{"report_id":"6a19969b-4023-4fec-809d-26391bbc97c7","version":6,"status":"done","tags":["suspicious","telegram_bot"],"date":"2026-02-04T18:30:07Z","url":{"schema":"http","addr":"trackintel.org","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"final":{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"title":"TrackIntel","dom":{"size":95774,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (32102), with CRLF, LF line terminators","md5":"0111614e54fd891208c53cf4b492570c","sha1":"40632705e2d2933e5e6d2f6c2d98540fbe3ecafd","sha256":"321416cbad06a42c2323e34d439169788608fa94c9157059f81b3f5b6c851e03","sha512":"a3ba9728b2d2331050e106fec9f0e6367babacabcacb7435c9e46b8be3aee02bc5e8582ac5fe8bab22e91b4138fb08a34baa7a0d2e0e9fd8da5400c643a05fff","ssdeep":"768:WKFr21jcdXfOYz1zSz/d7S0cppoInqXn1wAAln6izPFbCxVDlSRFjIYRYhglPbc0:ZlmhSVgnMNIYRYhhSV3","tlshash":"6c93e83ea210056e32174abdf2b87729d169cd46f6874c1cf2fd0d61b7a6c5cb81a2d4","dom_hash":"domhashad16abd50539f0c6c2b23e5993c2bba7","first_seen":"2026-02-04T18:30:34.253626Z","last_seen":"2026-02-04T18:30:34.253626Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"trackintel.org","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":0,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-11T18:30:07Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":2,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-04","alert":"Detects file containing Telegram Bot API","trigger":"trackintel.org/assets/index-CfYHhppD.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null},{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"summary":[{"fqdn":"cdn.fontshare.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2003-10-01","domain_rank":681638,"first_seen":"2021-04-12T08:52:39Z","last_seen":"2026-02-01T06:12:37.098266Z","alert_count":0,"request_count":18,"received_data":480744,"sent_data":10728,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"trackintel.org","ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2025-12-01","domain_rank":0,"first_seen":"2026-02-04T15:47:28.349119Z","last_seen":"2026-02-04T15:47:28.349119Z","alert_count":37,"request_count":31,"received_data":18814693,"sent_data":13908,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":62467,"first_seen":"2023-06-27T20:50:44Z","last_seen":"2026-01-30T08:17:01.99158Z","alert_count":0,"request_count":12,"received_data":3210228,"sent_data":5676,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-02-01T22:32:08.727296Z","alert_count":0,"request_count":6,"received_data":89464,"sent_data":3270,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app.dynamicauth.com","ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-24","domain_rank":1824779,"first_seen":"2023-07-05T19:07:58Z","last_seen":"2026-02-01T10:29:08.192775Z","alert_count":0,"request_count":14,"received_data":123793,"sent_data":10252,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}]},{"fqdn":"api.fontshare.com","ip":{"addr":"35.178.12.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-10-01","domain_rank":604295,"first_seen":"2021-03-02T20:36:57Z","last_seen":"2026-01-29T12:28:58.693318Z","alert_count":0,"request_count":6,"received_data":21534,"sent_data":2868,"comment":"","tags":null,"fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}]},{"fqdn":"iconic.dynamic-static-assets.com","ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-02-10","domain_rank":1804516,"first_seen":"2023-03-28T18:24:46Z","last_seen":"2026-01-30T07:49:58.467691Z","alert_count":0,"request_count":6,"received_data":12076809,"sent_data":2712,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":[{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","size":3087668,"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","is_revoked":false,"bot":{"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","user_id":"8224626089","username":"jozijzoefjbot","first_name":"logs²²²","last_name":"","chat":{"chat_id":"-4994148773","title":"Penguins Army","type":"group","bot_is":"member","total_users":9,"active_members":null,"admins":[{"user_id":7977561050,"username":"colonizer","first_name":"Kyle","last_name":"","is_bot":false}]},"pending_messages":0}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","size":3087668,"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","is_revoked":false,"bot":{"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","user_id":"8224626089","username":"jozijzoefjbot","first_name":"logs²²²","last_name":"","chat":{"chat_id":"-4994148773","title":"Penguins Army","type":"group","bot_is":"member","total_users":9,"active_members":null,"admins":[{"user_id":7977561050,"username":"colonizer","first_name":"Kyle","last_name":"","is_bot":false}]},"pending_messages":0}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","size":3087668,"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","is_revoked":false,"bot":{"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","user_id":"8224626089","username":"jozijzoefjbot","first_name":"logs²²²","last_name":"","chat":{"chat_id":"-4994148773","title":"Penguins Army","type":"group","bot_is":"member","total_users":9,"active_members":null,"admins":[{"user_id":7977561050,"username":"colonizer","first_name":"Kyle","last_name":"","is_bot":false}]},"pending_messages":0}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","size":3087668,"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","is_revoked":false,"bot":{"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","user_id":"8224626089","username":"jozijzoefjbot","first_name":"logs²²²","last_name":"","chat":{"chat_id":"-4994148773","title":"Penguins Army","type":"group","bot_is":"member","total_users":9,"active_members":null,"admins":[{"user_id":7977561050,"username":"colonizer","first_name":"Kyle","last_name":"","is_bot":false}]},"pending_messages":0}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","size":3087668,"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","is_revoked":false,"bot":{"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","user_id":"8224626089","username":"jozijzoefjbot","first_name":"logs²²²","last_name":"","chat":{"chat_id":"-4994148773","title":"Penguins Army","type":"group","bot_is":"member","total_users":9,"active_members":null,"admins":[{"user_id":7977561050,"username":"colonizer","first_name":"Kyle","last_name":"","is_bot":false}]},"pending_messages":0}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","size":3087668,"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","is_revoked":false,"bot":{"token":"8224626089:AAEf8_6qXPZgMPy7DW1pLElUAASSjcKRzdg","user_id":"8224626089","username":"jozijzoefjbot","first_name":"logs²²²","last_name":"","chat":{"chat_id":"-4994148773","title":"Penguins Army","type":"group","bot_is":"member","total_users":9,"active_members":null,"admins":[{"user_id":7977561050,"username":"colonizer","first_name":"Kyle","last_name":"","is_bot":false}]},"pending_messages":0}}],"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]},"javascript":{"script":[{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-08-07T02:26:45.154725Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-08-07T02:26:45.157032Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","ssdeep":"49152:JpILZzVovJ0eP/9T3dQj+BnURhro6eNrsycfRExY281jf4JCdkGYeUCekzX9Cn07:JpIF+n9u7","tlshash":"95e57dc8f3587124b79386d8c07f1156b2397904f81d44b4f5bdcc8a2af0a89a677b7a","size":3087668,"data":"","first_seen":"2026-02-04T15:47:45.249744Z","last_seen":"2026-02-04T18:30:34.264164Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-04","alert":"Detects file containing Telegram Bot API","trigger":"trackintel.org/assets/index-CfYHhppD.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","ssdeep":"49152:JpILZzVovJ0eP/9T3dQj+BnURhro6eNrsycfRExY281jf4JCdkGYeUCekzX9Cn07:JpIF+n9u7","tlshash":"95e57dc8f3587124b79386d8c07f1156b2397904f81d44b4f5bdcc8a2af0a89a677b7a","size":3087668,"data":"","first_seen":"2026-02-04T15:47:45.249744Z","last_seen":"2026-02-04T18:30:34.264164Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-04","alert":"Detects file containing Telegram Bot API","trigger":"trackintel.org/assets/index-CfYHhppD.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-08-07T02:26:45.154725Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-08-07T02:26:45.148226Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-08-07T02:26:45.154725Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-08-07T02:26:45.15356Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-08-07T02:26:45.155575Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-08-07T02:26:45.148226Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-08-07T02:26:45.158634Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-08-07T02:26:45.162385Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-08-07T02:26:45.15356Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-08-07T02:26:45.157032Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-08-07T02:26:45.162385Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-08-07T02:26:45.154725Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-08-07T02:26:45.154205Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"82231d38f8bf3d11c41ee69f9c71f6ae","sha1":"776e3ae4179c16def43495889c188c4bcd70263d","sha256":"ae5696f5e90d40559e00610fb7d341c7f011eeb9d5f8ce6b23af482793355d51","sha512":"7b239a6966f90c71dc98e3c774803958079afa4b7250ba857efb4c31d5637ccb34f96ea8ddb5498ebdd9f42b6c7d127b379f57378de7a6b5fd71e57f416a2f41","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrX7Dnzlyo9qYYM6d37oMeV3FVZl:FHeVWRK1GfRGW4dsLsjU","tlshash":"68429e0f0ab865022a6364345e5d18d4ae208db7332968e53ead10645