{"report_id":"69388035-f060-4bf1-ad11-c7ae4fcecac7","version":0,"status":"done","tags":[],"date":"2026-09-23T09:28:35Z","url":{"schema":"http","addr":"proferaymate.com/","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"proferaymate.com/","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"title":"Entrepreneurs’ Organization Romania","dom":{"size":165355,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (430)","md5":"915b9c56cfb01325374d128a4eb0500e","sha1":"73a3be62b8ef71c15809fd3c79ca97b825769f51","sha256":"be9bcf0f366654118e4b8eb64a6631cd317fa7b9dbc296e275f22e603d153f27","sha512":"4489e9f3ce39c68aaa3344641636c8878242581bdac1b29e7d34f9c77d544fd20067ca635a14c796c0cfd8a376cb6a1068300d41bdf113a62017b28379c6fde8","ssdeep":"1536:uo9bUtmIxu5W9nEBt77pb5/qLuGRBxHIgi2QXKOX7Z9RI0lRI06rdAgnMnHx1OjR:uhRnmBgipXnLggS","tlshash":"54f3764f97f23075394f7154aa25a3612ba58243ce49eff03aec5254cf499a948f327c","dom_hash":"domhash52a565f8f34a604a5f960e3d12a5fab0","first_seen":"2026-06-26T02:39:35.343382Z","last_seen":"2026-09-23T09:28:38.295426Z","times_seen":7,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"proferaymate.com/","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T09:28:35Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"proferaymate.com","ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-01","domain_rank":0,"first_seen":"2026-09-23T09:15:52.14146Z","last_seen":"2026-09-23T09:15:52.14146Z","alert_count":175,"request_count":35,"received_data":2908357,"sent_data":18383,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"proferaymate.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T12:50:34.886868Z","times_seen":438066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d3925456e43912597459ed4329ff956a","sha1":"0255c022bde777177783229d1939dbec1b060527","sha256":"5355b46cf0f195289db238daf7d7cd6c452f6083742cca6f98db158e43885bdc","sha512":"cdda750b12d44efe0d1e626300edd8f9b036f963a3047710fd9f50075d6e6ab8b5d13ff191b441a06477ebb1932b10d26bbfbeb6322c30bacf5000cea019ed9c","ssdeep":"","tlshash":"9ed02335533034b154277155c55eb240b5b1105b7415dd02fc4c818d9f44f2574b3e42","size":220,"data":"","first_seen":"2026-06-09T12:57:58.463408Z","last_seen":"2026-09-23T09:30:39.175302Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/bg-half-circles-pink.png","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.633Z","timestamp":1790155684633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/bg-half-circles-pink.png HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 8183\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-1ff7\"\r\nexpires: Sat, 03 Oct 2026 09:09:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X1wGN7FTHgcq75ZcfoEBGXih61qIzTiwq4OW3QC67H7jnwULjvexZ8ivnup2nn%2Fx%2Fo%2BRk51Z2JRvB41rCGx451U%2BzfNfMfbZzOx%2BffrFCo5iUit%2BvEWJsprg6%2FboG0CERLv8\"}]}\r\ncf-ray: a3f884651ccb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8183,"size_decoded":8938,"mime_type":"image/png","magic":"PNG image data, 529 x 538, 4-bit colormap, non-interlaced","md5":"01d5d812638915ac33088fab944e6611","sha1":"6da1275cb044461c8978b0285507b2f7e8d7f54b","sha256":"ca42d2e7b08c5f7dbca0c3ce8de95cef55c1c776b287a58ea3a58152ff87dd7c","sha512":"27e6e6cfca56830c250b5d1210f9d561789b04ff7753fa5816d4b46a3bbd4e241a1ca7e14e84c2ff845cfe34ed5dee484ac11d40b5bdde4fcedccac095296a3e","ssdeep":"192:Cv3cGCg7dELwBxeH1dwxP+G31WrKpaassFZnEpsZ99:N/gR4pHUBW2rFZKI99","tlshash":"59f1bff8ae9867ad901b026453d1a09335cb7cea9d3805ce6e30f5d85ec86c6d2c0de3","first_seen":"2026-05-30T03:26:08.013047Z","last_seen":"2026-09-23T09:30:39.106126Z","times_seen":11,"resource_available":false,"data":null}},"time_used":627,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":477,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/AvertaStd-Bold.woff2","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.678Z","timestamp":1790155684678,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-Bold.woff2 HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42148\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-a4a4\"\r\nexpires: Sat, 03 Oct 2026 09:10:25 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1059\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KiT1Y3bIiccTKRs0OKeRpqR%2ByyFOqiGDfi0LSH6qCbZJKd%2B3Ugx2Laznfh32egnEFgE%2BtW1vQ11Vgsg2bGECWP8tsKAm%2BGDmnADzw%2BL%2B6NewXuFAG5l89na%2BM%2FLb2ogzknbt\"}]}\r\ncf-ray: a3f884655dc349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42148,"size_decoded":42907,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42148, version 1.0","md5":"4d8035453f996fd4f437d41603ba5a78","sha1":"b2023c06f2973d47cc037cd80e3e22b192b06997","sha256":"13a48215e1999d7fdfbcb310896ccb45b5ce7f70d8a3d44596c8edde68154930","sha512":"7b6b6f4eee859bc295b1e41cc8ec9572639bc487407aa085d4fc5639d1fb6f22172fdb44960111e5aa34ec5e40a5473c48cd5c4a15b93f5bf9e9a1903a510db2","ssdeep":"768:Kp/Aj5reHwtMXBjJhOXFZF5BZrG1VP1at5qwrPbxzmpgSRNCyp7NoOK:KG15gOVZzGLMgaIxRNCyDfK","tlshash":"401301c9c3c23992de6d2da56a880d737718d5962eb1227dc708285f85beadc7d81382","first_seen":"2026-05-30T03:26:08.026151Z","last_seen":"2026-09-23T09:30:39.15659Z","times_seen":11,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/css.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.866Z","timestamp":1790155683866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/css.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2FOD2sC3GkTkcWm%2FBYNnk66M%2BYQ1xCHdNL7WWY7OZVwAraIlR26a0De87II%2BQKk9n4NFQLobL3lqoj8HvZru0jIQdJE8%2FyqD3b4YhfaMgiAxQFATwACBx35F9SNwjGYdkq24\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-dc41\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460be3949c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56385,"size_decoded":2754,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"a7bf12c6f80d5b677f04c02983574789","sha1":"70115696f580d27e84020fa871d8c3767ff63b1d","sha256":"9e229842b43cb0c0c3352982422c2a37a9336a8b40af65656e722b0254fa39f1","sha512":"64cb439cc872efeb037d48bfecf8377c83212ab10e0cb050a10bf44168098a0e917ea41d5eaa4c3e8f30c60ad751d58ba7cc9602010cf98867c16222f9dabcd8","ssdeep":"384:+rO3YC3DyvGqY49vtozYOsbV3UbvNqY49Wtxa2OOhX3uNv/qY49Yt/M/Or8W33GG:+CMG9B0b7umoWh9PxvUoK2NrQ+","tlshash":"42430b90042b2040a2575ce133de7f31ee4ea260b048d5786bfd979beecaca563b535c","first_seen":"2026-05-30T03:26:08.00616Z","last_seen":"2026-09-23T09:30:39.080361Z","times_seen":11,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/bundle.