{"report_id":"693d86d1-877a-4cf8-8dca-fd8e46419c14","version":6,"status":"done","tags":[],"date":"2024-12-27T03:20:28Z","url":{"schema":"http","addr":"www.pekora.zip","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"104.21.95.120","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"www.pekora.zip/auth/home","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"title":"Relive 2017+ with pekora.zip"},"submit":{"url":{"schema":"","addr":"","fqdn":"","domain":"","tld":""},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":""},"tags":null,"meta":null},"settings":{"access":"public","device_type":"","expires_at":"2027-03-07T03:20:28Z","useragent":"Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":0}},"detection":{"ids":null,"analyzer":null,"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.18.186.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":439,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2024-12-25T01:53:07.687308Z","alert_count":0,"request_count":2,"received_data":45197,"sent_data":949,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.pekora.zip","ip":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"domain_registered":"2024-12-16","domain_rank":0,"first_seen":"2024-12-17T10:58:15.504297Z","last_seen":"2024-12-17T10:58:15.504297Z","alert_count":7,"request_count":7,"received_data":2095644,"sent_data":3208,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":[{"sensor_name":"infosec_yara","type":"yara","description":"Public InfoSec YARA rules","link":"","alerts":null},{"sensor_name":"openphish","type":"url","description":"OpenPhish","link":"","alerts":null},{"sensor_name":"phishtank","type":"url","description":"PhishTank","link":"","alerts":null},{"sensor_name":"quad9","type":"domain","description":"Quad9 DNS","link":"","alerts":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null},{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}]},{"sensor_name":"threatfox","type":"url","description":"ThreatFox","link":"","alerts":null}],"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.186.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","size":78129,"data":"","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-04-04T14:36:41.048536Z","times_seen":15153,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pekora.zip/_framework/aspnetcore-browser-refresh.js","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"74b0bea6ffb26441d2b51c6e8836a4a8","sha1":"b260e11bb2fc1b5429b2f0268c4ca16a26a84362","sha256":"257bd343dafd3090095ced4b29ccdfa60f53c262a582e6d3c7cd9390523c68b8","sha512":"e36fb35f22144a2c749c6927065242525e697c5ea45d5b089c3f20bca983a596458e9b66481c468aa6d8633bcc6712fc1701941d2c5b88f8ac3a823ae77b1ac6","ssdeep":"192:B4u4l1ms4J6UC+6ogusTrhX4UqlIGQdQqj23FUvQzjpwC:Cu4nGLmt4PIS3KowC","tlshash":"9c42a5693522a03185b3a37bef13e009f736106322439169b7dd4124afb19a9d2f7edd","size":12328,"data":"","first_seen":"2024-12-27T03:20:29.241206Z","last_seen":"2024-12-27T03:49:53.718107Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.186.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.pekora.zip/auth/home","date":"2024-12-27T03:20:02.273Z","timestamp":1735269602273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 May 2024 00:00:00 GMT","end":"Sun, 04 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE","sha256":"5E:14:CC:02:38:48:65:94:0B:A2:7E:3B:03:3F:E9:6A:FA:F1:0E:05:E5:16:71:83:BF:23:D4:AB:B1:A0:AC:73"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/css/bootstrap.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.pekora.