f9bd3c3bf5ff6","size":12757,"data":"","first_seen":"2025-12-15T21:06:47.365411Z","last_seen":"2026-08-07T02:26:45.159203Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-08-07T02:26:45.157032Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-08-07T02:26:45.15356Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"82231d38f8bf3d11c41ee69f9c71f6ae","sha1":"776e3ae4179c16def43495889c188c4bcd70263d","sha256":"ae5696f5e90d40559e00610fb7d341c7f011eeb9d5f8ce6b23af482793355d51","sha512":"7b239a6966f90c71dc98e3c774803958079afa4b7250ba857efb4c31d5637ccb34f96ea8ddb5498ebdd9f42b6c7d127b379f57378de7a6b5fd71e57f416a2f41","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrX7Dnzlyo9qYYM6d37oMeV3FVZl:FHeVWRK1GfRGW4dsLsjU","tlshash":"68429e0f0ab865022a6364345e5d18d4ae208db7332968e53ead10645f9bd3c3bf5ff6","size":12757,"data":"","first_seen":"2025-12-15T21:06:47.365411Z","last_seen":"2026-08-07T02:26:45.159203Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-08-07T02:26:45.15356Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-08-07T02:26:45.157032Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-08-07T02:26:45.15652Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-08-07T02:26:45.155088Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-08-07T02:26:45.155575Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-08-07T02:26:45.155575Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-08-07T02:26:45.157543Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","ssdeep":"49152:JpILZzVovJ0eP/9T3dQj+BnURhro6eNrsycfRExY281jf4JCdkGYeUCekzX9Cn07:JpIF+n9u7","tlshash":"95e57dc8f3587124b79386d8c07f1156b2397904f81d44b4f5bdcc8a2af0a89a677b7a","size":3087668,"data":"","first_seen":"2026-02-04T15:47:45.249744Z","last_seen":"2026-02-04T18:30:34.264164Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-04","alert":"Detects file containing Telegram Bot API","trigger":"trackintel.org/assets/index-CfYHhppD.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-07T12:07:10.634985Z","times_seen":376631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-08-07T02:26:45.155575Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-08-07T02:26:45.154725Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-07-29T20:02:12.464108Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-08-07T02:26:45.155088Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"82231d38f8bf3d11c41ee69f9c71f6ae","sha1":"776e3ae4179c16def43495889c188c4bcd70263d","sha256":"ae5696f5e90d40559e00610fb7d341c7f011eeb9d5f8ce6b23af482793355d51","sha512":"7b239a6966f90c71dc98e3c774803958079afa4b7250ba857efb4c31d5637ccb34f96ea8ddb5498ebdd9f42b6c7d127b379f57378de7a6b5fd71e57f416a2f41","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrX7Dnzlyo9qYYM6d37oMeV3FVZl:FHeVWRK1GfRGW4dsLsjU","tlshash":"68429e0f0ab865022a6364345e5d18d4ae208db7332968e53ead10645f9bd3c3bf5ff6","size":12757,"data":"","first_seen":"2025-12-15T21:06:47.365411Z","last_seen":"2026-08-07T02:26:45.159203Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-08-07T02:26:45.157543Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-08-07T02:26:45.15356Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"82231d38f8bf3d11c41ee69f9c71f6ae","sha1":"776e3ae4179c16def43495889c188c4bcd70263d","sha256":"ae5696f5e90d40559e00610fb7d341c7f011eeb9d5f8ce6b23af482793355d51","sha512":"7b239a6966f90c71dc98e3c774803958079afa4b7250ba857efb4c31d5637ccb34f96ea8ddb5498ebdd9f42b6c7d127b379f57378de7a6b5fd71e57f416a2f41","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrX7Dnzlyo9qYYM6d37oMeV3FVZl:FHeVWRK1GfRGW4dsLsjU","tlshash":"68429e0f0ab865022a6364345e5d18d4ae208db7332968e53ead10645f9bd3c3bf5ff6","size":12757,"data":"","first_seen":"2025-12-15T21:06:47.365411Z","last_seen":"2026-08-07T02:26:45.159203Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-08-07T02:26:45.154205Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","ssdeep":"49152:JpILZzVovJ0eP/9T3dQj+BnURhro6eNrsycfRExY281jf4JCdkGYeUCekzX9Cn07:JpIF+n9u7","tlshash":"95e57dc8f3587124b79386d8c07f1156b2397904f81d44b4f5bdcc8a2af0a89a677b7a","size":3087668,"data":"","first_seen":"2026-02-04T15:47:45.249744Z","last_seen":"2026-02-04T18:30:34.264164Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-04","alert":"Detects file containing Telegram Bot API","trigger":"trackintel.org/assets/index-CfYHhppD.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-08-07T02:26:45.155088Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-08-07T02:26:45.148226Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"82231d38f8bf3d11c41ee69f9c71f6ae","sha1":"776e3ae4179c16def43495889c188c4bcd70263d","sha256":"ae5696f5e90d40559e00610fb7d341c7f011eeb9d5f8ce6b23af482793355d51","sha512":"7b239a6966f90c71dc98e3c774803958079afa4b7250ba857efb4c31d5637ccb34f96ea8ddb5498ebdd9f42b6c7d127b379f57378de7a6b5fd71e57f416a2f41","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrX7Dnzlyo9qYYM6d37oMeV3FVZl:FHeVWRK1GfRGW4dsLsjU","tlshash":"68429e0f0ab865022a6364345e5d18d4ae208db7332968e53ead10645f9bd3c3bf5ff6","size":12757,"data":"","first_seen":"2025-12-15T21:06:47.365411Z","last_seen":"2026-08-07T02:26:45.159203Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-07T12:07:10.634985Z","times_seen":376631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-08-07T02:26:45.162385Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-08-07T02:26:45.15652Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-08-07T02:26:45.155575Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-08-07T02:26:45.154205Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-07T12:07:10.634985Z","times_seen":376631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","ssdeep":"49152:JpILZzVovJ0eP/9T3dQj+BnURhro6eNrsycfRExY281jf4JCdkGYeUCekzX9Cn07:JpIF+n9u7","tlshash":"95e57dc8f3587124b79386d8c07f1156b2397904f81d44b4f5bdcc8a2af0a89a677b7a","size":3087668,"data":"","first_seen":"2026-02-04T15:47:45.249744Z","last_seen":"2026-02-04T18:30:34.264164Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-04","alert":"Detects file containing Telegram Bot API","trigger":"trackintel.org/assets/index-CfYHhppD.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-08-07T02:26:45.162385Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-08-07T02:26:45.162385Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"82231d38f8bf3d11c41ee69f9c71f6ae","sha1":"776e3ae4179c16def43495889c188c4bcd70263d","sha256":"ae5696f5e90d40559e00610fb7d341c7f011eeb9d5f8ce6b23af482793355d51","sha512":"7b239a6966f90c71dc98e3c774803958079afa4b7250ba857efb4c31d5637ccb34f96ea8ddb5498ebdd9f42b6c7d127b379f57378de7a6b5fd71e57f416a2f41","ssdeep":"192:FZThXn6JgvirA9adYm2Mlrvxcvy50FSivCf0DrX7Dnzlyo9qYYM6d37oMeV3FVZl:FHeVWRK1GfRGW4dsLsjU","tlshash":"68429e0f0ab865022a6364345e5d18d4ae208db7332968e53ead10645f9bd3c3bf5ff6","size":12757,"data":"","first_seen":"2025-12-15T21:06:47.365411Z","last_seen":"2026-08-07T02:26:45.159203Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-08-07T02:26:45.154205Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-08-07T02:26:45.157543Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-08-07T02:26:45.155088Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-08-07T02:26:45.15652Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-08-07T02:26:45.15652Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-08-07T02:26:45.158634Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-07T12:07:10.634985Z","times_seen":376631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-08-07T02:26:45.154205Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c26e58bb40fd10ac64e576754828cdd4","sha1":"61d2795f7fce885d06e8a5ff7d9a80b71899977a","sha256":"d70dae22b8f02ce9cc9df21df065695de36f254f5a90fd823052f17ca25a773f","sha512":"db3feb6d6fa45909feeb2076385586768066efbfc9d59e1801f4728960b0a67c3f4c49ccf22a29b3c7d72b0e64565d8fcd3c72b771c21e9d5648174cd98dfc61","ssdeep":"96:FPbHmKt8Cr6lYvC7XAo4ddreQ2vBrTqcoT:FPzht8o6lYvCLAVddreQ2vBrTqcE","tlshash":"a6b13a0b16f87002156774311e9d2895ab648af7373c68a13ead10946f8bc3837f9ef5","size":5129,"data":"","first_seen":"2025-08-19T02:44:28.515063Z","last_seen":"2026-08-07T02:26:45.154725Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-08-07T02:26:45.162881Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-08-07T02:26:45.15652Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-07T12:07:10.634985Z","times_seen":376631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"7b492557e3d0052aed558444b0ead3a0","sha1":"160af018b647c234986b603160f0c23238766089","sha256":"adb833737eb5bf511c874bc7298ce4f229c48e4c6b6ec09167aba37179bda887","sha512":"8cb1cfd964c4005d7bf65dfcafe07eac5151805eba7e90704166236db56ebbf268e2be3a0b70046c817bb944b05bdb1b107b49f253b8c45ca86e47f3c2efaa96","ssdeep":"96:FhsI9JmKRMQ6ZSfvkDKA8J05ddSHq2YHrKT:FhNhRMQ6ZSfvkeAk05ddSHq2YHrK","tlshash":"d1916f0b09b86103291364780e9d19849a6486b3333968937efc11689f8bd3837f9ff6","size":4467,"data":"","first_seen":"2025-08-19T02:44:28.511022Z","last_seen":"2026-08-07T02:26:45.15356Z","times_seen":148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"f15660076a007483742cdcb58ee8736a","sha1":"1fda87a52c727ae6a09d1a669dd73794115c26bd","sha256":"7196cf013d45a5bdd4f762a92a26496ea68cfd3a4732a7fbc89640b7b168c08c","sha512":"e7fabd3ef2638f7e417d6f0e3b610c808e3ad2e29c9139b3136230e1514daa0f66978e9ba4787b25bc59635ff993bc6a9e320d41a063a74d8bd235868a51bda0","ssdeep":"","tlshash":"2e715b0f06b82503092774345e9f28a0995555bf322964ae3f9d12505f8bc3c2bf7eda","size":3629,"data":"","first_seen":"2025-08-19T02:44:28.513979Z","last_seen":"2026-08-07T02:26:45.154205Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-08-07T02:26:45.157543Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-07-29T20:02:12.464108Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-08-07T02:26:45.155088Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-08-07T02:26:45.157032Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cf86f8f4c439616585d7d5f5fa2fbd9c","sha1":"4b05428217ac6d5eba6d948c7eb4b498c95bf5b8","sha256":"08d48da713e38a21ef6027528320f1133a5f4438645a4e3b7d886c1d84b44e37","sha512":"47ddfcb1a6c43f9c2008f46800844e09164da9b603ba018b128aa733150b602b5f1c4849b012424f0a0192e9000879598b3f62c5854f0697438eee448d7d8ea4","ssdeep":"","tlshash":"4941450f08f8a502192774388eae6884a6509ab736787ce27ebc10645f46d3c37f5fe5","size":1999,"data":"","first_seen":"2025-08-19T02:44:28.494431Z","last_seen":"2026-08-07T02:26:45.152904Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"2b1e33b96af4b21f96d88a8fc4389dcf","sha1":"1aaba03650806172e06463e6a63efc86a9c869f0","sha256":"95b0feab88f103e8cbb816f534cf93caf4c1bb287885648cd5dd7be325187adf","sha512":"869b0b960d0acb9d92f1874c4691bbb72f469748dd07fbd9e3ad80b27f5a591cdb046b0793c7ae85d635f5067cc584fb0729b7b0b489e878b620a9e6b9527a5c","ssdeep":"","tlshash":"0931462b08b430512456e0ba2a5c1c53599185b333f9aad57dbd12802f82c3c77f7afa","size":1577,"data":"","first_seen":"2025-08-19T02:44:28.512218Z","last_seen":"2026-08-07T02:26:45.157032Z","times_seen":140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-07-29T20:02:12.464108Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5fac7e708db9b502a06051e3a6207eb0","sha1":"59e466cb4d87be8377494ad9f4e6fe88095cefe6","sha256":"36ece81885cae92c45f6470f7ba39ab86e4a51e13e3d7917591ae86a26c24453","sha512":"88f85bfd2d243f72769ca4f7dba9e4ee678689fc93eb9f57c90004d36112e9cf7d3a0f95a6ec554dbd7f9c916d3d4499c0302c8f6dd80a0c018e2337cff6228b","ssdeep":"","tlshash":"0931470f05ac60024927a530aecd18c4aab589733a3878a23ead55505f73d3937f9efd","size":1447,"data":"","first_seen":"2025-08-19T02:44:28.516181Z","last_seen":"2026-08-07T02:26:45.155088Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e612e14c4bb0da1aefc2e72384b485ff","sha1":"f294cdc1336719634bdd68a7859857840c8f18c4","sha256":"0d2efa1cbef7ce19124dafac2467ebeca4f7121d7571fb0f9ba2e6e05d1b9067","sha512":"7a49f565ba29c77c2f2d31a4af1013a4f6073540179ad961da5847bf3a07ff895e3059d0638c6e12b5fe172455dd117b8a9bba332c4828f7110556b00fd566ee","ssdeep":"","tlshash":"c2e0ab0f0078a0092c227171494a6df40c8426a73a3af4e69f782065ad87c3d79afcec","size":427,"data":"","first_seen":"2025-08-19T02:44:28.507783Z","last_seen":"2026-08-07T02:26:45.162385Z","times_seen":142,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-08-07T02:26:45.158634Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-08-07T02:26:45.162881Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-07-29T20:02:12.464108Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-07-29T20:02:12.464108Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-08-07T02:26:45.162881Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-08-07T02:26:45.162881Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"1c862db5f2555377c2dc1e62ed7b3981","sha1":"c29e6dc25c08a70995127ec13ded6f80d9a36174","sha256":"27d373a6961f797edf69a80f7f24877ef85c2fc4f9f770b2540b1bf5e66823ac","sha512":"31143265b96385ef4b575b72591775139057dff85891be61591e3d55259b6d1dc95d86a0feec40c801d38e64278cfbe50c3c2a16757f986ad40f716935bf2bb2","ssdeep":"","tlshash":"2580008a208820008aa323a0002b2c8800a000b028808c808080e8a20ca2030220baac","size":26,"data":"","first_seen":"2023-04-11T21:13:06Z","last_seen":"2026-08-07T12:07:10.634985Z","times_seen":376631,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-08-07T02:26:45.158634Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"56bc0ee5f42510cff3f39613b60a5605","sha1":"10b4c39f1462fe633c8b1d55897ef39185b6d803","sha256":"34ef02dfd24927210bdeb9454f348fd4abd210072c85c6a90749adb6b3470c2d","sha512":"6c743a3574702ab85038946a1cc88bc5a590ee6de07ea5744a3632d1d15cc36253e63acd4098de66a3c5268ee5fab2a9aebff0dfbc1698fb2696db287451a835","ssdeep":"","tlshash":"de014c0f543d64062c16603155462de42e841aea3976b8e26fb410a0de4be2f7667ddc","size":716,"data":"","first_seen":"2025-08-19T02:44:28.505577Z","last_seen":"2026-08-07T02:26:45.15652Z","times_seen":144,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-08-07T02:26:45.162881Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-08-07T02:26:45.158634Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"5e4a169c68a51f499374ba9c2f583a55","sha1":"9b8278f489ee8f3cd77615883f1bd29aa2aa5452","sha256":"99643babf4c0f6e7a396a27d108da1ba01883aa4d996bd229c23f9e476f7c443","sha512":"934991ed32d85caad6a008d9b7ef05b3525dacc0099c8db0c548d2e1debb168c1f86daec75f522adff4c5c528251558e225297d48f69d3bd2e3112a099df51d3","ssdeep":"","tlshash":"26014c0b04b8604599a270304d9d18a875545673323da8913ffd26689f8fe383bfeee9","size":725,"data":"","first_seen":"2025-08-19T02:44:28.498377Z","last_seen":"2026-08-07T02:26:45.162881Z","times_seen":141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-08-07T02:26:45.157543Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"e7e36c98685f6e9635848ea7cb7f9190","sha1":"d9daa766cc42486dd5d59dd510890ffa578944e5","sha256":"332616c33a0ca3f20b30062bcca4e7af765312dbb2d935d65b081725aa0f7894","sha512":"51e58304e02b3d10983b4a079ae41c3d20ea8f456024a8249c9fb026647ffeb8cab3e9c979c5c85523aea855092287d9c1accca7d6d4298a0e17ad1ae91d2979","ssdeep":"","tlshash":"b1019c0f817875061c7621b146052ef24de129967a3ab4f21fb820a0998bc3e3977ddd","size":736,"data":"","first_seen":"2025-08-19T02:44:28.506596Z","last_seen":"2026-08-07T02:26:45.158634Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"73add5402e1b6b0963b253e77427c10c","sha1":"a9c6d738260388bbfef6802931da9a52839b52ec","sha256":"7ce656a22b9f87aab1afbf457c6f6b10a7da0b1d7f9c262aa7621a48de9eaec1","sha512":"2edf3622b98cfbff1d53aacacba9954e2651cd15b71a110ba62b1a46883d0d75c79b5922435ded6d02cd41039b9b40e65788fc7a594f11cdbb8d0baafd005276","ssdeep":"49152:JpILZzVovJ0eP/9T3dQj+BnURhro6eNrsycfRExY281jf4JCdkGYeUCekzX9Cn07:JpIF+n9u7","tlshash":"95e57dc8f3587124b79386d8c07f1156b2397904f81d44b4f5bdcc8a2af0a89a677b7a","size":3087668,"data":"","first_seen":"2026-02-04T15:47:45.249744Z","last_seen":"2026-02-04T18:30:34.264164Z","times_seen":2,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-02-04","alert":"Detects file containing Telegram Bot API","trigger":"trackintel.org/assets/index-CfYHhppD.js","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"rectifyq","date":"2024-09-07","description":"Detects file containing Telegram Bot API","rule":"telegram_bot_api","yarahub_author_twitter":"@_rectifyq","yarahub_license":"CC0 1.0","yarahub_reference_md5":"9DA48D34DC999B4E05E0C6716A3B3B83","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"58c9e4fe-d1e9-46ed-913c-dba943ac16d6"}}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca7924109339124364f204129260d7bc","sha1":"fc161d9b7168683ab67de273d0461e9eb8fc3d06","sha256":"dbbf4b1cc06dcf2f1538db3eab9df65b0bb207def89e083f47ca9bfa477fd75d","sha512":"710c2014b58dbec8b1d57b3f14035e11b578ce46f76da213002b3393fd80c5f567a9749a4cb65f21e64e3676b79606bcfab9a5ae86d384ab712a33422317568a","ssdeep":"","tlshash":"9201682f403874075c1620718d462df12d901c973a3ab8e21e7450605a4be3cb667cec","size":726,"data":"","first_seen":"2025-08-19T02:44:28.49947Z","last_seen":"2026-08-07T02:26:45.157543Z","times_seen":138,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"cab41828e5875109fdcf0c46b0c586d1","sha1":"c9a7593dd682236f07bf4029ab960b6233d6e013","sha256":"8df55d85107aaf49f05b8c1d9ba2213f366b2cacb456a21187b7defa9ce70af4","sha512":"bb68625f9f24743ac95baec34fa05656023e6d6b66d3ad289eaa27fb55e353cbecdeb10d1f0d943f6f389abf2d47fd8163bcfffc3fa48846526c69d64dfa67ff","ssdeep":"","tlshash":"a341790b45b86106595321324edd28e05a5654b33a387ce23fec10549f86c3c3afafe6","size":1990,"data":"","first_seen":"2025-08-19T02:44:28.504462Z","last_seen":"2026-08-07T02:26:45.155575Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-08-07T02:26:45.148226Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/thumbmark.esm-CHQ1CHZM.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"151cce0e41d0be86ff130eef8a0d7144","sha1":"e0df102175b8702c1cd4974e005fde72211d8c56","sha256":"e6801cce42ae1743f534b52683772b64339353385868f6ee09a30d3d677b276e","sha512":"115dee9382e26aba6d8fc9c57d9aa7d55b8744db5eed9c3cc2c8cc1b0759609aa8e34c28f9d2c22d3585e7998cf2e86fcb35bbc87ea009a07b6329a5bcb0b958","ssdeep":"384:yL7V+1J/GfH/dH0OKbcUQFjCNjH+Rau+2Ad1k2p0Gyw+TQDa:yXV+r/GfH/dH0L+cuCOw+UDa","tlshash":"e6821bdcb995343a43a73555307f814ba53a7914742f8c00e12ad1967efc98c82bffaa","size":19202,"data":"","first_seen":"2026-02-04T15:47:45.245858Z","last_seen":"2026-02-04T18:30:34.25752Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"c67fe508d0a100174b807fba9c73d514","sha1":"2a9f02dcf3e7adc49ba3b0c03e7ea76dee1b3db3","sha256":"45a0d8a5c1f1ac00c56b30a92aa74e75177dd21aaad3623fc8c168e1075b4e5e","sha512":"450c5122a96bc051b7e846bc6512c3107236b72f8d29eaf9799c1e414b77da1c9a4aa84e8c63d7895a2abd54ef423fab7511d5ab16b12ee8ce97ef3dba3394c8","ssdeep":"","tlshash":"b7319e2f893c75152c1622319d653de08f8519a6397970f22db12064964fc3c37abded","size":1828,"data":"","first_seen":"2025-11-19T22:32:11.255975Z","last_seen":"2026-07-29T20:02:12.464108Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-08-07T02:26:45.148226Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"introduction_type":"Function","is_inline":false,"md5":"ca98953bc552394a507ee79d2ea3906c","sha1":"ce1e37fbfb3b107bf502f697f24c14525a39eaa2","sha256":"e7f4a63581d41a08dae2d2e564f05352550f55bf0e2b65c201c36adb1a06dd00","sha512":"30d690bebd80dd1a607bf122dec03df6fc1b87bd97f24633f6bc8fea57969dc21d24ffc3debf1a99c77241df66f3a3e78b53a3557fe90c327d8f63ae0af10a84","ssdeep":"","tlshash":"0d218f1f847ca401181768b11d9d3ee05d5415e3363978d23dae50b0af8bc2c3bbade9","size":1373,"data":"","first_seen":"2025-08-19T02:44:28.513227Z","last_seen":"2026-08-07T02:26:45.148226Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:54.