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.870Z","timestamp":1790155683870,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/bundle.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h8M3ZcxQbF99pC4%2BRMOZDXwlGocN0xO62AYeBWmUMFkKbONymyHcJ5quqwbgwVjYgfrTnWr0QNsexoK%2FWyOL4YoPpma5hdJo%2FqYDX8eDq8lD6sKEAa6XLFpGH7KVJNoL1GXy\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-a00f\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460be3e49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40975,"size_decoded":7316,"mime_type":"text/css","magic":"ASCII text, with very long lines (40974)","md5":"23c4e9de4519985b921fd0ce705d77c2","sha1":"2ab23eff941f4a53d30219268c9f6d17a772a1be","sha256":"00931ac697c7e7d00770675f4213c8d497aca1d64b3ecf4747a705d18a65a58f","sha512":"8df8e1a7b6851f2e56fa26a3aa010716708c8e6628ccdeb9d91782d97023a7c1c08b4b57418ef223f8bc2ca07a75762c4a93670b75f920c2e54f44be86d9a2cd","ssdeep":"768:zg/KXA2ztiB53EyEe8TB96yUg53vFkl/wYhQ0vHUzRBjL6fLzlZO8Y:zgCXnzwBpLuB96yUyu/wYhQ0vHUzRBjL","tlshash":"3b03ff2fb581d83c637f601de476e12147a4ba0af94efdbb38b7a00cc79a5895421b5c","first_seen":"2025-09-12T11:38:19.092447Z","last_seen":"2026-09-23T09:30:39.144907Z","times_seen":56,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/fa-regular-400.woff2","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:05.288Z","timestamp":1790155685288,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/fa-regular-400.woff2 HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/lander/logic_ocean_camp_fire_done/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:05 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13548\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-34ec\"\r\nexpires: Sat, 03 Oct 2026 09:10:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1061\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gdDu%2BLT5%2BLBWycufH4bIqjgNCOAHRMS1i4xpimCY%2F2D8SV9Zw8%2ByTXMY%2FQ%2BJ4EQTaZRDKwSIktwplQF7TGd4gWTtVdmfJlpixSifhb80p2aZkik8MIJay2GfwHLzoLwNo531\"}]}\r\ncf-ray: a3f8846929c049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13548,"size_decoded":14303,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13548, version 331.-31392","md5":"4a74738e7728e93c4394b8604081da62","sha1":"fb9648469530a05fa9aac80e47d4d6960472a242","sha256":"ce20ed8a323117c8a718ff1ddc6dabb997373b575a8e896f2bf02b846c082c9d","sha512":"cc1f2ea5a6321ad04ffbc43022184785acd7db636109b841694403261850744b47cb5f2b60fe4f72d717668880392f3ea477c013a90e61c66aa68fb60704790c","ssdeep":"192:MOw0hBKT6co4S2NIyI7e7biB9nnNn2AY28rvYI2k0EQTW50IBNd+N/KwWBuWAgm8:M/CgMNnN6jj4k0EQ6PNdE/KwzW2du","tlshash":"8452c1b68fa74c9cd2d33d140b5e5294f6175a8512baa22396cc82ac008bf745cdac87","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-09-23T12:58:17.844526Z","times_seen":11715,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:28:03.372Z","timestamp":1790155683372,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-cache, no-store, must-revalidate\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ChuXef0LHT8yX03aFwDevPdOm%2BzSVlLo9sE8B1dFzAyTfPxRspJPqvHmZTdLuUnuUZwn54371vnFNFSZvPzqL2FOakGv8TrKAiwiBjn7Xe3wx24zpSqgwUAkrpwWF1epQaHg\"}]}\r\nexpires: Wed, 23 Sep 2026 09:28:03 GMT\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f8845e5b881525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Yoast SEO:25.9","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress:6.8.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178205,"size_decoded":24339,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (330)","md5":"61651653c97e45ff1dd2b9e4642311e5","sha1":"5af3677eff5897aa107c2fd9e26a9f918163f96f","sha256":"a9569988ee98a0c96d5236ade3dedd0cc6824ff90cb4d77e71f65237726e7abd","sha512":"dcb48ef4863b2d51f14fd22b8bf8aeba6f179b80eaf1a978be0819da3e7bec2588bcd1e24704d1613c99c5913ffc9d7d82530cc0c319c053bf4e29df01753176","ssdeep":"1536:q9bUtmoxIcfHhEBt7/pb5JId/iRS7jprzI/NOX7Z9RI0lRI06rdAgnMnHx1OjARw:j1hkKrU/QLggW","tlshash":"da04968fabf23071354bb164ae25b7652ba48043dd09ed603bfca254cf899a544f327d","first_seen":"2026-09-23T09:28:38.302175Z","last_seen":"2026-09-23T09:28:38.302175Z","times_seen":1,"resource_available":true,"data":null}},"time_used":287,"timings":{"blocked":-1,"dns":39,"connect":34,"send":0,"wait":113,"receive":-1,"ssl":51},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/style.min.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.866Z","timestamp":1790155683866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/style.min.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=svMjJ%2Fy9c3AYaYM3cMVw4jZiln77uEAk7w0xul5wCDqvO3sc2YLfUp4bn3tB%2BsYPTY8OPUMx21ab1ADrbWyiRo%2F0tfjH2xKtWN6%2FjWKlx%2B14emDzOQvDJSJV3x9Xvl2v17DR\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-698fc\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460be3b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":432380,"size_decoded":35075,"mime_type":"text/css","magic":"ASCII text, with very long lines (35903)","md5":"d3216af0528e51f12c496a6bbed6d943","sha1":"78424172648e99b0226d2a3be2a7edfa1a3db11c","sha256":"8a756dad106db3d799b559682130327e71d7e3b2511feecc609c4f5495cc2ca9","sha512":"9798674d3476c8a8cd68fab08c82ee16dea5744d1bbcdd03af028c3aa450f194b57123d8259ebe081425f5648806da24998240e2f76f6b3e44ffc875ef7898d7","ssdeep":"6144:wf3fXjkikiqZjbJ7fExtOQYLyf3fXjs0qp:ojkikiFjw","tlshash":"599412e69a6012856123cf0583cd5aa5e73cc263b5e50cefb316290f8743b9d239bb57","first_seen":"2026-05-30T03:26:08.016842Z","last_seen":"2026-09-23T09:30:39.091529Z","times_seen":11,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/swiper.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.873Z","timestamp":1790155683873,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/swiper.