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pekora.zip/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Dec 2024 03:20:02 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 20842\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"28021-7Ba9Gb9K6bwuIzasQJpQO7varK0\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220101-FRA, cache-lga21933-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 598677\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=ubPTUT4ybGimpQx7mYe6I%2FDhISAa5PmmqN7%2Ff2chDWxPow%2BgQ63hMnhpvVIaiLkMbxsY7HlzjZs9YS8fnLz%2B3eBL9YyvjTeiHTiWQ0zUlfIYdP4bELueYkQ1fdbsA%2F0LWXM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f862c264d68b51b-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20842,"size_decoded":163873,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65306)","md5":"94994c66fec8c3468b269dc0cc242151","sha1":"ec16bd19bf4ae9bc2e2336ac409a503bbbdaacad","sha256":"62f74b1cf824a89f03554c638e719594c309b4d8a627a758928c0516fa7890ab","sha512":"190194d1f30c8b6dfcb80f9afdb75625fa5418a52405d81f15d8019bbd92510e817b25a3a18feda27d2d1231fe3921fd88fe037e1fbb1ccd08f5fe5e4742ffe3","ssdeep":"1536:4t04T8if0W8DsEBpy0cuJBf2rIWE5e0VUpz600I4fM:4t04/0VUpz600I4fM","tlshash":"c1f3b4dbf581341dd4a7c259a4d1bffd052f4586e3025aabb0277bb88b892c70963e4c","first_seen":"2023-04-05T04:27:21Z","last_seen":"2026-04-04T14:36:41.069692Z","times_seen":21775,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":16,"dns":1,"connect":1,"send":0,"wait":11,"receive":2,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pekora.zip/UnsecuredContent/Image1.png","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pekora.zip/auth/home","date":"2024-12-27T03:20:02.276Z","timestamp":1735269602276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pekora.zip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 16:13:37 GMT","end":"Sun, 16 Mar 2025 17:11:12 GMT"},"fingerprint":{"sha1":"51:CE:06:98:20:33:B9:0E:3B:AA:70:65:77:F0:70:65:6E:07:F6:47","sha256":"A2:6C:5E:47:02:68:12:2B:66:F8:18:23:C6:35:50:C9:57:6B:95:A8:E1:59:96:77:36:22:51:8A:E5:9A:95:F9"}}},"request":{"raw":"GET /UnsecuredContent/Image1.png HTTP/1.1\r\nHost: www.pekora.zip\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pekora.zip/auth/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Dec 2024 03:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 331610\r\ncache-control: public, max-age=31536000\r\netag: \"1dae78d5eea57da\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 888854\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=N81up4nNsv0ibjvzx5DpkodvhvxOxUkKtwEYQwmdXWVzMVLNuRMGDpPkmMCmzelvwINbQQ3sdul2PoG7aC8SrHj3V0THt1l8rYEux34rDaa1c4LowjBdEjor9qugPJfCTQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f862c262998b523-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3584\u0026min_rtt=1191\u0026rtt_var=2155\u0026sent=16\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=4219\u0026recv_bytes=2018\u0026delivery_rate=494128\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c1d5bd2d3213f306\u0026ts=369\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":331610,"size_decoded":331610,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3835x1863, components 3","md5":"c64b670ee1f145ab693f374242a2025d","sha1":"8c03d227aaccc43ced1cbeb44818ae3ed4eb49d8","sha256":"ff0c23b0f4a1cbedfe3fe8e5b5c30ad5e84b3660bb7b8af2349f1cc64c69c789","sha512":"44759a9f571263e9182fce54e439ecd54421f06d369075b3791808a91b176e47d92538a2e72aae799d80d1a4d44272eea037573a2feb568dbfd30ed73ca9c64b","ssdeep":"6144:vNiHiUka74ng/xyYxfplkVCAKWmcygqOBJrCeH+QRy3j/pCzZ78zCA1xr4y:vNiHrSg/xLd3eCAKWBdjmeeQITrzD1b","tlshash":"216412538b2896e3db8a577040c71a4cef13a6a2d28bf54e2b5e49b051f13987cdd7c8","first_seen":"2024-10-30T19:44:35.47723Z","last_seen":"2025-07-25T02:06:43.151743Z","times_seen":104,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pekora.zip/UnsecuredContent/Image2.png","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pekora.zip/auth/home","date":"2024-12-27T03:20:02.279Z","timestamp":1735269602279,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pekora.zip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 16:13:37 GMT","end":"Sun, 16 Mar 2025 17:11:12 GMT"},"fingerprint":{"sha1":"51:CE:06:98:20:33:B9:0E:3B:AA:70:65:77:F0:70:65:6E:07:F6:47","sha256":"A2:6C:5E:47:02:68:12:2B:66:F8:18:23:C6:35:50:C9:57:6B:95:A8:E1:59:96:77:36:22:51:8A:E5:9A:95:F9"}}},"request":{"raw":"GET /UnsecuredContent/Image2.png HTTP/1.1\r\nHost: www.pekora.zip\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pekora.zip/auth/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Dec 2024 03:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 762702\r\ncache-control: public, max-age=31536000\r\netag: \"1dae78d5ee4fbce\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 888854\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=IyX9xJmmIQ%2F9QLP4gYOvWaXqbmstPVED17%2FFh6mozYhTZ8Prkn0uHAZJ%2BNoZwLDl%2FPcAXgT%2FnND2MA4PEPdagc6ezOmP0BbCARxF6x2dYlQYQbFB259FzGHx5kTP1g%2Bbgg%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f862c26299eb523-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3584\u0026min_rtt=1191\u0026rtt_var=2155\u0026sent=26\u0026recv=10\u0026lost=0\u0026retrans=0\u0026sent_bytes=16219\u0026recv_bytes=2018\u0026delivery_rate=494128\u0026cwnd=12000\u0026unsent_bytes=0\u0026cid=c1d5bd2d3213f306\u0026ts=371\u0026x=1\", cfExtPri, cfHdrFlush;dur=1\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":762702,"size_decoded":762702,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3698x1936, components 3","md5":"66b0a4c1375d1dc24f3ab9013eefafa8","sha1":"eabd1dec10e5d852ab63f1e021de062268235d85","sha256":"dcabdda770d84dbd0facf9f2aa9512a60ddf8e038bbd3429676a278ced854bdb","sha512":"45c3b60a8f504cb56a7390b38cabc3400467b1ab8c95ba4d22bd9ea8dd52733d85dc2900ca1ec60c754605841616c73aba047f8b6b9e766b069baea1c79a604e","ssdeep":"12288:Rd/DJmTgit/g1Z7eiJRKr0MJpqOxL03KwG0KpvvVPrGg5ttY+4EHze7AbM/yqiH:Mht/eeSXMJb0uH9TtpTe7DyqiH","tlshash":"47f401428bde1ea399436454ac5d209e92c19cdef1ec7308cddb1e29d9ea54018f7cee","first_seen":"2024-10-30T19:44:35.474869Z","last_seen":"2025-07-25T02:06:43.076195Z","times_seen":104,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.18.186.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pekora.zip/auth/home","date":"2024-12-27T03:20:02.283Z","timestamp":1735269602283,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Sat, 04 May 2024 00:00:00 GMT","end":"Sun, 04 May 2025 23:59:59 GMT"},"fingerprint":{"sha1":"74:7A:63:DF:06:27:1E:52:8C:E8:0D:AD:1F:89:98:B5:EB:2D:49:EE","sha256":"5E:14:CC:02:38:48:65:94:0B:A2:7E:3B:03:3F:E9:6A:FA:F1:0E:05:E5:16:71:83:BF:23:D4:AB:B1:A0:AC:73"}}},"request":{"raw":"GET /npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://www.pekora.zip\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pekora.zip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Dec 2024 03:20:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 22075\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 5.1.3\r\nx-jsd-version-type: version\r\netag: W/\"13131-qF5oFiTJGhBqUUwx6s+A3oF7LMM\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-etou8220091-FRA, cache-lga21960-LGA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\ncf-cache-status: HIT\r\nage: 776251\r\naccept-ranges: bytes\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=5l0lUD%2B8KFMLiqmY92nThFAv1kTvIeZx79pqZYJhf%2F7v9F7Da0peX9pvFqyTEnDzMao5BHEC5sfNcj6SNVUkStYf4BQVvghV08DVxwwoLTTiUZys1zvI%2B%2BzJFp6fjGVkYFc%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f862c273dfcb51b-OSL\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":22075,"size_decoded":78129,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65299)","md5":"7ccd9d390d31af98110f74f842ea9b32","sha1":"a85e681624c91a106a514c31eacf80de817b2cc3","sha256":"f5210fa3e7f0245a4c51eb7f280092c0ef99fdd28c45e17dab8cc5854fdf4fd3","sha512":"a5ac783258178c710f7c2c1c24b4218a063bf8df2bb7a6d5bd62c5c9432ec5286fd7bd17e774d1cc63e63e4666181864fa38a447c581338ca5ec0f563071eabe","ssdeep":"1536:pppbTNR2t4NEdiK5J2w8gGzjJVPOW7tI+r9ixR2nwZY:T36WJr9ixi","tlshash":"a873c5493254b8730ade45a68037470bf3265994b14b802cb5bcadde2a3dd8672b7f7c","first_seen":"2023-03-07T01:06:26Z","last_seen":"2026-04-04T14:36:41.048536Z","times_seen":15153,"resource_available":true,"data":null}},"time_used":336,"timings":{"blocked":156,"dns":3,"connect":4,"send":0,"wait":12,"receive":2,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.pekora.zip/UnsecuredContent/Image3.png","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pekora.zip/auth/home","date":"2024-12-27T03:20:02.280Z","timestamp":1735269602280,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pekora.zip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 