea959a045e.jpg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 106998\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:08:38 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lz8FTID54lVVYXpULLCuoggOI25jfA43mc9KMviweTgDmiOmPx4KGc%2BssifwNpI5XtOfGLghiNG5SpXJaO6YbLwV2nrkIT29dTr4w0B%2B%2BTD3YaCrrAnAeH19epCQfZG1mHoQ%2Fw%2B579E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08d8af056a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":106998,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1920x552, components 3","md5":"8118f999079a0270e3afd843f1b2aa2e","sha1":"b1a898f43cabb673c7209e6a348c22df0f85eb8f","sha256":"89cac2f7dc85deb1bdacf21560bfdce5deebc95e2f89b279bb09486a480e7ac0","sha512":"c0c8e2ff986c2ba58dc35cfafab9be16b63baa7d116eaf19009a5836593fdce0672d67a13604c5ac6daf5b50f74199a80f01ecf7ded94e4c18679f3bca4824f2","ssdeep":"1536:ar6ZZ+zWUUXaUbI/uOhy1jpLbjcHkGxfOgRbM0y/NlgLpv4CEHlzzBop7hqKbHu:+MQ5UXaUb2hkjOHkGNk08rgh4vyhqv","tlshash":"43a312596ecb4c905548c614b915e0af998322f2c7df5eab86c0f2f472be28bcb035d1","first_seen":"2026-04-28T15:35:41.414103Z","last_seen":"2026-05-26T23:52:09.465448Z","times_seen":7,"resource_available":false,"data":null}},"time_used":2035,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1176,"receive":859,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.585Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/image/?url=%2Fjackpots-wins-place-2%40X2.png\u0026w=48\u0026q=75 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/webp\r\ncontent-length: 1290\r\nx-powered-by: Express\r\nvary: Accept\r\ncache-control: public, max-age=60, must-revalidate\r\netag: DkHvEuSDXRB-vLyYwatTedu5bUGez1prcoJbDhBcn1Y=\r\ncontent-disposition: inline; filename=\"jackpots-wins-place-2@X2.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6A9%2F2dfD%2Bi8tR%2FTJZ7lgsXtpDyfIodA%2BYavDrLdAqqyVCbILZAhO8Z4GPCwUP1R7dYnUfhjut3bby5wy2evIA23%2B6slsBjEQ5vQ1dzY1LdTSsU0kgHL3zyDG%2FCMAiuMNgNcUFhjHkcA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08ddb0156a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1290,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5c9c7c18a4380b493bf276ea04ad4787","sha1":"d72fb256081430ce5f22486d39b79f2f302a5da0","sha256":"0e41ef12e4835d107fbcbc98c1ab5379dbb96d419ecf5a6b72825b0e105c9f56","sha512":"7a917a50029837fde70991553896f2ba46375fb1ce9f2215cfb0c7e28d69014429f616f00b92fb9534aa89e7ee030bdfa2262d543b30efe02b1da082f31aa26d","ssdeep":"","tlshash":"0421c8085ced184ae5821c6ce5b950a7922cacca0a6f461be5e2c9fad148c2c03c417b","first_seen":"2024-08-19T18:17:08.891151Z","last_seen":"2026-05-27T00:33:43.228736Z","times_seen":117,"resource_available":false,"data":null}},"time_used":1151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1151,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/rabcatgambling_11e9f133a5.svg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/rabcatgambling_11e9f133a5.svg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-11T05:57:28.976551Z","times_seen":17831158,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/netent_1ddb34eb5c.svg","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/netent_1ddb34eb5c.svg HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:46 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\ncontent-encoding: br\r\nlast-modified: Fri, 20 Mar 2026 10:08:38 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\nage: 0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wII88%2FkHpcxkFAqO7WOo4NY%2FzT0U7wVHEP6a6DSQwmlpatXXyJAJUwcoClaR9WbhTABjXDx4QzIRNlZKNc3XMkil0%2BeqoR4q1wySvx8%2BdWpEv7Wdw%2Fr%2F4QgPYlkmSAtGPZtcVjd0GPs%3D\"}]}\r\ncf-ray: a020b08fcb1056a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]}],"data":{"size":573,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dfa7dec9be98001f050a8a66363a0445","sha1":"03a692836c3070dbc4bc173992e507bf7b8ee434","sha256":"92401bfa25d92fd3b5c6b23a4515e79ed41669ca8f68d39e456b7c25fe08f230","sha512":"68b630f1b323b8b2ac948509ab23ab6f31b63b88c35f0a01ce7c87b617c8d8f4891da588da68b72a415950669dfcfc413296545fae257a8ced9e1809300ffc98","ssdeep":"","tlshash":"a8f08b90c2408a16a9054154a7b8b5141bfb50be60c9c3fcead7300ae45d4eda49c9e9","first_seen":"2026-04-28T15:35:41.326353Z","last_seen":"2026-05-26T23:52:09.466568Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1085,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1085,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/uploads/candy96_fav_5b316fb5c2.png","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:47.