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25328\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"92f582103b6a5067ba758e2f7a2b3ccf-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-version-id: LMhk.sn82dT8C4wpKvpgRCP_z_kQjpB3\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: S-nTRio0-_vOAal0dTxdBGqfxGlw1U01a3PCKI9mZVyJpEkC60ww6w==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9c9096f6610582ffe0a9cd1c6b1a1ee2\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25328, version 1.0","md5":"d4db658f4dd63bc2d0d84f325a341e29","sha1":"7a67e42dc79b056b46a286a7461028fccbde7e8a","sha256":"353a7fbfb4475f0c31470a7449226006cb64211c71055ca9db860a8acdaa9f68","sha512":"9c3bc25ed9d0e1146ebec313a25bd767e95ff16969b304bf15c811b6175e8ade80f55c38a2b0892374356603934792645501545eb4983e025d65205fb28740b2","ssdeep":"768:naFCZbcnqIsClsf+PUJFlO0NTXLLJZfoiNA:nu6B352h0NNRoQA","tlshash":"b2b2e1cb93922efcccd8c1d24914d71dd00d72561bb2d192e9db9e62a512abc9f3d805","first_seen":"2023-05-03T21:29:57Z","last_seen":"2026-08-07T08:02:54.277713Z","times_seen":4034,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:54.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:57.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:58 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\nx-static-request-id: F9XPS9F99T79V9ZP\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:58 GMT\r\nage: 22491\r\nserver: cloudflare\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c8d7d6432fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533766,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ccb0706dd992816479ecf0a10ddcb00","sha1":"0fe2b22e893cd22a6b80106a6e2c26d6ae02bca8","sha256":"a80fb1c0816a6bfee58f0f5c56389dc38f0e5e64ce8af48d6a3117280b03e99a","sha512":"371f65686b16c00a00ee7e7815956921569fb6858f15008fe574751d181edad52a80f9a29cdba5989e13c8474c043a3619bda420c0cac9230e26624d60ce98ed","ssdeep":"1536:4QHOrsyn19pSh27VRtJ9DIMsM7y1Iuvxv5Aff2Rum0xKKiKXj6eEexLuA:4QurP9U27VJLsz1IuV57uBxKKiKl","tlshash":"d1b40e48ca600d8310a6a359dc7e90d6a424c6578ed93d683bbc85bc4f6d92f25fc6fc","first_seen":"2026-01-30T07:50:08.934429Z","last_seen":"2026-02-04T18:30:34.256086Z","times_seen":11,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:58.329Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25516\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"e706bdd0c3a0dfed5d0aff7ba11b0b84-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-version-id: F_E1vrGrVYpe9DsT1R7lkqIvWO0Pktpz\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Hx3D41AeCuRVxND2JflvYrjtBx2J4fBujOhR9JmTlqg2lQ1xNQlB6g==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 9a62a67ae7853ffc8ba5182514eb9130\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25516, version 1.0","md5":"71a6023c087c936859024eb16ec7a519","sha1":"21633c7ccdba2846eae71554fc2a7cf7a0d90ff2","sha256":"50dca57f0b77918e0fb7dac998c3f5ef6b0c2a29657da97658a04f98ac532fc5","sha512":"f2711bd9fcf5ebfaaf6432ef67ae9c79d6ec844cf79302fb3a9fcfc0cc4725dff193004e8544bac5fcd4423c5655a8707a587366798babd1fae633351bd91340","ssdeep":"384:6uI7ehX/vtPqchzb7E0COoY4OTjRclw5nfU0C6Yr3uLyZn+GG0jOVAo3Udw+K5O:3I7CFdzFtoY42lJs0QYyCoOV53I","tlshash":"b4b2e160b2f85dd1e93e4732e50b12256580d0a984e5ca7ca39cfff6a88f28864d172d","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.301857Z","times_seen":3923,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:58.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14200\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 18:29:58 GMT\r\nage: 16132\r\nx-served-by: cache-fra-etou8220087-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-08-07T08:46:06.82298Z","times_seen":2955,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:41.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25328\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"92f582103b6a5067ba758e2f7a2b3ccf-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-version-id: LMhk.sn82dT8C4wpKvpgRCP_z_kQjpB3\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: S-nTRio0-_vOAal0dTxdBGqfxGlw1U01a3PCKI9mZVyJpEkC60ww6w==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 71d272a2d5c0f1dab5d2c28bfecad469\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25328, version 1.0","md5":"d4db658f4dd63bc2d0d84f325a341e29","sha1":"7a67e42dc79b056b46a286a7461028fccbde7e8a","sha256":"353a7fbfb4475f0c31470a7449226006cb64211c71055ca9db860a8acdaa9f68","sha512":"9c3bc25ed9d0e1146ebec313a25bd767e95ff16969b304bf15c811b6175e8ade80f55c38a2b0892374356603934792645501545eb4983e025d65205fb28740b2","ssdeep":"768:naFCZbcnqIsClsf+PUJFlO0NTXLLJZfoiNA:nu6B352h0NNRoQA","tlshash":"b2b2e1cb93922efcccd8c1d24914d71dd00d72561bb2d192e9db9e62a512abc9f3d805","first_seen":"2023-05-03T21:29:57Z","last_seen":"2026-08-07T08:02:54.277713Z","times_seen":4034,"resource_available":false,"data":null}},"time_used":110,"timings":{"blocked":53,"dns":33,"connect":4,"send":0,"wait":3,"receive":1,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/thumbmark.esm-CHQ1CHZM.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:42.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/thumbmark.esm-CHQ1CHZM.js HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/assets/index-CfYHhppD.js\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:08:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d3-4b02\"\r\nexpires: Thu, 04 Feb 2027 18:29:42 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19202,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16478)","md5":"151cce0e41d0be86ff130eef8a0d7144","sha1":"e0df102175b8702c1cd4974e005fde72211d8c56","sha256":"e6801cce42ae1743f534b52683772b64339353385868f6ee09a30d3d677b276e","sha512":"115dee9382e26aba6d8fc9c57d9aa7d55b8744db5eed9c3cc2c8cc1b0759609aa8e34c28f9d2c22d3585e7998cf2e86fcb35bbc87ea009a07b6329a5bcb0b958","ssdeep":"384:yL7V+1J/GfH/dH0OKbcUQFjCNjH+Rau+2Ad1k2p0Gyw+TQDa:yXV+r/GfH/dH0L+cuCOw+UDa","tlshash":"e6821bdcb995343a43a73555307f814ba53a7914742f8c00e12ad1967efc98c82bffaa","first_seen":"2026-02-04T15:47:45.245858Z","last_seen":"2026-02-04T18:30:34.25752Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:51.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25328\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"92f582103b6a5067ba758e2f7a2b3ccf-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-version-id: LMhk.sn82dT8C4wpKvpgRCP_z_kQjpB3\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: S-nTRio0-_vOAal0dTxdBGqfxGlw1U01a3PCKI9mZVyJpEkC60ww6w==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 0f2c659db735f3fd785f2efaf87ddb2a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25328, version 1.0","md5":"d4db658f4dd63bc2d0d84f325a341e29","sha1":"7a67e42dc79b056b46a286a7461028fccbde7e8a","sha256":"353a7fbfb4475f0c31470a7449226006cb64211c71055ca9db860a8acdaa9f68","sha512":"9c3bc25ed9d0e1146ebec313a25bd767e95ff16969b304bf15c811b6175e8ade80f55c38a2b0892374356603934792645501545eb4983e025d65205fb28740b2","ssdeep":"768:naFCZbcnqIsClsf+PUJFlO0NTXLLJZfoiNA:nu6B352h0NNRoQA","tlshash":"b2b2e1cb93922efcccd8c1d24914d71dd00d72561bb2d192e9db9e62a512abc9f3d805","first_seen":"2023-05-03T21:29:57Z","last_seen":"2026-08-07T08:02:54.277713Z","times_seen":4034,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:52.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"GET /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.860\r\nx-dyn-request-id: 4MgMSPccXIlEziuKG5jnTceTasXvZGzDGoZtPujcQgpqimiRzD\r\nx-dyn-version: WalletKit/4.59.2\r\nx-dyn-device-fingerprint: 71867ef377c6762c25a722c451c95d3d\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:52 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4721-zoQ1v/V8QBgh9ZZYEEkaKINfbso\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\npriority: u=4,i=?0\r\nage: 9\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=8z8OAjZYgRrkzhj2h0yb_k51xdeHhXg8I3zpNGLqoOY-1770229792.125137-1.0.1.1-6h7kPiYKzdNG9k4XE6kaC4e619R069XHSWgiPPYGAJXKQHTx3yezfU8MQ.JeO6m2DHpfXt7vHhILn14O87MQo1qWfYk3zOdMOvz2x.7YHdqYM8Bej6Nap9hhnlAJ9NIX; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:52 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9c8c3c68c9731a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18209,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d6c625eb997851776c56fb1b094c54db","sha1":"ce8435bff57c401821f5965810491a28835f6eca","sha256":"b38dbd0e4416347ae6a74374dabd47db1ee5d45a1c1079d2108536440d6aee4d","sha512":"f7a0d31b7a2ef2ec237bc51fbe6beab117757fa5e7ce034e34cbc2c18d9c22f9ec2a043aeefbfc0ae9f2f7035518881b43cbf7f4f0e202b1c423d9b445b05143","ssdeep":"192:iDAeTzFA4ov19BVg7z+QkVQu5VvW0fgdZy+/B/B/GvuvjOpPHONsfctRSslZUxbK:wTzPQJg72DLYr5BJ/GvuLOprAqbFjy57","tlshash":"d182fc9e6d542cbe5b02d98cc45a270b42264d31b2a738fdc0a5ceb8e1dbdb54725e33","first_seen":"2026-02-04T15:47:45.239181Z","last_seen":"2026-02-04T18:30:34.258239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:59.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:59 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:59 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495832\r\nx-static-request-id: WZPYKE7V3AQM68NV\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c948c5256aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:42.610Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\nage: 16116\r\ndate: Wed, 04 Feb 2026 18:29:42 GMT\r\nx-served-by: cache-fra-etou8220087-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 14200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-08-07T08:46:06.82298Z","times_seen":2955,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":38,"dns":1,"connect":13,"send":0,"wait":14,"receive":2,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:45.