16:13:37 GMT","end":"Sun, 16 Mar 2025 17:11:12 GMT"},"fingerprint":{"sha1":"51:CE:06:98:20:33:B9:0E:3B:AA:70:65:77:F0:70:65:6E:07:F6:47","sha256":"A2:6C:5E:47:02:68:12:2B:66:F8:18:23:C6:35:50:C9:57:6B:95:A8:E1:59:96:77:36:22:51:8A:E5:9A:95:F9"}}},"request":{"raw":"GET /UnsecuredContent/Image3.png HTTP/1.1\r\nHost: www.pekora.zip\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pekora.zip/auth/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nTE: trailers\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Dec 2024 03:20:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 950421\r\ncache-control: public, max-age=31536000\r\netag: \"1dae79023074215\"\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: HIT\r\nage: 888854\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=yZjnaDsfKmeNJWrAxIS1u3xuDXSO4nU3Zv7PtK8XgRhU%2F%2B49b1pnQ4rKZSddiK6YDEdcSXGjHpVWl4OLdzEXY4th6fNKhVJHITgklgaEP76N9hHfaPx9Fb6sYCOkVZRRpA%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f862c26299fb523-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=3427\u0026min_rtt=1191\u0026rtt_var=1930\u0026sent=47\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=40219\u0026recv_bytes=2062\u0026delivery_rate=33997\u0026cwnd=24000\u0026unsent_bytes=0\u0026cid=c1d5bd2d3213f306\u0026ts=372\u0026x=1\", cfExtPri, cfHdrFlush;dur=3\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":950421,"size_decoded":950421,"mime_type":"image/png","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 3698x1935, components 3","md5":"68d795b99b5a9a68928ac1fa30060950","sha1":"c87b5f1a7e596a0ad62bb1e1d68536e50e54f62a","sha256":"25e7f8fd8647773b216da307a3338eec8b23850f9fb3dde1dcb73f2ca284e7d8","sha512":"6fd4c45fc2ed376ff9f8cc7eec6fd8a130d1851e4274c40e6f2077f30e3f7fff3c67f6e7ff3c1494d862c37d5f49e79271b98c373e819510320e2a6e508caf3c","ssdeep":"24576:R81DuoGXk/oHEmogVgxffT36Y3w2Ko7C3lC8lcOqU8mh:RkOEmogVgxffTtw2KTlH6Ox8mh","tlshash":"0c15234c0af4a3a9c53e287b1ba97f464fc71827d9a6e4035173763a1088273313d9be","first_seen":"2024-10-30T19:44:35.472898Z","last_seen":"2025-07-25T02:06:43.091957Z","times_seen":103,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":294,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pekora.zip/","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-27T03:20:01.730Z","timestamp":1735269601730,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pekora.zip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 16:13:37 GMT","end":"Sun, 16 Mar 2025 17:11:12 GMT"},"fingerprint":{"sha1":"51:CE:06:98:20:33:B9:0E:3B:AA:70:65:77:F0:70:65:6E:07:F6:47","sha256":"A2:6C:5E:47:02:68:12:2B:66:F8:18:23:C6:35:50:C9:57:6B:95:A8:E1:59:96:77:36:22:51:8A:E5:9A:95:F9"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.pekora.zip\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Fri, 27 Dec 2024 03:20:01 GMT\r\nlocation: /auth/home\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip   http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com  https://challenges.cloudflare.com/* http://web.archive.org https://*.archive.org https://web.archive.org/* https://*.hcaptcha.com; style-src 'unsafe-inline' 'self'  http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css ; font-src 'self' fonts.gstatic.com; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/*; worker-src 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=3cPR9iqgzMn%2BxqQPJZBRbhPqfTBPVxQhZx6%2Be2dV3e%2FZxopbIyaj3Eq1GPwwxRgPcIUMk7kwlSFZ5ijbxNMHWX3MQ6cerGx8n5J3bmZuB1rgkMMKwzpG3iVKeBD1faQs5A%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f862c22fc9bb509-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=5938\u0026min_rtt=409\u0026rtt_var=11051\u0026sent=7\u0026recv=11\u0026lost=0\u0026retrans=0\u0026sent_bytes=3196\u0026recv_bytes=1117\u0026delivery_rate=7300840\u0026cwnd=254\u0026unsent_bytes=0\u0026cid=c3d39d11a9128a18\u0026ts=126\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":null,"data":{"size":5580,"size_decoded":5580,"mime_type":"text/html; charset=utf-8","magic":"Apache