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MRD08R44VV40txc6oaRdYQPkcDHt3%2Bz9zNNd%2FVL0PYcc3HF5ySDzRXVJqoWP6fSs7b7%2FMRoFZxvJwOwKezlKVlXtAzy5I5cuvD5IWQrEajdFV1GLt3vDENlyCgJzpDJIfXKB\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-4746\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460be4449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18246,"size_decoded":4121,"mime_type":"text/css","magic":"ASCII text","md5":"37009493830156f163d54e34b57962c8","sha1":"a0cc0954e28b1f617727c2c6d6f202c24df1dc20","sha256":"cf7e97acbcd59ab5cbf7b0480ff3cb431e7ebcd2c487731065f402deaafad66e","sha512":"1f5f16bf070d75362f2204a1cb2f00c79a182143d311941ceae6f4d4276d67c6200fcc8e01699d37e3a03f7797ff65ce4f5ebcb7a7e8fcb8d5d81069f58eb791","ssdeep":"192:vwScGaNLNi2rZ9faPUt3V5H40yAWtSStY+7oyJrtYaPtYZVXuHBVtS+wjvqXAXAj:vuJjfNVYef+h0IJxFOMFcsABdZDyZ","tlshash":"7982f1545b622c13b22a4e1d0be697706b68c4834a47ccad73c1ed88efba4f8315ee55","first_seen":"2026-05-30T03:26:08.007504Z","last_seen":"2026-09-23T09:30:39.081225Z","times_seen":11,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":63,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/bg-circles-white-alt-OP35.png","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.632Z","timestamp":1790155684632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/bg-circles-white-alt-OP35.png HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 5615\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-15ef\"\r\nexpires: Sat, 03 Oct 2026 09:09:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkMT8kT%2BmhHZ16plutinwA1LaLvmpzh%2BzyvpipfpAOr7EtUijQFrIfnxKtluNJmdJ9QQS38%2FDy%2FEqNL8xTxzB2Z0CEG7ENveQ%2BXsxehlpnYipt9We3uy%2BaetgMvG8EY%2FxCiS\"}]}\r\ncf-ray: a3f884651cc749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5615,"size_decoded":6370,"mime_type":"image/png","magic":"PNG image data, 538 x 529, 4-bit colormap, non-interlaced","md5":"9500778d953f3c0d8cb85dfdb187d81c","sha1":"79f6264a72080d68db0274a69c9dddfe93f1cbb8","sha256":"c423ec3898e33c158bcaf9017d813474ad8d8122a1283664b1b4defd14a89305","sha512":"09b727223920bebf658256d260a82e1e61f9274f6949f915002f249e871335328a5d9b655c35c9020285fc493d01b922b094d6658a3da90508ab3abb77c8624e","ssdeep":"96:Q9iLrU+wiK/FrwGmk5+mESJALF4RqZZEdgBkfH5wkR/tf3J6YaVVV3E:wiLrJFK/ixkASw4RqZZ4gB4H5vR/tf3d","tlshash":"24c19eca98649968ae3ec1aef7c5e0eaca57cc3ed3c04a925109b5bc00de749108f6c5","first_seen":"2026-05-30T03:26:07.981325Z","last_seen":"2026-09-23T09:30:39.08725Z","times_seen":11,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/modules.woff","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.675Z","timestamp":1790155684675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/modules.woff HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/lander/logic_ocean_camp_fire_done/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: font/woff\r\ncontent-length: 92084\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-167b4\"\r\nexpires: Sat, 03 Oct 2026 09:10:23 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1060\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNVNJPoR9bpGY8yhg9EUf067KaWtM%2Fg2JCWIoXjgdeEqJLHG8G2QQ%2BwKAATXd1B%2BKIATKQwUuPucPxrUsObHu%2BQzlRrkVotlVH1owIzIiodkLQzmmJuqRkpirVoGi7RaDRVU\"}]}\r\ncf-ray: a3f884655db249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":92084,"size_decoded":92837,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 92084, version 2.4","md5":"4f7c51948ce1b802a13ebbccec151d0c","sha1":"5b1d3cd0929108da4b6334c4a487db08c9520f1d","sha256":"fe67b77ac7e0ef4b482dafb86adfa403db1b89a2f337d2dc8bd1278cfe975196","sha512":"87fab156e0c1e79f4dd07075cee8905dcc8c01c7708fbf6e9f6592f1c0f62083c86d0076ec23f73fc4351b51d6e03951ff7aece0ad9305488b910a8f8fefb023","ssdeep":"1536:n2S6qLRqKELiXMjCs7VDmGWALXJ8jzxJ9OIgr26F9BEFDTs8/M/OuWhX5j63QWIh:n2S6qLRqKELiXMjCs7VDmGWAN8H79OIl","tlshash":"e593f97bc3cbcf7fe955e775087b4a252dfadb26926fc40e9a451c869504cf80d28290","first_seen":"2023-09-22T00:38:17Z","last_seen":"2026-09-23T13:03:46.042845Z","times_seen":47635,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":191,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/cropped-EO_icon_primary_RGB-192x192.png","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:05.583Z","timestamp":1790155685583,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/cropped-EO_icon_primary_RGB-192x192.png HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 19142\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-4ac6\"\r\nexpires: Sat, 03 Oct 2026 09:10:11 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1074\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=674b0wUEz7N4KkbQ6tfbVCebwC7rnGVf7zQcc9sT3GWpQ4a2Mk4WKU7OpzZ%2FeCtpJbPgSynrfKZA5eB7hcNDO4BDx7Q90g0SKs8x%2FsjW%2B3adYuSwKJrCKcP6K2s9tBvPznaD\"}]}\r\ncf-ray: a3f8846b0fb549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19142,"size_decoded":19890,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"c65b7ffd580a9a89d1bd12e4c7bfe055","sha1":"c9cfdfb608b2d2bcae7a57d32c0220ce3bcb1e8d","sha256":"0d1e0527657eea904af51997ddc2601225af900db31b7a11777d82470e625e89","sha512":"5d082930cd0d2b34213ec386b7a943963abfe071f46ab75310928757cf74f8296125626bd8b5b7e84e64b6013cafdd363ea4d5e3ebe033b8a0514f4d83a53165","ssdeep":"384:AjO7EvMKXKKw1eHGXPRsNOskpZZaGlu0TKpthlguxq3A2zaUQe:2OPKXKKw1eHGf6N1kQGxsuxA2zNQe","tlshash":"6d82e16f4a101c56b70a3a42e1555d35819f21a19dd839d33f22c9f32beffb121530e9","first_seen":"2026-05-30T03:26:08.014877Z","last_seen":"2026-09-23T09:30:39.089102Z","times_seen":11,"resource_available":false,"data":null}},"time_used":368,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":286,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/frontend.min.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.856Z","timestamp":1790155683856,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/frontend.min.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E4yOhpgu3KLT7CCy0XxRlkngyuFJ3hFjGFH6bI45LwKCFocSSDy5SaCJRYXFk0%2BavwOsvMRv27%2FnlgxdYBZSr14lRipjncK7Awyofa5vDHsKrAOu6YilZ6liZOz9kgYs9Hdp\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-21f93\"\r\nage: 1115\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88461382449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":139155,"size_decoded":18828,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (65536), with no line terminators","md5":"8965c87e140b1f2e972b15956be98d33","sha1":"053ad33eba4954b559491ca914d30619fae06381","sha256":"6d0606444561cf6a8b3c281210eaecd8422f8cd607a1222c2f106267a2ccf467","sha512":"0f884cda618c291b805c431b778c39db80ea435b886727d5d6fa5a2bf2abdb063ed483858b3ad7ced36e4b04b5ac7c5e7a4d9e66780144cc84a54dc235899ce0","ssdeep":"3072:3rwh933Vg5nfcEMmjD+vYvA8I/P0xpxy0ysiqMo0x6UxyEJu34460npjXxrEhbAw:3rwh933Vg5nfcEMmjD+vYvA8I/P0xpxq","tlshash":"e3d310b0931a137bfd2f553d177de28c5b78eda3f6191da488616f08834f52212e3a4a","first_seen":"2026-05-30T03:26:08.01078Z","last_seen":"2026-09-23T09:30:39.162257Z","times_seen":11,"resource_available":true,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":191,"receive":0,"ssl":130},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/choices.min.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.868Z","timestamp":1790155683868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/choices.min.