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"GET /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.860\r\nx-dyn-request-id: sm_Gvp7QxBbN1osh_Png4SB9Vp5H8ahqipnAdUj1qPvzBo6gMX\r\nx-dyn-version: WalletKit/4.59.2\r\nx-dyn-device-fingerprint: 71867ef377c6762c25a722c451c95d3d\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4721-zoQ1v/V8QBgh9ZZYEEkaKINfbso\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\npriority: u=4,i=?0\r\nage: 2\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=plkj_kSznv8FA_KxpepQClSfu8oJY4q43evymyhu3zk-1770229785.1322067-1.0.1.1-cNLhAa_CIboN5hZQp2t5G3pQQjyQiyJFwR4wzbFcvsiGCXo81pmDn3HDd48tuHu9wUUYiCLBylFfXuJjhNN29KoV4uXTm1qqUKBoU2pGh4L4yxQQLw7Y1NmFR1AsXIG8; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:45 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9c8c3c3d1db81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":18209,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d6c625eb997851776c56fb1b094c54db","sha1":"ce8435bff57c401821f5965810491a28835f6eca","sha256":"b38dbd0e4416347ae6a74374dabd47db1ee5d45a1c1079d2108536440d6aee4d","sha512":"f7a0d31b7a2ef2ec237bc51fbe6beab117757fa5e7ce034e34cbc2c18d9c22f9ec2a043aeefbfc0ae9f2f7035518881b43cbf7f4f0e202b1c423d9b445b05143","ssdeep":"192:iDAeTzFA4ov19BVg7z+QkVQu5VvW0fgdZy+/B/B/GvuvjOpPHONsfctRSslZUxbK:wTzPQJg72DLYr5BJ/GvuLOprAqbFjy57","tlshash":"d182fc9e6d542cbe5b02d98cc45a270b42264d31b2a738fdc0a5ceb8e1dbdb54725e33","first_seen":"2026-02-04T15:47:45.239181Z","last_seen":"2026-02-04T18:30:34.258239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.447Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:48 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14200\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\nage: 16122\r\nx-served-by: cache-fra-etou8220087-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-08-07T08:46:06.82298Z","times_seen":2955,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"35.178.12.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:53.970Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fontshare.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:4C:09:79:67:B2:53:14:4C:98:6F:74:44:FF:48:93:87:A8:C7:74","sha256":"99:F8:8D:DA:9B:7E:5B:44:DC:C9:51:03:79:1F:D2:00:2F:49:3E:78:88:9E:96:B5:29:4A:C6:5A:87:18:DD:30"}}},"request":{"raw":"GET /v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:53 GMT\r\ncontent-type: text/css\r\ncontent-length: 2921\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://api.fontshare.com\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nserver: Cowboy\r\nx-request-id: GJEenlk_IbIjrEYAGZxS\r\nset-cookie: _fontshare_key=SFMyNTY.g3QAAAABbQAAAAhndWVzdF9pZG0AAAAkMzZkZGM4ZjctNWUwNy00ZTE4LWI5NmEtNmZjYTJjNmM5ZTNj.9ftxw87MO2xaxSpFC8viivZzuT6-aWDWn_vaGHuTKDQ; path=/; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":2921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1ca3945e40e5bd0a43307d67651bcfa1","sha1":"13159c03f91ada07bd8a8fb904dbb9bb352e20bd","sha256":"2836981f1ff30a08bd34b31ee907622b9065017bfdc563cf2095e2494658ecac","sha512":"eb673e9d05b7572bcff61f86f4e8278aeae69981895f337a3b30f8726d2247fd1b30b4e67d5757975c4e8934165a96f98596bacb2502c0d24d63b5b6958fd1d8","ssdeep":"","tlshash":"bb51014279e030c654672c0877eb5efcce8e54131145e43e359e8a2caeb7e464399b1e","first_seen":"2025-06-16T01:28:16.375627Z","last_seen":"2026-07-31T06:03:38.051221Z","times_seen":96,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:59.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:59 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 30 Jan 2026 00:46:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:59 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495832\r\nx-static-request-id: WZPH93ASMDZM2AGW\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"3c9a8c0dab13c3e1b04a9c46233ac3dc\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c948c5156aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2072713,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"931919aa8af14ee05977e8d4be136a7e","sha1":"7b036a682cd918e7286a5b11e8fcd8524db35923","sha256":"08fd16e6c98ece3460c7c80acbdedf39d7e4f7f38ca3747fa14f13a946935c9a","sha512":"e49ec43e459c4720f1c5318671ea90b46417add570c1ad8052f291b3abc70c0f5069983b97c8d6cd2d24ccbd54a05e5f4c1c7c5e7f4018c0ac02be2e4359622d","ssdeep":"12288:Ly7gd+eNiQ0x2Z1AgqYHeW+mFLXdddTC6F5fdF02CJNVGlo:9dP4Q0x2Z1AgqYH+mF7ddEgf02CJHT","tlshash":"4625c6ba5d1c6b4e777a4d2ddb12247d2e4770eeb24881dfa9cf72ecc162441e621ca0","first_seen":"2026-01-06T03:24:39.281833Z","last_seen":"2026-02-06T07:11:34.437634Z","times_seen":185,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:42.013Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:42 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T18:29:47.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:47 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Feb 2026 12:08:55 GMT\r\netag: W/\"6a0-649fe6b8bf8af\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e70f690f82bef4a91c3d8b4976fc4f18","sha1":"c82354e482fca8dc74bae7f3acde545e4ba06f8b","sha256":"86d9a2508aa7ae4e87908e22dcaaaf386808d89ed3512894528130f1c12020de","sha512":"19b3e5ea7608c56893542aa6dc3df70f99d0bc362aff6e9abf529107d754e426954b23acaefbba961d4a65e05b580edfdf8d353b3959db3cec98de3a2e93c6bb","ssdeep":"","tlshash":"6d3150434a043eab13ec93145c62b08c887f1d0bd2400c6172ca696b3cd9ed0c7f65b3","first_seen":"2026-02-04T15:47:45.241941Z","last_seen":"2026-02-04T18:30:34.260329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-DDwQ0J0v.css","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:47.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-DDwQ0J0v.css HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:47 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:08:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d2-7477\"\r\nexpires: Thu, 04 Feb 2027 18:29:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29814)","md5":"297ce226eca0f544e0ccbd1de3b1349b","sha1":"219e24ad9d1f0e0ad3fb9e0d77b8b5085129a976","sha256":"b4b6f7bc6ac2325e76fcbb07149a6ca4111b9a4f325b230ae1e80ea8c281e5f4","sha512":"3671a338304b47be543f138d59eb3bcc20baf409f2b872dfb1e8fd0d5907737262e370795def8903d57710296fbfde5b9c4fc2b38a34715b2a05c65b13db6926","ssdeep":"384:b0A0PgThs3XzR5wmNKhTZ/y/m/HZNUrzCTP:YA0Pehs3XkZNUrzCj","tlshash":"b8d2562e6b45003b7da740f5e5d5eb8df21ab0c2df2a5be9e99252209bc63f70c57204","first_seen":"2026-02-04T15:47:45.232985Z","last_seen":"2026-02-04T18:30:34.260965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":193,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.929Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:48 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495822\r\nx-static-request-id: WZPYKE7V3AQM68NV\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c54ca8156aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T18:29:50.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:50 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Feb 2026 12:08:55 GMT\r\netag: W/\"6a0-649fe6b8bf8af\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e70f690f82bef4a91c3d8b4976fc4f18","sha1":"c82354e482fca8dc74bae7f3acde545e4ba06f8b","sha256":"86d9a2508aa7ae4e87908e22dcaaaf386808d89ed3512894528130f1c12020de","sha512":"19b3e5ea7608c56893542aa6dc3df70f99d0bc362aff6e9abf529107d754e426954b23acaefbba961d4a65e05b580edfdf8d353b3959db3cec98de3a2e93c6bb","ssdeep":"","tlshash":"6d3150434a043eab13ec93145c62b08c887f1d0bd2400c6172ca696b3cd9ed0c7f65b3","first_seen":"2026-02-04T15:47:45.241941Z","last_seen":"2026-02-04T18:30:34.260329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:40.885Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-CfYHhppD.js HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:40 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:08:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d4-2f1d34\"\r\nexpires: Thu, 04 Feb 2027 18:29:40 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3087668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37675)","md5":"4baf50909b956407c07783fe198c548e","sha1":"0683137166d300df59d13e6a78b3affbd5783925","sha256":"471d64da4d72928590c1b063b91c055570158d8ed778f91a8c7d4cd1ef25bb0d","sha512":"ce89a0474b3a81fcc99a84e8e094002fb0da2f06bde5c27b0c2820fe75448f2ac69ed381f6dc7e31c8658fd47579637f70d76594300087b2d9dc8ee7db96776b","ssdeep":"12288:S8LlGK5m8gKqsiViavWuYSntK9AnG/ZTzxILZzHOqovJ0LSuS3x/xPe2+:SGs/KPILZzVovJ0euIx/xPT+","tlshash":"ce254dc4b259711127a363a4e4bf122ae338aa16bc1d0470f9b9cc8f3571e499177f7a","first_seen":"2026-02-04T15:47:45.231898Z","last_seen":"2026-02-04T18:30:34.261856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:45.