Avro version 101","md5":"96d3912b71e53ba2c518f171685ced78","sha1":"d7e88c0fe3974c1b75c1bc0af0ed2af6df5929b6","sha256":"6ad1ffab4085f36a3f713564ec11b7281c76bfe99d0e2f579e609300c6c86f55","sha512":"2be6173ec6b716d9c7fcffbcdfb0020aea33f169860b59ebf8632c1e7d6fee464a6fcdda53667c7d19afb176165d3e81c09a0c4a28cb408b16fa905b6db1a5ef","ssdeep":"96:xREa4h/rvqeLEx1wCYCBjezYaijdeJH8MgnOH6vPj24FrrkEjFgR1Kv:xREpDo3wCxwfiIxc/Hj2OXkE2M","tlshash":"44b18e952246a8d4d73823be53d47aeb135cad83d52a1ba4d8c5a2c14c3f14ade43368","first_seen":"2024-12-27T03:20:29.236759Z","last_seen":"2024-12-27T03:20:29.236759Z","times_seen":1,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":21,"dns":0,"connect":1,"send":0,"wait":108,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pekora.zip/auth/home","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2024-12-27T03:20:01.912Z","timestamp":1735269601912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pekora.zip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 16:13:37 GMT","end":"Sun, 16 Mar 2025 17:11:12 GMT"},"fingerprint":{"sha1":"51:CE:06:98:20:33:B9:0E:3B:AA:70:65:77:F0:70:65:6E:07:F6:47","sha256":"A2:6C:5E:47:02:68:12:2B:66:F8:18:23:C6:35:50:C9:57:6B:95:A8:E1:59:96:77:36:22:51:8A:E5:9A:95:F9"}}},"request":{"raw":"GET /auth/home HTTP/1.1\r\nHost: www.pekora.zip\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Dec 2024 03:20:01 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip   http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com  https://challenges.cloudflare.com/* http://web.archive.org https://*.archive.org https://web.archive.org/* https://*.hcaptcha.com; style-src 'unsafe-inline' 'self'  http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css ; font-src 'self' fonts.gstatic.com; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/*; worker-src 'self';\r\nx-timing: AppGuard=0,a=0,ua=0,c=0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=GFlbDh9f8%2Bm%2FVey2U0RkAh4%2BBN%2BFZvRGjwgOUxTjxkSYGcw8WBykqWJKSwhBTSVIeaN1twvNnAotdRRbfbqwIiN9MaP3CDq2oXT82liJRIrl090H6H%2BwxJK12uuGLu6Eig%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 8f862c23fd2db509-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=TCP\u0026rtt=3765\u0026min_rtt=409\u0026rtt_var=6294\u0026sent=12\u0026recv=16\u0026lost=0\u0026retrans=0\u0026sent_bytes=4910\u0026recv_bytes=1190\u0026delivery_rate=7300840\u0026cwnd=257\u0026unsent_bytes=0\u0026cid=c3d39d11a9128a18\u0026ts=237\u0026x=0\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":10337,"size_decoded":10337,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pekora.zip/i/do/not/exist.png","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.pekora.zip/auth/home","date":"2024-12-27T03:20:02.596Z","timestamp":1735269602596,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pekora.zip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 16:13:37 GMT","end":"Sun, 16 Mar 2025 17:11:12 GMT"},"fingerprint":{"sha1":"51:CE:06:98:20:33:B9:0E:3B:AA:70:65:77:F0:70:65:6E:07:F6:47","sha256":"A2:6C:5E:47:02:68:12:2B:66:F8:18:23:C6:35:50:C9:57:6B:95:A8:E1:59:96:77:36:22:51:8A:E5:9A:95:F9"}}},"request":{"raw":"GET /i/do/not/exist.png HTTP/1.1\r\nHost: www.pekora.zip\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pekora.zip/auth/home\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Fri, 27 Dec 2024 03:20:03 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: public, max-age=14400, must-revalidate\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-security-policy: default-src 'self'; img-src 'self' data:; child-src 'self'; script-src 'unsafe-eval' 'self' https://challenges.cloudflare.com/turnstile/v0/api.js https://translate.google.