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GwSV7rwLUXV3YFTL%2FETaIQw6DTSV5lORYgDC1KybmfZMN3KiGk7D6p62EVooSCKOMHCLlBcUs2txiO8u%2F%2Bu1x0h0XOTEU4xjuJAKh373fWnSJ%2BiQGDv7CLHeg6tsnHheKsBH\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-6c61\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460be3d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27745,"size_decoded":3981,"mime_type":"text/css","magic":"ASCII text, with very long lines (27744)","md5":"1cc4202424e5e0dc7935b721a005d04a","sha1":"3e5554edb1d9145a384195303b7485d138b9c508","sha256":"98ef8f7cb33457c23db76f0cc75e612b0c0e11ca9bdb83dffc9f37412bd18028","sha512":"ac50a8ed498c8dc94da232f310c2a230b66d3e058c080d9e77d8bac1104c1fd3ae7f7e58d936da487e6857c74e5583f900b83c16230239cf25fde5549c9b2a91","ssdeep":"192:jQ0IQ68jQ92jDHX2TWQrQm6QE8jyt4ZPBz2TWGf:s0n6t8PHIEmpEt+RBCf","tlshash":"62c2bc7de7217ea8e93f855ff4ee56db5f24c09295084d7eda03e830eec08642112ba5","first_seen":"2026-05-30T03:26:07.995831Z","last_seen":"2026-09-23T09:30:39.109999Z","times_seen":11,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/animate.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.875Z","timestamp":1790155683875,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/animate.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OZ8DNAVHb8%2FvJSETApDmnsNRWMHrlYqsHHkD9kufbb355n72ZHmqsf0vWFe9Yl7oiyxfZQl%2FPyP3ymzWTJ2fWFQZ%2BZLN6fjT%2B%2Be9q4roslSWo%2FLlM5zmYC6OAIkrTapeAktk\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-14d7e\"\r\nage: 1113\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460eedc49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":85374,"size_decoded":6536,"mime_type":"text/css","magic":"ASCII text","md5":"f733d0fb45713b13b3ef2e60abf101ba","sha1":"abc1c8bf1d48d261bf40ad9e86598b684a18a49c","sha256":"2414767fbf3e93d3269cb3795b6c667da0f58a8f662dfd8aabb0807243d1134f","sha512":"61e8e6c9a036e566a6060613aafd8891f41c2570f3fadb8b744772dd559c85e9103fa6f12f8d56f5e547f35e95728684bc297a764088e5b7a757886077a76ed4","ssdeep":"384:BHLeieV9+Y5e5eH1f1zFuFS+R+tK4RAcsTs+g:xLeieqY5e5eF+R+tK4RAcsTs+g","tlshash":"278331ad29d2108456638a1d83df4e68163ce1731816acee738e598fcf8bf6c57c9247","first_seen":"2023-04-07T08:44:48Z","last_seen":"2026-09-23T12:02:29.244349Z","times_seen":7512,"resource_available":true,"data":null}},"time_used":261,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/style-static.min.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.877Z","timestamp":1790155683877,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/style-static.min.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQyQCwBGU3%2BeBWFvS1MZbkPPymo3UQ2Sxt6ndwu0fXLvjfz90tprootoQmU57EcIHXJ110t80%2BvsVZPzujYXp7%2BMFGnG1x51QCrYm1s8oGDQZBEK8qTTKvXHWX0RGid2jtKN\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-c91af\"\r\nage: 1113\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460eee249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":823727,"size_decoded":89082,"mime_type":"text/css","magic":"ASCII text, with very long lines (65192)","md5":"2c0c8f3510c3fd5491e8e24ebe965578","sha1":"6138602a8720c24bf8e0b048d607dca20dc1137a","sha256":"30a5ace256e27f0eee80d048b15de9eb8001f7fdc23d089251755b73abce5587","sha512":"da9918e7d496a2118398e35fb2bfa58493bf097f14a05d517371c00a8dbe887d1f133872a3c6351609365190116c58a100e829bfd4fbae4275017221fbdaf0b8","ssdeep":"24576:1TQg4hNBo7hS974f5XSQ3fucSH54skc2XVeIUjnEgIPXi8xXK+hHbe+8w8mGwYg/:kNBo7hS974f5XSQ3fucSH54skc2XVeIR","tlshash":"6205768fef3236f133439798bcd6a7a4e1dd92439a0118d6bc60e62467c325b4a7319d","first_seen":"2026-05-30T03:26:08.030219Z","last_seen":"2026-09-23T09:30:39.092743Z","times_seen":11,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/style-1.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.878Z","timestamp":1790155683878,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/style-1.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O22rauLD9cjE6W%2BHCZTMVn6rtA4g0N7Yi4Bq73hFs75YYVxf%2F1LpewX0jRYWdqP7m20Udm0lrubm0gV%2Fa7L6HY4sl5QqATNwyYScyio%2BfsABRdNshfK5Aa%2FSQxRJiE%2BF4ZzO\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-9147\"\r\nage: 1113\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460eee449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37191,"size_decoded":7218,"mime_type":"text/css","magic":"ASCII text","md5":"72d50f3a8ed01ce420c8cd2322ceec34","sha1":"5ac8b637faddf1d3a4d9d6b1b06d9a98b1c1a9cc","sha256":"3bde3a48f304117beb5a052031bc34cffcce319b26eec812f3489ae374f32adf","sha512":"f97bad0dec38af0d9d5bd491edb456a18bc93da629da7d022408cafcb6d4bfb730050b8554abea06e0290d79b3ef8c902e373bace4414ed1ff72b1386b1b2bae","ssdeep":"384:m1KwmaHMiCJwTljrFzcyHGjF3GBK6bNOAhPzRclfmCqjZFzt:mIwRXFwH6bNOAhPzkfmCqjZFJ","tlshash":"42f262cbfea62992711a5558fb63fbf96b6c00434e0d8e71b1b176789f803e101b168d","first_seen":"2026-05-30T03:26:08.022234Z","last_seen":"2026-09-23T09:30:39.09755Z","times_seen":11,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":211,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/fa-solid-900.woff2","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.682Z","timestamp":1790155684682,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/fa-solid-900.woff2 HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/lander/logic_ocean_camp_fire_done/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 80300\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-139ac\"\r\nexpires: Sat, 03 Oct 2026 09:10:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1060\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IXAIR%2BvivZCUJtWsTbigxNbm9GCppZ%2FojE2vK62aH4jQwximv2qBnq4p5oAFvNjQmVjcCyyO2UNXrQM%2BXZR4i71a%2FkS0O3sboNt%2FXE6kg22b9dTnuCZsCUkb4FPpFnz3x5%2B%2F\"}]}\r\ncf-ray: a3f884656de049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80300,"size_decoded":81058,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 80300, version 331.-31392","md5":"8e1ed89b6ccb8ce41faf5cb672677105","sha1":"9b592048b9062b00f0b2dd782d70a95b7dc69b83","sha256":"6b555920e358f8a25a422988b448615c33bcccb4f932e8331cebfc8e2a737fc7","sha512":"e2f6b4574cb1541dff6852d0af44faae80286110e8451841eade4b53ebdf31150602640fe1bdfff41459ea4ae884d14d115fbc93b30d199c87b88f5d07e4cd72","ssdeep":"1536:Tek2SzK4WGTQH1GlyGLj3SUwtyIWeOo4XyydPl2mN4fsxDFsbaLsND1Vv08:ak2gTQVGLL7IyDelE7dPZ35FeND19","tlshash":"d3730272fd7b05541fe8e3ad39390568bb881acc35c949f2058afc95e0ab67a7684d03","first_seen":"2023-04-05T05:13:35Z","last_seen":"2026-09-23T13:08:59.432224Z","times_seen":31890,"resource_available":false,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":208,"receive":214,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/column-stacking.min.