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 30 Jan 2026 00:46:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:45 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495819\r\nx-static-request-id: WZPH93ASMDZM2AGW\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"3c9a8c0dab13c3e1b04a9c46233ac3dc\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c3fbea156aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2072713,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"931919aa8af14ee05977e8d4be136a7e","sha1":"7b036a682cd918e7286a5b11e8fcd8524db35923","sha256":"08fd16e6c98ece3460c7c80acbdedf39d7e4f7f38ca3747fa14f13a946935c9a","sha512":"e49ec43e459c4720f1c5318671ea90b46417add570c1ad8052f291b3abc70c0f5069983b97c8d6cd2d24ccbd54a05e5f4c1c7c5e7f4018c0ac02be2e4359622d","ssdeep":"12288:Ly7gd+eNiQ0x2Z1AgqYHeW+mFLXdddTC6F5fdF02CJNVGlo:9dP4Q0x2Z1AgqYH+mF7ddEgf02CJHT","tlshash":"4625c6ba5d1c6b4e777a4d2ddb12247d2e4770eeb24881dfa9cf72ecc162441e621ca0","first_seen":"2026-01-06T03:24:39.281833Z","last_seen":"2026-02-06T07:11:34.437634Z","times_seen":185,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:51.555Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"79b58359f5110a8678b4b6191e78fc1e-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-version-id: wWiNu9TwtBGLADIvtnVxgpwydW4xY0Bk\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jhsatPw6dewyb6ZXxbb5TFrXdmaoU4FNEQleQxxOiIFoONzzpyvCZQ==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:33:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a8581f3efe0b711908c854f6b47c1ba6\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25596, version 1.0","md5":"cd790237ed63c56b30aa8fb9d99a7563","sha1":"7f6de341cbc6058b8376bd8b26568d35b1d38fcf","sha256":"af02a72246f53ad49c44a591921edbd39ec8258a03d8cc2e0532aa1e497e85b4","sha512":"7970e7a0141d8e4c2268251afc7a8b0521f6debf741e48a99026dafd0d1272c12dd6d59a7ec67ba06914a6a57701854b066efaa9859323cd9857aadb1ce77fa8","ssdeep":"768:uXiaHuUbyuVyRM87QSs2TKMj3KwG/ilRvr3S:Mi6uowM87LsAlc2Rji","tlshash":"5fb2e163408105aacc93ba3eb26c718d47c079e2de524ccf5465f59ea31e437ee0aac3","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.289033Z","times_seen":3428,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:44.778Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:44 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\nx-static-request-id: F9XPS9F99T79V9ZP\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:44 GMT\r\nage: 22478\r\nserver: cloudflare\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c3ad80c32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533766,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ccb0706dd992816479ecf0a10ddcb00","sha1":"0fe2b22e893cd22a6b80106a6e2c26d6ae02bca8","sha256":"a80fb1c0816a6bfee58f0f5c56389dc38f0e5e64ce8af48d6a3117280b03e99a","sha512":"371f65686b16c00a00ee7e7815956921569fb6858f15008fe574751d181edad52a80f9a29cdba5989e13c8474c043a3619bda420c0cac9230e26624d60ce98ed","ssdeep":"1536:4QHOrsyn19pSh27VRtJ9DIMsM7y1Iuvxv5Aff2Rum0xKKiKXj6eEexLuA:4QurP9U27VJLsz1IuV57uBxKKiKl","tlshash":"d1b40e48ca600d8310a6a359dc7e90d6a424c6578ed93d683bbc85bc4f6d92f25fc6fc","first_seen":"2026-01-30T07:50:08.934429Z","last_seen":"2026-02-04T18:30:34.256086Z","times_seen":11,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:48 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:51.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:51 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:52.158Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:52 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 30 Jan 2026 00:46:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:52 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495825\r\nx-static-request-id: WZPH93ASMDZM2AGW\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"3c9a8c0dab13c3e1b04a9c46233ac3dc\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c68fac456aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2072713,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"931919aa8af14ee05977e8d4be136a7e","sha1":"7b036a682cd918e7286a5b11e8fcd8524db35923","sha256":"08fd16e6c98ece3460c7c80acbdedf39d7e4f7f38ca3747fa14f13a946935c9a","sha512":"e49ec43e459c4720f1c5318671ea90b46417add570c1ad8052f291b3abc70c0f5069983b97c8d6cd2d24ccbd54a05e5f4c1c7c5e7f4018c0ac02be2e4359622d","ssdeep":"12288:Ly7gd+eNiQ0x2Z1AgqYHeW+mFLXdddTC6F5fdF02CJNVGlo:9dP4Q0x2Z1AgqYH+mF7ddEgf02CJHT","tlshash":"4625c6ba5d1c6b4e777a4d2ddb12247d2e4770eeb24881dfa9cf72ecc162441e621ca0","first_seen":"2026-01-06T03:24:39.281833Z","last_seen":"2026-02-06T07:11:34.437634Z","times_seen":185,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T18:29:53.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:53 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Feb 2026 12:08:55 GMT\r\netag: W/\"6a0-649fe6b8bf8af\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e70f690f82bef4a91c3d8b4976fc4f18","sha1":"c82354e482fca8dc74bae7f3acde545e4ba06f8b","sha256":"86d9a2508aa7ae4e87908e22dcaaaf386808d89ed3512894528130f1c12020de","sha512":"19b3e5ea7608c56893542aa6dc3df70f99d0bc362aff6e9abf529107d754e426954b23acaefbba961d4a65e05b580edfdf8d353b3959db3cec98de3a2e93c6bb","ssdeep":"","tlshash":"6d3150434a043eab13ec93145c62b08c887f1d0bd2400c6172ca696b3cd9ed0c7f65b3","first_seen":"2026-02-04T15:47:45.241941Z","last_seen":"2026-02-04T18:30:34.260329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:54.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:54 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\nx-static-request-id: F9XPS9F99T79V9ZP\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:54 GMT\r\nage: 22488\r\nserver: cloudflare\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c778d2f32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533766,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ccb0706dd992816479ecf0a10ddcb00","sha1":"0fe2b22e893cd22a6b80106a6e2c26d6ae02bca8","sha256":"a80fb1c0816a6bfee58f0f5c56389dc38f0e5e64ce8af48d6a3117280b03e99a","sha512":"371f65686b16c00a00ee7e7815956921569fb6858f15008fe574751d181edad52a80f9a29cdba5989e13c8474c043a3619bda420c0cac9230e26624d60ce98ed","ssdeep":"1536:4QHOrsyn19pSh27VRtJ9DIMsM7y1Iuvxv5Aff2Rum0xKKiKXj6eEexLuA:4QurP9U27VJLsz1IuV57uBxKKiKl","tlshash":"d1b40e48ca600d8310a6a359dc7e90d6a424c6578ed93d683bbc85bc4f6d92f25fc6fc","first_seen":"2026-01-30T07:50:08.934429Z","last_seen":"2026-02-04T18:30:34.256086Z","times_seen":11,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T18:29:57.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:57 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Feb 2026 12:08:55 GMT\r\netag: W/\"6a0-649fe6b8bf8af\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e70f690f82bef4a91c3d8b4976fc4f18","sha1":"c82354e482fca8dc74bae7f3acde545e4ba06f8b","sha256":"86d9a2508aa7ae4e87908e22dcaaaf386808d89ed3512894528130f1c12020de","sha512":"19b3e5ea7608c56893542aa6dc3df70f99d0bc362aff6e9abf529107d754e426954b23acaefbba961d4a65e05b580edfdf8d353b3959db3cec98de3a2e93c6bb","ssdeep":"","tlshash":"6d3150434a043eab13ec93145c62b08c887f1d0bd2400c6172ca696b3cd9ed0c7f65b3","first_seen":"2026-02-04T15:47:45.241941Z","last_seen":"2026-02-04T18:30:34.260329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:58.293Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 04 Feb 2026 18:29:58 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=3uZFwgbPtm7PwIgr6lG6fXXq2ovM7H8i.WQfGcemSR0-1770229798.2975566-1.0.1.1-BfPmK0.l3NFoSZa_DjTuPiOUBme2XMBRbV.ZDAjOo2dSMqE_P4odPGRbdsnKN7WWLi3aUWdIWcwwu..Yl6rO2o_3VO_GZCJ4y5ifh2QtVX_8enoQrldrydMReZWZYbkI; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:58 GMT\r\nx-frame-options: DENY\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c8c3c8f5f8f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":139,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:41.753Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 04 Feb 2026 18:29:42 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=NNTMj_zpAkF7U0Cr680nHJ4xZM8fKnHCfGSL9vPPmPg-1770229781.8069105-1.0.1.1-_5mISMmwH8dls33Qrfclg52ceV7ph01M7CO88tHVUPQNmEli_eEVtTMZuypc2qAfKpqgj_ZWvYfREfOiwY_gfQA6FOaSsHwCKsy2tuE270_4oOAn43W0x7VnSP6fLA5O; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:42 GMT\r\nserver: cloudflare\r\ncf-ray: 9c8c3c284b2eb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":360,"timings":{"blocked":52,"dns":36,"connect":1,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"35.178.12.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:44.264Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fontshare.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:4C:09:79:67:B2:53:14:4C:98:6F:74:44:FF:48:93:87:A8:C7:74","sha256":"99:F8:8D:DA:9B:7E:5B:44:DC:C9:51:03:79:1F:D2:00:2F:49:3E:78:88:9E:96:B5:29:4A:C6:5A:87:18:DD:30"}}},"request":{"raw":"GET /v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:44 GMT\r\ncontent-type: text/css\r\ncontent-length: 2921\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://api.fontshare.com\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nserver: Cowboy\r\nx-request-id: GJEenBbWJfVX1mAAGPLR\r\nset-cookie: _fontshare_key=SFMyNTY.g3QAAAABbQAAAAhndWVzdF9pZG0AAAAkOTc4ZjJhZjQtNTA4OC00NzRjLThkMmItYmI0OGQzYTYyMDI1.AHUUMStbQABNzGwJvMgtFHwfGoOz73DyXrakhjdmcmc; path=/; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":2921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1ca3945e40e5bd0a43307d67651bcfa1","sha1":"13159c03f91ada07bd8a8fb904dbb9bb352e20bd","sha256":"2836981f1ff30a08bd34b31ee907622b9065017bfdc563cf2095e2494658ecac","sha512":"eb673e9d05b7572bcff61f86f4e8278aeae69981895f337a3b30f8726d2247fd1b30b4e67d5757975c4e8934165a96f98596bacb2502c0d24d63b5b6958fd1d8","ssdeep":"","tlshash":"bb51014279e030c654672c0877eb5efcce8e54131145e43e359e8a2caeb7e464399b1e","first_seen":"2025-06-16T01:28:16.375627Z","last_seen":"2026-07-31T06:03:38.051221Z","times_seen":96,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:45.