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /uploads/candy96_fav_5b316fb5c2.png HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:48 GMT\r\ncontent-type: image/png\r\ncontent-length: 4675\r\ncontent-security-policy: connect-src 'self' https:;img-src 'self' data: blob: https://market-assets.strapi.io;media-src 'self' data: blob:;default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\nreferrer-policy: no-referrer\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nx-content-type-options: nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nvary: Origin\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:08:38 GMT\r\ncache-control: max-age=14400\r\nx-powered-by: Strapi \u003cstrapi.io\u003e\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TLEflmTK7LI4CB1fI09HyQD7Y%2FSLQsGS%2BfYQN7C2oZQQGdpC9pckEpVdngTixOFGBF2ID4x0HxQmrKFN8ijEYtr1zXZrkT159%2FT6j35ibX7OF3EMhOiRUCD5pd%2BIxryRAzGkMVrDOF0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a020b099fc9956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Strapi","description":"Strapi is an open-source headless CMS used for building fast and easily manageable APIs written in JavaScript.","website":"https://strapi.io","common_platform_enumeration":"","icon":"Strapi.svg","categories":["CMS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4675,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 96 x 96, 8-bit colormap, non-interlaced","md5":"794763d7fefb69413fbac7463377d8e3","sha1":"2ac1ce27e9a7ed732fb1edd7a63e485ca30f593d","sha256":"cf0b55210a5cf004c445ef4668376b9b92f2df65ffbe14445028d829f98f3daf","sha512":"81dbc46d4a0487f430705f8c10c611cffaf40883ec4c189b688b7c79a91dc3a0c05d2c4ea5ed04026f95089ea9fe16f6cc4bf7952ddcf564eb75d69c82ff3992","ssdeep":"96:KibSgheOpvGoTqUXIVBrEmmlPVIY7O/yLjNxouNkyAiKKA:DSgsOjIVBgmml9IY7W0M9y3KKA","tlshash":"7ca18ed658634f7065c62d33296213a25450be6d19c2378a7bd8ae790a70a317cdc920","first_seen":"2026-04-28T15:35:41.39894Z","last_seen":"2026-05-26T23:52:09.467133Z","times_seen":7,"resource_available":false,"data":null}},"time_used":1179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":1179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"89fc-19d0aba884b\"\r\nage: 25221\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYhWojCuvkVJNAoLSuy16zKeey7EsLvqbvCIi1%2Fk9P%2B2j7YAJDB9ftAUmT4TJtJnCE5iTgekWu%2F84XwaKElW6DlNbWjHAsGP5kDIO2dACbUHV5KGLpCqe2F%2BrLq0sP5svI7TVuBm9Pk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08d9af356a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-10T20:06:55.594883Z","times_seen":2349,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/media/0a86735c6520d94f-s.woff2","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/media/0a86735c6520d94f-s.woff2 HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/_next/static/css/dd79dc2c5a9a9197.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 35324\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"89fc-19d0aba884b\"\r\nage: 25221\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bgfMhFetoOyG4az%2BRQv41MLEmL7ANEphObFuZXBwMPrwbvsi%2BeSEeEIGCEr6%2FfcjhFfVpc%2F93%2B%2BiBCtLJPWEmrXww1W5yeQJPff5ZAySRvigBJmXKw4uQT%2Bn1RBceEutItf9Xkep%2FHE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: a020b08d9af456a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":35324,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 35324, version 1.0","md5":"94df5f5371c15d43ad8c4420affa4ec2","sha1":"528204bda9c38130cb6eab20947f2e2f7920f932","sha256":"99ec7ccb40cf143f977c893649deece6cc2dcc7c0ff82ebf84b6584090f207ea","sha512":"0e8dada6f2bb8c25e4142ad1b6a38d9f02aa916873be096bc72072aa3c84514e3665bf1b44ed2376ca605bd4d38a9621beaca3206d69391c052ebb0c33d06a4f","ssdeep":"768:ryKzUZEegkLyKztNL22WzNaoWg22looTNaX8g0W:OKoyd219slooToX8g0W","tlshash":"06f20199aa0d4a6ba311659f49f73d1772648b284f0f27b31623c5d1d21c7fba3470ac","first_seen":"2025-06-05T07:29:44.5708Z","last_seen":"2026-08-10T20:06:55.594883Z","times_seen":2349,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/css/425cb6e228741817.css","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/css/425cb6e228741817.css HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"eee-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raEF4yfvL%2BahpBBs35o31kgVlXHHG%2FiGHFU%2BesVmYvzjLhck9S4HLiHSkzPcdJGNR1rCXS5%2Fkn5UsqkFOzTzuOv5tYc5rrmbSwKugSOWZiu7iXbSoRWQjv9Lds7fmHYwX7xc%2BSS8BBc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08cdad956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3822,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3822), with no line terminators","md5":"18552a6e17838c46016a53e9762873c7","sha1":"3dd15aa95b79296b2894bfbd8fe4a53911f694d4","sha256":"66ecf375917e5eebcf9959e90773c31eff8f779803c5493fc5dd3760600542fc","sha512":"e1e0f9e0f622a0abca95b0eea21d599f23df0abf4d7e40bc5a85c69696ff5c6c97db03271d826ad105410cec045c6f279b66ce0ab29b9b5f4e29065d0265c9f8","ssdeep":"","tlshash":"a371f03a4fd0d438f4eb606f6ba2946d4b18c442ea275bdcff12d82bd1cb3d60562589","first_seen":"2025-04-29T14:40:21.773905Z","last_seen":"2026-07-30T14:06:06.774985Z","times_seen":179,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/546.767fc6323cdbff4e.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/546.767fc6323cdbff4e.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"948-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FsPH6k%2Fp0R4a2wTjmTyXbEhzrdDAWacyQ%2Bh27dioNv010lLPny5S1pInCgRj3Y8hOL3StqCPKgzF2QEDGoaUt1IUoqQL5RCpifepHjoYDuF4l%2FJCjVle5M4OSi0Xz%2F2t21MtFWsrxI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08cdadf56a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":2376,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2376), with no line terminators","md5":"3dbc38029da6bf4e8577f4ea86070313","sha1":"ca82c27f54ccb29ac2c9bafc04c6daf8bb697fe4","sha256":"cf8e5651bbd6a6c3e0b4ead08245c2038a435f51aebfedbeda73c51e16f8ebb8","sha512":"d111610f37cdf70f5536f4072a26b0793c7c03d0255cc14ffa6a791132b186d7947a57b54f5359596d682538075e3fb42c2bee26aa8690b2b7fa14852f3798fc","ssdeep":"","tlshash":"e2410244f0d5ff60a7bfb0f8866b5466a22f294897980c92f3e2ec4d145028c63b36dd","first_seen":"2025-03-27T03:50:55.681244Z","last_seen":"2026-08-07T18:40:27.13097Z","times_seen":278,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"candy96-australia.com/_next/static/chunks/pages/_app-348754e961e05b61.js","fqdn":"candy96-australia.com","domain":"candy96-australia.com","tld":"com"},"ip":{"addr":"172.67.198.106","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://candy96-australia.com/","date":"2026-05-26T23:51:45.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"candy96-australia.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 05 Apr 2026 17:25:56 GMT","end":"Sat, 04 Jul 2026 18:23:36 GMT"},"fingerprint":{"sha1":"B6:78:2C:B5:6E:A0:50:BF:67:24:3A:A0:4C:D1:4D:1E:AF:08:90:39","sha256":"BF:45:CF:D7:2A:1B:21:95:97:9B:21:39:45:71:D2:D4:69:18:11:4B:DE:6B:28:4A:A5:6D:6D:88:D3:B9:19:3C"}}},"request":{"raw":"GET /_next/static/chunks/pages/_app-348754e961e05b61.js HTTP/1.1\r\nHost: candy96-australia.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://candy96-australia.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Tue, 26 May 2026 23:51:45 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\nx-powered-by: Express\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Fri, 20 Mar 2026 10:11:29 GMT\r\netag: W/\"7721e-19d0aba884f\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 25221\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WnFfDXFIVAVRVetd4yuwKeA7gNfcWgsR46MMwtdpX9aFIHvehuBeZ%2FnyYjgGg8kUFJPom1oF39qjGr6Gfdy7JUY2cHOn8XmvvqCQExWfyarFmFS%2BufuQM%2F1jDBX6q6Qq9b%2FqFeL2B44%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a020b08ceae956a3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":487966,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64562)","md5":"6ce65356e5587d51ab16f3d40dca3251","sha1":"9b52dcce11dd8837343525c7877241e9d58aa55a","sha256":"3be47aa2bd4da818222c84191d050848539631c25c502dd2ce9fdbed628678f4","sha512":"5029a6c6f3f75c26c067946b156b60fbef882252e4782bb4b29a47c635b89b5eaaabc9dd6a25be61ae3a3f2a28efed00aefdd8994206a245e1244ea82acd34ca","ssdeep":"3072:KqJDcrse3siOIFlUo0kn5DU+dHh1ozNmwO56/oQX+OB6xOEowsB489M4cZkcxZ9J:KqKgecijBOO5JQ3wGhJi1o1ejp","tlshash":"e9a4f7d97282b062839760b6847f010af33e6a98240d802cf6add4db7f7564d9277f79","first_seen":"2026-04-28T15:35:41.343683Z","last_seen":"2026-05-26T23:52:09.468877Z","times_seen":7,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-05-26","alert":"Sinkholed","trigger":"candy96-australia.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}