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.855Z","timestamp":1790155683855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/column-stacking.min.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QMZYItXVFknVeRCTmFVF3fDDdr8zA9oRE7kvIXfkR42a8bArWIV4GqrVB4RPlmNiPLhb2AZZuMlZAU7NUpg0pgHEHEACZMY9BzqM0AJbDgZZRwSXyVPQmOY4u2gTA%2FHLRvxK\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:28 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-8b9\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460be2f49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2233,"size_decoded":1238,"mime_type":"text/css","magic":"ASCII text, with very long lines (2233), with no line terminators","md5":"6c69d4437ac5a956a0a68cccc71e0145","sha1":"79f73a933a1c2a95550875725ac0e773ec44a7f4","sha256":"2e6639ff321279a4a6db26feda0ebe466e2306b53c6cee8aaecf759ff218020d","sha512":"9ecb924796ec7d57cdb19f8d3cb4758fa3c78b6514c5849befcb374b9c6aee4ecd5d191a171cda77d976c779c07e4c93f51ab04f586703ff3e8236d9e72983f2","ssdeep":"","tlshash":"2741298bf2bb2220a345cb0b87980e3b15dd38018b8b596fe9bb7ef145641c20930c5b","first_seen":"2025-01-05T17:23:32.091008Z","last_seen":"2026-09-23T09:30:39.157997Z","times_seen":226,"resource_available":true,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":100,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/popup.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.874Z","timestamp":1790155683874,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/popup.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vgK4MenmWNodk3hAiIAQBruxEjKtIi7Hzw7M5dn%2FIp5J2HK3ll7kHhQllgO1%2BFAv8rUV1Rh2D2N1JYDHZbVNuuDiE7dewyDImRzUq%2FqUDLb9Rs4JcSf0Fi8i00Z%2BBYvhLwMU\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-1389\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460be4549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5001,"size_decoded":1728,"mime_type":"text/css","magic":"ASCII text, with very long lines (5001), with no line terminators","md5":"de3e0625d50bcb2e7b8c552585307bc0","sha1":"68e4453126243cdcd4d843f6208d0125987c0a11","sha256":"2f1e0ba0f1a9560f8d67fb010c58f8995fa681625c321e18133ccec0043bce47","sha512":"8aaba984c7c49f88ff7495711bcf6fef2e5a4d68a0680cdb5d56607bb5e67691c5ba8ef5c492fee32f4f1b27f7369eadfb0846180247e37c010f3d57ff83a209","ssdeep":"48:cXM4UvcnWInlXj6R6X9rHcrfmScE7vrHcnlgVcxrxFrxwZhrxJrxZrxmrxa0L0Wm:hyp+RD77cKOYvBcAF","tlshash":"aba107318a333522babaf746f6914e08e560ad03fbde1dbf6145c50d56c7cc0825e5ac","first_seen":"2024-02-27T15:23:22Z","last_seen":"2026-09-23T12:02:29.20088Z","times_seen":3299,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/readmore.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.876Z","timestamp":1790155683876,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/readmore.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sa%2Bq%2Fv3pCRaGloxitLdDAgTZGHTYO3QGuY%2Bty8yDAQC4Hp9P2lK5On%2FQoa%2BSMYNCkWGUK9%2B8TN%2FsP7CPDUY0HvnCJj5SirFDhAnVvA5Nc%2BLDMqGjKZ5OfYSY4%2F%2Bjh82jcy2U\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-6bd\"\r\nage: 1113\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460eedf49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1725,"size_decoded":1364,"mime_type":"text/css","magic":"ASCII text","md5":"bbd61e5da0b9dd8b9718dd37a9582c3f","sha1":"cff350a63740a5a5eb17958f451c81b80b28aa1e","sha256":"009e58f3632270c3fa8d127a9e132807a0920ac00512a2a0c5f3e8d5d728d373","sha512":"3e52975ac4da3e0762b5d79b6aa4ef8148a3e3dce36e27aae16cd810e2d53fe3d7dbb3b6cc3eef1d0350720fd5f6f2dd5536a1e58ec5cb68f063316224feb354","ssdeep":"","tlshash":"0b31ff31f12b19807237dc6c33aba7da6b2b004341c9c41e7783ee688f9e58855d1b16","first_seen":"2023-09-13T08:36:27Z","last_seen":"2026-09-23T12:02:29.229963Z","times_seen":3112,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/bg-circles-white-OP35.png","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.631Z","timestamp":1790155684631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/bg-circles-white-OP35.png HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: image/png\r\ncontent-length: 5840\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-16d0\"\r\nexpires: Sat, 03 Oct 2026 09:09:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8khP%2F7lWUejtXLa1QlgCm6MnqXUZedPWMjL6u4jgU%2B2tIuVDZE8WN1FOkjYD72nOpqQcBnQffL1lj6H5kdyNCFWCAnDILghgTYJPCHBQ%2F3amGTzlgGKw4BvKJJ4yaXNzIimt\"}]}\r\ncf-ray: a3f884651cbb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5840,"size_decoded":6587,"mime_type":"image/png","magic":"PNG image data, 529 x 538, 4-bit colormap, non-interlaced","md5":"b12a0ad57168113cb5f0821d9b844607","sha1":"5f531144def2a2b1e4e7c5fbecbb3788ff54970b","sha256":"91c06a0126e346fc6bf92611e131508d462c2bcf1a0a9aea94480390fc60528d","sha512":"c5756a0fcc7b541b6d8260f6eeda3ee4867ca9802292323ad21183c914325f1af5bd7233c5d45f0ab343ca5387c92563174e881ed07426ffa2c3d743259715d6","ssdeep":"96:sYHCZB+OeXvtZc0gLgBUWoOZx1L9FrR/+7Wjm6h5bkufOZYlJ+QSixXy:DmBbe1T5ZL7rwR65bkeVBy","tlshash":"17c16d8b45c8d1bc4b72daebfd3d568dd2995e20bc2c5e150ccee319d92379126e7880","first_seen":"2026-05-30T03:26:08.008584Z","last_seen":"2026-09-23T09:30:39.111148Z","times_seen":11,"resource_available":false,"data":null}},"time_used":702,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":152,"receive":550,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/fa-brands-400.woff2","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.673Z","timestamp":1790155684673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/fa-brands-400.woff2 HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/lander/logic_ocean_camp_fire_done/style-static.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 78460\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-1327c\"\r\nexpires: Sat, 03 Oct 2026 09:10:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1060\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0P7HJksGOTKkku%2BeyKLjhCcO2dxaYF%2BRn5HvzngwIAK1IDz3G%2FJRG1RygerZ%2FcqU47z9F8SC4vxCHrdS1aQtYTNJZaE57izFIL%2BrENYQHXNYxglND7QwMo7Lc%2BcsdGI6i6iN\"}]}\r\ncf-ray: a3f884655da649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78460,"size_decoded":79216,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 78460, version 331.