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:45 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495819\r\nx-static-request-id: WZPYKE7V3AQM68NV\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c3fbea456aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25328\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"92f582103b6a5067ba758e2f7a2b3ccf-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-version-id: LMhk.sn82dT8C4wpKvpgRCP_z_kQjpB3\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: S-nTRio0-_vOAal0dTxdBGqfxGlw1U01a3PCKI9mZVyJpEkC60ww6w==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: e7156f32ecdc0ea19d6d442f58fc4696\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25328, version 1.0","md5":"d4db658f4dd63bc2d0d84f325a341e29","sha1":"7a67e42dc79b056b46a286a7461028fccbde7e8a","sha256":"353a7fbfb4475f0c31470a7449226006cb64211c71055ca9db860a8acdaa9f68","sha512":"9c3bc25ed9d0e1146ebec313a25bd767e95ff16969b304bf15c811b6175e8ade80f55c38a2b0892374356603934792645501545eb4983e025d65205fb28740b2","ssdeep":"768:naFCZbcnqIsClsf+PUJFlO0NTXLLJZfoiNA:nu6B352h0NNRoQA","tlshash":"b2b2e1cb93922efcccd8c1d24914d71dd00d72561bb2d192e9db9e62a512abc9f3d805","first_seen":"2023-05-03T21:29:57Z","last_seen":"2026-08-07T08:02:54.277713Z","times_seen":4034,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"35.178.12.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:57.345Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fontshare.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:4C:09:79:67:B2:53:14:4C:98:6F:74:44:FF:48:93:87:A8:C7:74","sha256":"99:F8:8D:DA:9B:7E:5B:44:DC:C9:51:03:79:1F:D2:00:2F:49:3E:78:88:9E:96:B5:29:4A:C6:5A:87:18:DD:30"}}},"request":{"raw":"GET /v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:57 GMT\r\ncontent-type: text/css\r\ncontent-length: 2921\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://api.fontshare.com\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nserver: Cowboy\r\nx-request-id: GJEenyJH9skj9yQAGazC\r\nset-cookie: _fontshare_key=SFMyNTY.g3QAAAABbQAAAAhndWVzdF9pZG0AAAAkMDI0NDQ1YWUtOWM3YS00ZTMyLWI5NzctOGJkMTRmZTQ4MDk4.lskcI7d_4Hmeg5FZtsyJLlpqZahJ6P4gUrGSX1NviCE; path=/; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]},{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]}],"data":{"size":2921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1ca3945e40e5bd0a43307d67651bcfa1","sha1":"13159c03f91ada07bd8a8fb904dbb9bb352e20bd","sha256":"2836981f1ff30a08bd34b31ee907622b9065017bfdc563cf2095e2494658ecac","sha512":"eb673e9d05b7572bcff61f86f4e8278aeae69981895f337a3b30f8726d2247fd1b30b4e67d5757975c4e8934165a96f98596bacb2502c0d24d63b5b6958fd1d8","ssdeep":"","tlshash":"bb51014279e030c654672c0877eb5efcce8e54131145e43e359e8a2caeb7e464399b1e","first_seen":"2025-06-16T01:28:16.375627Z","last_seen":"2026-07-31T06:03:38.051221Z","times_seen":96,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:58.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"GET /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.860\r\nx-dyn-request-id: 4_RlWlQ_fzGOcL1T61YKU1nEDI-86aPHjOLytBXF_FYv6xeFLo\r\nx-dyn-version: WalletKit/4.59.2\r\nx-dyn-device-fingerprint: 71867ef377c6762c25a722c451c95d3d\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:58 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4721-zoQ1v/V8QBgh9ZZYEEkaKINfbso\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\npriority: u=4,i=?0\r\nage: 16\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=xuOY.7N1FN_5I2lIK93AEMSJ4i3o.Qi9jPFoDmWbZ40-1770229798.465662-1.0.1.1-VynWrmP20EJ0DOQTT9rvMXYqhXNvA9gNOMUjTpmHgWy2SlkUOEwsXdq4VMygoMzktcUWED6X1X_xOsh4vF35KaFyi.hZiMj8QnWDCjCzUPcwpXHsWu_l7Y7qT7ddL2xx; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:58 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9c8c3c906acf1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18209,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d6c625eb997851776c56fb1b094c54db","sha1":"ce8435bff57c401821f5965810491a28835f6eca","sha256":"b38dbd0e4416347ae6a74374dabd47db1ee5d45a1c1079d2108536440d6aee4d","sha512":"f7a0d31b7a2ef2ec237bc51fbe6beab117757fa5e7ce034e34cbc2c18d9c22f9ec2a043aeefbfc0ae9f2f7035518881b43cbf7f4f0e202b1c423d9b445b05143","ssdeep":"192:iDAeTzFA4ov19BVg7z+QkVQu5VvW0fgdZy+/B/B/GvuvjOpPHONsfctRSslZUxbK:wTzPQJg72DLYr5BJ/GvuLOprAqbFjy57","tlshash":"d182fc9e6d542cbe5b02d98cc45a270b42264d31b2a738fdc0a5ceb8e1dbdb54725e33","first_seen":"2026-02-04T15:47:45.239181Z","last_seen":"2026-02-04T18:30:34.258239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:58.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:58 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T18:29:40.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:40 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Feb 2026 12:08:55 GMT\r\netag: W/\"6a0-649fe6b8bf8af\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e70f690f82bef4a91c3d8b4976fc4f18","sha1":"c82354e482fca8dc74bae7f3acde545e4ba06f8b","sha256":"86d9a2508aa7ae4e87908e22dcaaaf386808d89ed3512894528130f1c12020de","sha512":"19b3e5ea7608c56893542aa6dc3df70f99d0bc362aff6e9abf529107d754e426954b23acaefbba961d4a65e05b580edfdf8d353b3959db3cec98de3a2e93c6bb","ssdeep":"","tlshash":"6d3150434a043eab13ec93145c62b08c887f1d0bd2400c6172ca696b3cd9ed0c7f65b3","first_seen":"2026-02-04T15:47:45.241941Z","last_seen":"2026-02-04T18:30:34.260329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":87,"dns":1,"connect":25,"send":0,"wait":25,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:41.790Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"79b58359f5110a8678b4b6191e78fc1e-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-version-id: wWiNu9TwtBGLADIvtnVxgpwydW4xY0Bk\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jhsatPw6dewyb6ZXxbb5TFrXdmaoU4FNEQleQxxOiIFoONzzpyvCZQ==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:33:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 3e4de4b30d174ee1c7d30717715a4072\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25596, version 1.0","md5":"cd790237ed63c56b30aa8fb9d99a7563","sha1":"7f6de341cbc6058b8376bd8b26568d35b1d38fcf","sha256":"af02a72246f53ad49c44a591921edbd39ec8258a03d8cc2e0532aa1e497e85b4","sha512":"7970e7a0141d8e4c2268251afc7a8b0521f6debf741e48a99026dafd0d1272c12dd6d59a7ec67ba06914a6a57701854b066efaa9859323cd9857aadb1ce77fa8","ssdeep":"768:uXiaHuUbyuVyRM87QSs2TKMj3KwG/ilRvr3S:Mi6uowM87LsAlc2Rji","tlshash":"5fb2e163408105aacc93ba3eb26c718d47c079e2de524ccf5465f59ea31e437ee0aac3","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.289033Z","times_seen":3428,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":47,"dns":28,"connect":4,"send":0,"wait":4,"receive":1,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:42.220Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"POST /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nContent-Type: application/json\r\nx-dyn-request-id: Y38XhKMH91Sgcf57iqbllbh3R0aTSpUivoTwkdLwHXdXqjWjVI\r\nx-dyn-version: WalletKit/4.59.2\r\nx-dyn-api-version: API/0.0.860\r\nx-dyn-is-global-wallet-popup: false\r\nContent-Length: 339\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":339,"data":"{\"dynamicContextProps\":{\"settings\":{\"environmentId\":\"d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae\",\"walletConnectors\":[\"LQe\"],\"initialAuthenticationMode\":\"connect-only\",\"displaySiweStatement\":false,\"customPrivacyPolicy\":false,\"customTermsOfServices\":false,\"policiesConsentInnerComponent\":false}},\"frameworkSettings\":{\"react\":{\"version\":\"18.3.1\"}}}"}},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 04 Feb 2026 18:29:42 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=EyW1e54yC5hmQ.7188Sq6bObF9zfrlhd9pzgEdKfsQQ-1770229782.221903-1.0.1.1-FZ3WkE_26ouAHcXXvHGwwT1ICPaaOYdPV7gD9oTiE6LwmQ2g6F9ZuB.hlJD6prHxel.f8gV9kqNHRLHAXruplxJl.Epkh6dqRhEzLe8yxmeFOV4ofRVlC806b1oqgO2Z; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:42 GMT\r\nx-frame-options: DENY\r\nreport-to: {\"group\":\"cf-csp-endpoint\",\"max_age\":86400,\"endpoints\":[{\"url\":\"https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=AAJBjsy3CLm64zJzaF89dvXAiaU9QHr0E4MjpxriaXU-1770229782.221903-1.0.1.1-03JNaTQ0qlX33sIhxRuOYBOFtabzN4pVqlyUJfac15EQdkQG80w.Gbd6WMyW1C3hdYF6LWP4TcrxFo9HFdrupAy69TDnVHaIA4PM8s7vI6VPfxclIUyXkyTD_qLR9D99HBOhL42gyCKhnZNTrGlnMoK3iGwfRC8hJ6NvvmglAmC3lfXh_P8s6NURrcC3F9st\"}]}\r\ncontent-security-policy-report-only: script-src 'none'; connect-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=AAJBjsy3CLm64zJzaF89dvXAiaU9QHr0E4MjpxriaXU-1770229782.221903-1.0.1.1-03JNaTQ0qlX33sIhxRuOYBOFtabzN4pVqlyUJfac15EQdkQG80w.Gbd6WMyW1C3hdYF6LWP4TcrxFo9HFdrupAy69TDnVHaIA4PM8s7vI6VPfxclIUyXkyTD_qLR9D99HBOhL42gyCKhnZNTrGlnMoK3iGwfRC8hJ6NvvmglAmC3lfXh_P8s6NURrcC3F9st; report-to cf-csp-endpoint\r\nserver: cloudflare\r\ncf-ray: 9c8c3c2aeb511a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":1,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:43.