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/js/bootstrap.bundle.min.js https://pekora.zip   http://*.archive.org https://*.archive.org http://js.rbxcdn.com/46eace8231bf3c1ce64c55407d9ae60d.js; frame-src 'self' https://hcaptcha.com https://challenges.cloudflare.com http://challenges.cloudflare.com  https://challenges.cloudflare.com/* http://web.archive.org https://*.archive.org https://web.archive.org/* https://*.hcaptcha.com; style-src 'unsafe-inline' 'self'  http://*.archive.org https://fonts.googleapis.com https://hcaptcha.com https://*.hcaptcha.com https://cdn.jsdelivr.net/npm/bootstrap@5.1.3/dist/css/bootstrap.min.css ; font-src 'self' fonts.gstatic.com; connect-src 'self' https://*.pekora.zip wss://*.pekora.zip https://hcaptcha.com https://*.hcaptcha.com https://*.cdn.com https://*.archive.org/* https://web.archive.org https://challenges.cloudflare.com/*; worker-src 'self';\r\ncf-cache-status: EXPIRED\r\npriority: u=6,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=H%2F%2B5UbnaYL0s4DYoEAjMJZVu33%2FZrgVGfU3QYdLutbJCcvcCympNpbbXiD6i68hnyaxdGpKR7AXlBJgKV9hJXQUuE0R5ucZPTorI%2FcevHpjdu15peBdc20SFErp4n%2B3hog%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f862c283a6eb523-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=26572\u0026min_rtt=1191\u0026rtt_var=31234\u0026sent=1803\u0026recv=25\u0026lost=19\u0026retrans=22\u0026sent_bytes=2132924\u0026recv_bytes=2951\u0026delivery_rate=1710255\u0026cwnd=223470\u0026unsent_bytes=0\u0026cid=c1d5bd2d3213f306\u0026ts=1807\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":12044,"size_decoded":12044,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":1124,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1123,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.pekora.zip/_framework/aspnetcore-browser-refresh.js","fqdn":"www.pekora.zip","domain":"pekora.zip","tld":"zip"},"ip":{"addr":"172.67.144.192","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.pekora.zip/auth/home","date":"2024-12-27T03:20:02.284Z","timestamp":1735269602284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"pekora.zip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Dec 2024 16:13:37 GMT","end":"Sun, 16 Mar 2025 17:11:12 GMT"},"fingerprint":{"sha1":"51:CE:06:98:20:33:B9:0E:3B:AA:70:65:77:F0:70:65:6E:07:F6:47","sha256":"A2:6C:5E:47:02:68:12:2B:66:F8:18:23:C6:35:50:C9:57:6B:95:A8:E1:59:96:77:36:22:51:8A:E5:9A:95:F9"}}},"request":{"raw":"GET /_framework/aspnetcore-browser-refresh.js HTTP/1.1\r\nHost: www.pekora.zip\r\nUser-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.pekora.zip/auth/home\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Dec 2024 03:20:02 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncache-control: no-store\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 1; mode=block\r\ncf-cache-status: BYPASS\r\npriority: u=3,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=qFCwj1tlGIzI6YHmV4cgBIip11DWDGH3pwA1SCtHzrr5VBVmNYDZtKXsWFAvdqdLDqmaU9DPNNA5%2Fwp4kfOK3K589jjazL3G5MFjT3bBucbCRRlSvZiz2PhefXYphAAOQQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 8f862c2639a2b523-OSL\r\ncontent-encoding: br\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=6037\u0026min_rtt=1191\u0026rtt_var=4898\u0026sent=1256\u0026recv=19\u0026lost=19\u0026retrans=20\u0026sent_bytes=1481489\u0026recv_bytes=2436\u0026delivery_rate=25821009\u0026cwnd=219870\u0026unsent_bytes=0\u0026cid=c1d5bd2d3213f306\u0026ts=484\u0026x=1\", cfExtPri, cfHdrFlush;dur=47\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":12328,"size_decoded":12328,"mime_type":"application/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-04T15:49:33.06692Z","times_seen":13337345,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"domain","title":"","description":"Quad9 DNS","scan_date":"2024-12-27","alert":"Sinkholed","trigger":"pekora.zip","verdict":"malicious","severity":"medium","comment":"Sinkholed","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}