-31392","md5":"f075c50f89795e4cdb4d45b51f1a6800","sha1":"f726c4275bb494a045fde059175f072de06c01df","sha256":"71b3ce72680f4183d28db86b184542051fd533bb1146933233e4f6a20cf98cba","sha512":"5f4f35e9acdb825a245e678a834b2bc6d5c302693fffc3497717024c2d8385ffdeb233d4d7f368f1356a2adfcaab0a89157edbcca45b9f310f1cdd7f44cac955","ssdeep":"1536:uZWBokruo7jgeq3Yv8E9MjaR3yOWaaqPbkJSmMlckzeSUSalX:sWBbuo/vqov8yTS/qPmMekzyx","tlshash":"7b73124d6fe2a9eaa9bc3f332fb38412ac819d654bf2c1b3055e12d51c8177da8d4135","first_seen":"2023-04-06T10:15:59Z","last_seen":"2026-09-23T12:02:29.189593Z","times_seen":22805,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/cropped-EO_icon_primary_RGB-32x32.png","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:05.584Z","timestamp":1790155685584,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/cropped-EO_icon_primary_RGB-32x32.png HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:05 GMT\r\ncontent-type: image/png\r\ncontent-length: 2159\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-86f\"\r\nexpires: Sat, 03 Oct 2026 09:09:31 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t1wZTC1%2F7jl02Mnd544IsF3GSACb2A1AkqyTE4c7tiYkk2tk%2BvuF6I24sO4yYJ0TEKngsHx1tnMFvWVYndastkF4WT%2FiCsrixLi2GzsOZMZHMjrPzgcgciPPZMHglpLvcE6Y\"}]}\r\ncf-ray: a3f8846b0fc249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2159,"size_decoded":2905,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f6e8b41ac1022d2c122692eb93a9615f","sha1":"48becd01b0c2f6bcc3b6e1d8865563357f80b228","sha256":"a5dca99dfc72c2d4b89d2982ab3877f5a542e4e2c7a659624f275865b8be6cda","sha512":"f698258371e1a65cf3f45d38acfcf1268563ba624e28e5a0334bf9cd66504bd02c1cb89288a7149177b9fe6c821e3ed225db5add2ebcaeefc0a3f7aa0e509265","ssdeep":"","tlshash":"3c415c46448e93d86d7b308cdbced0d2f4d42eddc01503887a3a2dce671a4e705083da","first_seen":"2026-05-30T03:26:08.019829Z","last_seen":"2026-09-23T09:30:39.13935Z","times_seen":11,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/jquery-ui.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.857Z","timestamp":1790155683857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/jquery-ui.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PkuXcltujldLM4FfoM4Z8BMCNrvv8dVjNWiirt6waCRNkI4F0%2BDNhjJ1m7%2FhO8SbEO3fBMw9cjJDc7KFEQlpXdJevO5Qm3NDhWfsJB9Q8d9KoosfTtXVJzdLgd36YtS90FZH\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-55b1\"\r\nage: 1115\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88461a97d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21937,"size_decoded":5075,"mime_type":"text/css","magic":"ASCII text, with very long lines (1188)","md5":"defff8c79fd72ee0ecf0899c5b35b704","sha1":"244a1f73081628d312395577de9d8c35555268ad","sha256":"7bd010a8f163b5c4df8bd5af6acb836589055da992fa89f8125373a29d263de0","sha512":"ba6757c74f5773d100607b40460ee12b06efad57f9538103982d5cb8550030f0c50f6bfbfb0e3cf5dbf1ade019401f1c503336e1fced51357df5489d3a21fb07","ssdeep":"192:M2fab6lYUQDlPiF5fy/EQgmB0iBfT9RhS2wV53skuMaaSQhQz0iIhBb:jCb5PiF5fy/E4DS25qb","tlshash":"d7a259316e43250dba5bd16461a11bf3d23f2342fc676e3e64ab25a8d3d94e0c16f9b0","first_seen":"2026-05-30T03:26:08.027946Z","last_seen":"2026-09-23T09:30:39.164773Z","times_seen":11,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":132,"receive":0,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/jquery.timepicker.min.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.861Z","timestamp":1790155683861,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/jquery.timepicker.min.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=glrWk0NehwMzZjrg9kXn8WgiYeoJZhBx2gpwX%2FNr1FVts3E6NBN3J1V3HpcpK8zt7LZMnb183gdlAy2NTm%2Bg2%2FAFcUymCLNxLLVzZ2iTPDReufjrCB6ehVMdK4pn5ESQViGS\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-58f\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460eef649c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1423,"size_decoded":1193,"mime_type":"text/css","magic":"ASCII text, with very long lines (1423), with no line terminators","md5":"edd56f44a35a0e33b0eae66e5283ab77","sha1":"74a9d615f1f6c3974edb790a58cc802d09ad25e8","sha256":"449e2d8b37ae8b7cd0e922b7a32b6c8850527b2bb1e64d1a750551c5ba87c7dd","sha512":"1b58ea4c400586de9e0b293f61ba6c8729c61901ce24767a9fd4c8a0cb64b0bb2857d6d03ef95c9b36f6095e4e40181a88c345316d4b1b0cc68d99cca393b28a","ssdeep":"","tlshash":"3c214421b03f2e8b78bf81ab10307fffe37bd831a46036365de56214474e0a056d6216","first_seen":"2023-04-18T18:06:28Z","last_seen":"2026-09-23T09:30:39.147844Z","times_seen":1558,"resource_available":true,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":162,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/wpem-grid.min.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.863Z","timestamp":1790155683863,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/wpem-grid.min.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRi%2F0BKHUxKBhDtPqVaeRaiMKK%2B0TZUZ%2FF51nANWInCDKzg02H7uMcIuAsFMH4VwSO8wZQzpkwPq3oDoWC0eT2ZYQ4WbHUm1%2BKbu9Nhunq3NlMNYSLBLs0HL%2BzC%2BoVt7VXV7\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-dcea\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460eef149c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56554,"size_decoded":6673,"mime_type":"text/css","magic":"ASCII text, with very long lines (56554), with no line terminators","md5":"4f111b5cb1a952fc42588d31c5ad8eae","sha1":"2f8af26d432578049a918f78466b1669cb20e263","sha256":"0a687c92a7e9226570734cfd7bbba2dc5b2bec4e675ecb870a1744abe7915257","sha512":"51d58a048179b8eca1b0b0a5b5fdb304d22ae285bd185b5c9e28e8f7999282ee0ac3e0af349a5613e73e426a3de30035dd3448b4fe9c507a4f072972818e4c72","ssdeep":"192:nxdn4FoyvGLJDBY6ZX2UG1muBTrAS9kBmBxEmtFnyVs4qs6qZy2mXveE20zIMAno:D4FoyvGkKMqBmfMs7gxw+9xC+ECAT","tlshash":"c9439f63f791222f818eae2a96713bfc4a6f9057a7556ee644933f304b467c3887140f","first_seen":"2025-03-15T10:55:42.644772Z","last_seen":"2026-09-23T09:30:39.150204Z","times_seen":1006,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":210,"receive":0,"ssl":40},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/style.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.864Z","timestamp":1790155683864,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/style.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5maR9WzSt43pr%2FPzYH9rMdZpVAbMPXKPNabqAPl2QloNcf26Gytpl9gp5bq%2B7Z3slYpvE5JIdH2tdqlS1ZCXGnvPDz48LebDZvwQKbRbMmCvthoDZohTZomLSkjCGVfbMJ9b\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-7457\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460eef849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29783,"size_decoded":5378,"mime_type":"text/css","magic":"ASCII text","md5":"24ab47323b6390300769537d3dd7712d","sha1":"5a8bfbddd437827054f59026206649ea4a0e5e02","sha256":"c5582dc86627b2f997fd35a3e4607eb50850627b11b47a59a5a423bb2f96a3d8","sha512":"67f785709d3bcd6f4fe007b6fe356be69f69ab0f8853613a5d1a02b1ea3e4fa7f7fd199fc6935fb3c270ff4daacb35949d813e90b592b48f93fa297c5c77fec7","ssdeep":"384:bnYZfQdaWByHUawd+WHqa9Ha9psPrnbb4OWSI682E/RpO1wm:MIdpUH8d+WHqala9psrkZpOam","tlshash":"5fd2c6e4d6bd0ca3b305d0d153662513b75d927acd866e19d2b37a8cb5e221cc4832fe","first_seen":"2026-05-30T03:26:08.004788Z","last_seen":"2026-09-23T09:30:39.108787Z","times_seen":11,"resource_available":true,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":205,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.880Z","timestamp":1790155683880,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: application/javascript\r\nexpires: Fri, 25 Sep 2026 09:28:03 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tT7vCvfIoOHB7o4Xx9n0ARih8DMaTm62QfFOeHVYu6YIOzsy%2BA3901i3IxQPX2gOVdsQGvYX5KhQXbyse5aV492UqUj6cdN8MI53HWsboMAat%2B9U%2FhsiCEnKk4l03aYmIGu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\nserver: cloudflare\r\ncf-ray: a3f88460eeeb49c5-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1308,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T12:50:34.886868Z","times_seen":438066,"resource_available":true,"data":null}},"time_used":191,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/magnific_popup.css","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.871Z","timestamp":1790155683871,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/magnific_popup.css HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K5NpMPo9j0mnPDm%2FKzofFNqQipDc6nUrF3RRK%2FlAfBTjskLgVdqErrO9RTmTP%2FmJLcGADbB8mkwR%2FeQ6Gdijk6%2F4isoFwir3a%2F6kyhRuorQsP%2BIrmqB6EvIgE9nlM5tcVZqm\"}]}\r\nexpires: Sat, 03 Oct 2026 09:09:29 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\netag: W/\"6a212df9-1946\"\r\nage: 1114\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a3f88460be4349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6470,"size_decoded":2680,"mime_type":"text/css","magic":"ASCII text, with very long lines (6470), with no line terminators","md5":"9389a240ec2d748902e2f3d837d46912","sha1":"8c5e52769ff791c2751cde97d2f59b2b11d095d3","sha256":"ca3af915877e0f119ce0df14dfce6249f76222c600e23882fa7c7f99788971cc","sha512":"66b15795777de6d0f465c9afb67f8b6808333e8e7454c3bbc26783748f29a74ec365f18b520fbedce88e7137d1919025d0e65836bdc58007f623255b66a3feed","ssdeep":"96:HaiIwxc4SZIORnNj0aZ/XH9iNOsaD+XicVDAdVMk9HcCWhR:6NNZIORnNwaZ/X9iAD6wMk9zWhR","tlshash":"fbd165e2a141327ad532cd56e183ab1c27279263f67306efdf86a918c6cf4de0265348","first_seen":"2023-04-07T08:44:48Z","last_seen":"2026-09-23T12:02:29.180447Z","times_seen":7773,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/AvertaStd-RegularItalic.woff2","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.677Z","timestamp":1790155684677,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-RegularItalic.woff2 HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40524\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-9e4c\"\r\nexpires: Sat, 03 Oct 2026 09:10:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1060\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qjEBmY4YwqDcTmWILmWvRTvY3BgqWBX4V7v%2BqtYXBxD7x9JcwX7esZQic%2BqUEwHMVC8vkIXHDB4U2fMeNpYffKdc1NYcJKMXa1Vn7lIWuqPqeKkXHOaMjPCe%2FwVIrir0Eu%2Bx\"}]}\r\ncf-ray: a3f884655dbb49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40524,"size_decoded":41275,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40524, version 1.0","md5":"f8e4a3390c306a40716993bd14a23488","sha1":"43ecffaac6deff6e7020309bb8c0dc991267d3f2","sha256":"81cb1a0bb4d6b040af9ee50577917d923cfd1770c35f06aae6bce2a9d1f83dd0","sha512":"131ba13decf620d5de923aff4dd99e6e1a28d8a8da439da4a48a1b1cb7fe752d712135be1b18d17d3aeef2c8e3debd09646507191bf83abda10f38e5eca6d70a","ssdeep":"768:VUqhAC2G5p943MiNk9w8B3WgoOjFMTbAx+HX1bMMEcwsJkPnGMs5PmnOsct:KpC2GZdBxxcbAwHhbvJqw5mpE","tlshash":"b203f2657466e184b2bc22f607e49e48c5f9234c47947f8ee55b68f082e27b374c065b","first_seen":"2026-05-30T03:26:08.009633Z","last_seen":"2026-09-23T09:30:39.121249Z","times_seen":11,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":370,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/AvertaStd-Light.woff2","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.679Z","timestamp":1790155684679,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-Light.woff2 HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 42084\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-a464\"\r\nexpires: Sat, 03 Oct 2026 09:10:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1060\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LTgCQuIH%2Fj25Tm3kVAF92Cknb%2Fh5FxF38ZE5uTNcg2UGJSxq3xA8vQTaWF5Ow6vKEd83%2BqeAvaIx5ePEgVQkgjuvBiAA8j40RR8OXsQVGPYM7vZQn8604A3RVQV5xqZ57%2Bcn\"}]}\r\ncf-ray: a3f884655dce49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42084,"size_decoded":42835,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 42084, version 1.0","md5":"3f5e0d4d19a91d7aa331b307bb3f8af2","sha1":"52dc630be0b99b26bbce23f17cfd30a46947a9a9","sha256":"c60040e34a6662511cd0dae1eaa42e50474535eddca98ef9c941a9aba24569b9","sha512":"81d448162f66c464fafc004e7cef021f0779e2e291e3b8469276454b1b4e163e75456d9a14dbd9dfcbef02af5cfdb49d680f4e385d41872bd010682ae548ec0c","ssdeep":"768:bZ6cvAhc5L+xRKdCcHu331hmH3a5NnCyODMrkXEXaYjqPGTleD3iT:b5vv5L+xAklcq5NnCbQrHXaYGeTlc3iT","tlshash":"c213f26db19067480c9162747d90fe34fcaad46a016ea8b78e4fdcafb1cb40f3685463","first_seen":"2026-05-30T03:26:08.013967Z","last_seen":"2026-09-23T09:30:39.128207Z","times_seen":11,"resource_available":false,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":231,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/AvertaStd-Semibold.woff2","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.680Z","timestamp":1790155684680,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-Semibold.woff2 HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 49464\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-c138\"\r\nexpires: Sat, 03 Oct 2026 09:10:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1060\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wLjBJnQjpLL2AQbmQm3gY5D3xQNfqpoRyyzqMg32fgAS%2Baa10GZQMz5YGz%2BITZo0wMMp8Mcq%2Bn10HYJslcGXy57XapSsLJSOU%2F50CTMu2zdjAblssubEe8szB1W6S8HhEqOx\"}]}\r\ncf-ray: a3f884655dd549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49464,"size_decoded":50215,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 49464, version 1.0","md5":"18f04fd1cce6e66d32f0157367dfe0ed","sha1":"87ba1b014af989806c1bcf4dbd335b8d2880a26d","sha256":"02a07334fdc34f9885d92f035d0c30ca6fafd23e972915c31da44ca115b69f77","sha512":"459a1a65e5eca742469feeb2a7b229c0ad4025e64585fcbb380f0094f067aa5c0be34a737bb4196bf6d6e69592e127bc16a78c6d224b38703a3538d1b1052c47","ssdeep":"1536:Z/vkN227qkD+IkUGX0Tv6XSbMiOeRjG1lEBVz1U3P:ZXNjkDdsX0Tv6wRPRjwlOzU3P","tlshash":"0923f1966f192167edc9ec2f11ea2486678d981f8d5c2d28236d1ebf2e0823b35351c7","first_seen":"2026-05-30T03:26:08.01856Z","last_seen":"2026-09-23T09:30:39.157292Z","times_seen":11,"resource_available":false,"data":null}},"time_used":499,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":289,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/EO_Romania_RGB_inverse-1280x615.png","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:03.879Z","timestamp":1790155683879,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/EO_Romania_RGB_inverse-1280x615.png HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:03 GMT\r\ncontent-type: image/png\r\ncontent-length: 13495\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-34b7\"\r\nexpires: Sat, 03 Oct 2026 09:09:46 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1097\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZsPfJwTEqChb%2Fd9kvjOMHjf5jg5esoe0beZfjfQpuuVnzS8asI9gkA3BaEsMq5lcsLyjHVhYaaF6HfA0T7JQM8GMZlBzmvp2Hfv13X%2FDgJNqHkGQKCHz6ozM%2BMoOMtmPpKeq\"}]}\r\ncf-ray: a3f88460eeed49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13495,"size_decoded":14243,"mime_type":"image/png","magic":"PNG image data, 1280 x 615, 8-bit colormap, non-interlaced","md5":"5a75038acdba477464196a2142fd3e96","sha1":"861a7bcbf2ea07bc05d9f4aa3818fc6fc7566bdc","sha256":"be52bb0ff0b554beb0a83d71c037dbd2b777be50d7ce9d08fe98916b3d8d8909","sha512":"d2fd5f1cab89524a33a0fe68b542aa648b90b1c9bac01954bbbee82457d21be434058151a746d226622a4a7ed8081752b84ff6502fb2676a46fde71d68313525","ssdeep":"192:UukLru53SxjRwTaDlgRHH+Rm+8Cix1DqyStftlM/lgvsH50zLvET2wt/n:i4Sx115hxinOftVWz6XvA2Kn","tlshash":"f852b02051892ae5e20c03b12f50f815cb3b14981677d07ec93e3aa5aee0f9ddd5074d","first_seen":"2026-05-30T03:26:08.032205Z","last_seen":"2026-09-23T09:30:39.102839Z","times_seen":11,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":51,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/EO-Koepelgevangenis_header.webp","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.629Z","timestamp":1790155684629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/EO-Koepelgevangenis_header.webp HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: image/webp\r\ncontent-length: 382234\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-5d51a\"\r\nexpires: Sat, 03 Oct 2026 09:09:30 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1114\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AXCVg5aFhkqx7Cw1BGbil10bBUSFU4s9r5Ym5nT3Qmdre8TJNXBFGAfjlkbyzJm5XqzCTXjniW7ur4tvbsykjtxgzaEownIGSJrgPqHIUSa3Efq5ZPTO5giVZgSzkQf2miF2\"}]}\r\ncf-ray: a3f884650cae49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":382234,"size_decoded":382979,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 2000x1334, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"632660938e3c617637fcd459d395fd35","sha1":"2190f5fae7ea8d9b32f6904c5fd4986132cc6996","sha256":"66d84ea9e2b17a53a25f81bab39a36b5233705790c436c63af61ddcc24032838","sha512":"d3d70ccdd3c857339af9c78181a8d651d434ff35cceed19e1faae2ee5197ce782ce8367eaa719af38a2472334d0c19f85391841adec07c4361bc8b8c530199f4","ssdeep":"6144:o1gyckgFmWSXf6zeiaT9HAChOgWM/5ReGDC2bZq5zKvEyqfcP:TlmWSyQ2UOgWKHeGDC2Q5msyqo","tlshash":"438423572caa48538ab2c7c8cf351a8b53e4f25c7c82ba990f9f45e5c42d7e54f07a11","first_seen":"2026-05-30T03:26:07.980312Z","last_seen":"2026-09-23T09:30:39.085882Z","times_seen":11,"resource_available":false,"data":null}},"time_used":950,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":906,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"proferaymate.com/lander/logic_ocean_camp_fire_done/AvertaStd-Regular.woff2","fqdn":"proferaymate.com","domain":"proferaymate.com","tld":"com"},"ip":{"addr":"104.21.55.90","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://proferaymate.com/","date":"2026-09-23T09:28:04.672Z","timestamp":1790155684672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"proferaymate.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 06 Aug 2026 15:13:56 GMT","end":"Wed, 04 Nov 2026 16:13:40 GMT"},"fingerprint":{"sha1":"44:FB:FE:AE:36:C7:A5:0C:0D:AF:B1:7B:05:70:25:99:34:A4:2D:2A","sha256":"AD:AC:1C:52:59:EA:55:07:A2:DD:1F:98:35:9B:2C:F4:91:3C:AF:81:D0:71:C8:65:AA:98:E7:CD:3B:F5:DA:2C"}}},"request":{"raw":"GET /lander/logic_ocean_camp_fire_done/AvertaStd-Regular.woff2 HTTP/1.1\r\nHost: proferaymate.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://proferaymate.com/lander/logic_ocean_camp_fire_done/style-1.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:28:04 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 41528\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Jun 2026 07:49:13 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: \"6a212df9-a238\"\r\nexpires: Sat, 03 Oct 2026 09:10:24 GMT\r\ncache-control: max-age=864000\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\nage: 1060\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6IJqX9DUNlq8QmZU1C%2BVpTqvCepnC6RQNOJ6HXMR9zFE7oQsKifRTa2z4Ay1ePah%2F5X4PcpjxwS%2FK2Ds5hK844CBnf1V4A0e%2BObb7okLpS7cJuKZJ9PFFhYwfoKFKPtMjqV\"}]}\r\ncf-ray: a3f884655d9b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":41528,"size_decoded":42279,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 41528, version 1.0","md5":"62479015e32c43453c7ab4ceb191a613","sha1":"d886ab861430f70e68f1526b8a4cf8da49159089","sha256":"5e606643bdc5267254f793d9544bb27b6201c97ec17f249789ba70fe1370d18f","sha512":"27ed7b5c78c47e781b0f227d9962eef3cb6e4674bfc90840befc7b043cd723a5b565244ee9b2b95783979590749e10c7014021ac3f9d8a492d4fb0e6a68453d6","ssdeep":"768:682ZgDJ15WHSzHhix/D6GhF08Qr7hYBazu9wKeizd3riQw:6vZcoHSzk56GFRQnhYBa6Sg7rw","tlshash":"a713014c9f467c10d514b5f43cdc2b8fa64ee9b521a22083c186bdb9b9dac7918268f9","first_seen":"2025-06-27T19:40:05.789239Z","last_seen":"2026-09-23T09:30:39.154338Z","times_seen":111,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"proferaymate.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"proferaymate.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}