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 30 Jan 2026 00:46:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:43 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495816\r\nx-static-request-id: WZPH93ASMDZM2AGW\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"3c9a8c0dab13c3e1b04a9c46233ac3dc\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c316b4b56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2072713,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"931919aa8af14ee05977e8d4be136a7e","sha1":"7b036a682cd918e7286a5b11e8fcd8524db35923","sha256":"08fd16e6c98ece3460c7c80acbdedf39d7e4f7f38ca3747fa14f13a946935c9a","sha512":"e49ec43e459c4720f1c5318671ea90b46417add570c1ad8052f291b3abc70c0f5069983b97c8d6cd2d24ccbd54a05e5f4c1c7c5e7f4018c0ac02be2e4359622d","ssdeep":"12288:Ly7gd+eNiQ0x2Z1AgqYHeW+mFLXdddTC6F5fdF02CJNVGlo:9dP4Q0x2Z1AgqYH+mF7ddEgf02CJHT","tlshash":"4625c6ba5d1c6b4e777a4d2ddb12247d2e4770eeb24881dfa9cf72ecc162441e621ca0","first_seen":"2026-01-06T03:24:39.281833Z","last_seen":"2026-02-06T07:11:34.437634Z","times_seen":185,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:45.020Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25328\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"92f582103b6a5067ba758e2f7a2b3ccf-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-version-id: LMhk.sn82dT8C4wpKvpgRCP_z_kQjpB3\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: S-nTRio0-_vOAal0dTxdBGqfxGlw1U01a3PCKI9mZVyJpEkC60ww6w==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 49c1f5138dfb8010c2c55a07699d89de\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25328, version 1.0","md5":"d4db658f4dd63bc2d0d84f325a341e29","sha1":"7a67e42dc79b056b46a286a7461028fccbde7e8a","sha256":"353a7fbfb4475f0c31470a7449226006cb64211c71055ca9db860a8acdaa9f68","sha512":"9c3bc25ed9d0e1146ebec313a25bd767e95ff16969b304bf15c811b6175e8ade80f55c38a2b0892374356603934792645501545eb4983e025d65205fb28740b2","ssdeep":"768:naFCZbcnqIsClsf+PUJFlO0NTXLLJZfoiNA:nu6B352h0NNRoQA","tlshash":"b2b2e1cb93922efcccd8c1d24914d71dd00d72561bb2d192e9db9e62a512abc9f3d805","first_seen":"2023-05-03T21:29:57Z","last_seen":"2026-08-07T08:02:54.277713Z","times_seen":4034,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:45.027Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25516\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"e706bdd0c3a0dfed5d0aff7ba11b0b84-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-version-id: F_E1vrGrVYpe9DsT1R7lkqIvWO0Pktpz\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Hx3D41AeCuRVxND2JflvYrjtBx2J4fBujOhR9JmTlqg2lQ1xNQlB6g==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 5d70f466a83e195abb8e62eef3e33906\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":25516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25516, version 1.0","md5":"71a6023c087c936859024eb16ec7a519","sha1":"21633c7ccdba2846eae71554fc2a7cf7a0d90ff2","sha256":"50dca57f0b77918e0fb7dac998c3f5ef6b0c2a29657da97658a04f98ac532fc5","sha512":"f2711bd9fcf5ebfaaf6432ef67ae9c79d6ec844cf79302fb3a9fcfc0cc4725dff193004e8544bac5fcd4423c5655a8707a587366798babd1fae633351bd91340","ssdeep":"384:6uI7ehX/vtPqchzb7E0COoY4OTjRclw5nfU0C6Yr3uLyZn+GG0jOVAo3Udw+K5O:3I7CFdzFtoY42lJs0QYyCoOV53I","tlshash":"b4b2e160b2f85dd1e93e4732e50b12256580d0a984e5ca7ca39cfff6a88f28864d172d","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.301857Z","times_seen":3923,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:45.147Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:45 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.288Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=SivXKG9V5dhcL_QUIq5d9I6YPu1dWZghOTMzyuE_7d0-1770229788.2912269-1.0.1.1-i3zMo2ZerR_6pZw7U_noynzlTlDn6cvVicu9cvoesprmN78Kl2_V1X8oyIEJBqQhFzsXLLU1s3GWwJYXou9cxJHYzOPSbhc8JAt_XReNsuEh1H4Vq3KZp9RIpeSAcYkV; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:48 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9c8c3c50d93b1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":132,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:47.560Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-CfYHhppD.js HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:47 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:08:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d4-2f1d34\"\r\nexpires: Thu, 04 Feb 2027 18:29:47 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3087668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37675)","md5":"4baf50909b956407c07783fe198c548e","sha1":"0683137166d300df59d13e6a78b3affbd5783925","sha256":"471d64da4d72928590c1b063b91c055570158d8ed778f91a8c7d4cd1ef25bb0d","sha512":"ce89a0474b3a81fcc99a84e8e094002fb0da2f06bde5c27b0c2820fe75448f2ac69ed381f6dc7e31c8658fd47579637f70d76594300087b2d9dc8ee7db96776b","ssdeep":"12288:S8LlGK5m8gKqsiViavWuYSntK9AnG/ZTzxILZzHOqovJ0LSuS3x/xPe2+:SGs/KPILZzVovJ0euIx/xPT+","tlshash":"ce254dc4b259711127a363a4e4bf122ae338aa16bc1d0470f9b9cc8f3571e499177f7a","first_seen":"2026-02-04T15:47:45.231898Z","last_seen":"2026-02-04T18:30:34.261856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:51.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:51 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25516\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"e706bdd0c3a0dfed5d0aff7ba11b0b84-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-version-id: F_E1vrGrVYpe9DsT1R7lkqIvWO0Pktpz\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Hx3D41AeCuRVxND2JflvYrjtBx2J4fBujOhR9JmTlqg2lQ1xNQlB6g==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: b41f208f9724edd04a88dd333c8592e4\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25516, version 1.0","md5":"71a6023c087c936859024eb16ec7a519","sha1":"21633c7ccdba2846eae71554fc2a7cf7a0d90ff2","sha256":"50dca57f0b77918e0fb7dac998c3f5ef6b0c2a29657da97658a04f98ac532fc5","sha512":"f2711bd9fcf5ebfaaf6432ef67ae9c79d6ec844cf79302fb3a9fcfc0cc4725dff193004e8544bac5fcd4423c5655a8707a587366798babd1fae633351bd91340","ssdeep":"384:6uI7ehX/vtPqchzb7E0COoY4OTjRclw5nfU0C6Yr3uLyZn+GG0jOVAo3Udw+K5O:3I7CFdzFtoY42lJs0QYyCoOV53I","tlshash":"b4b2e160b2f85dd1e93e4732e50b12256580d0a984e5ca7ca39cfff6a88f28864d172d","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.301857Z","times_seen":3923,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:55.496Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:55 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:55 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495829\r\nx-static-request-id: WZPYKE7V3AQM68NV\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c7dded256aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-DDwQ0J0v.css","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:57.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-DDwQ0J0v.css HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:57 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:08:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d2-7477\"\r\nexpires: Thu, 04 Feb 2027 18:29:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29814)","md5":"297ce226eca0f544e0ccbd1de3b1349b","sha1":"219e24ad9d1f0e0ad3fb9e0d77b8b5085129a976","sha256":"b4b6f7bc6ac2325e76fcbb07149a6ca4111b9a4f325b230ae1e80ea8c281e5f4","sha512":"3671a338304b47be543f138d59eb3bcc20baf409f2b872dfb1e8fd0d5907737262e370795def8903d57710296fbfde5b9c4fc2b38a34715b2a05c65b13db6926","ssdeep":"384:b0A0PgThs3XzR5wmNKhTZ/y/m/HZNUrzCTP:YA0Pehs3XkZNUrzCj","tlshash":"b8d2562e6b45003b7da740f5e5d5eb8df21ab0c2df2a5be9e99252209bc63f70c57204","first_seen":"2026-02-04T15:47:45.232985Z","last_seen":"2026-02-04T18:30:34.260965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:58.327Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"79b58359f5110a8678b4b6191e78fc1e-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-version-id: wWiNu9TwtBGLADIvtnVxgpwydW4xY0Bk\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jhsatPw6dewyb6ZXxbb5TFrXdmaoU4FNEQleQxxOiIFoONzzpyvCZQ==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:33:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: c7b712a1b473469759575f4337795da8\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25596, version 1.0","md5":"cd790237ed63c56b30aa8fb9d99a7563","sha1":"7f6de341cbc6058b8376bd8b26568d35b1d38fcf","sha256":"af02a72246f53ad49c44a591921edbd39ec8258a03d8cc2e0532aa1e497e85b4","sha512":"7970e7a0141d8e4c2268251afc7a8b0521f6debf741e48a99026dafd0d1272c12dd6d59a7ec67ba06914a6a57701854b066efaa9859323cd9857aadb1ce77fa8","ssdeep":"768:uXiaHuUbyuVyRM87QSs2TKMj3KwG/ilRvr3S:Mi6uowM87LsAlc2Rji","tlshash":"5fb2e163408105aacc93ba3eb26c718d47c079e2de524ccf5465f59ea31e437ee0aac3","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.289033Z","times_seen":3428,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:58.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:58 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:58 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-DDwQ0J0v.css","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:40.886Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-DDwQ0J0v.css HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:40 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:08:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d2-7477\"\r\nexpires: Thu, 04 Feb 2027 18:29:40 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29814)","md5":"297ce226eca0f544e0ccbd1de3b1349b","sha1":"219e24ad9d1f0e0ad3fb9e0d77b8b5085129a976","sha256":"b4b6f7bc6ac2325e76fcbb07149a6ca4111b9a4f325b230ae1e80ea8c281e5f4","sha512":"3671a338304b47be543f138d59eb3bcc20baf409f2b872dfb1e8fd0d5907737262e370795def8903d57710296fbfde5b9c4fc2b38a34715b2a05c65b13db6926","ssdeep":"384:b0A0PgThs3XzR5wmNKhTZ/y/m/HZNUrzCTP:YA0Pehs3XkZNUrzCj","tlshash":"b8d2562e6b45003b7da740f5e5d5eb8df21ab0c2df2a5be9e99252209bc63f70c57204","first_seen":"2026-02-04T15:47:45.232985Z","last_seen":"2026-02-04T18:30:34.260965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"35.178.12.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:47.558Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fontshare.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:4C:09:79:67:B2:53:14:4C:98:6F:74:44:FF:48:93:87:A8:C7:74","sha256":"99:F8:8D:DA:9B:7E:5B:44:DC:C9:51:03:79:1F:D2:00:2F:49:3E:78:88:9E:96:B5:29:4A:C6:5A:87:18:DD:30"}}},"request":{"raw":"GET /v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 2921\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://api.fontshare.com\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nserver: Cowboy\r\nx-request-id: GJEenNsDSgK4hsAAGQWx\r\nset-cookie: _fontshare_key=SFMyNTY.g3QAAAABbQAAAAhndWVzdF9pZG0AAAAkZDk1NTA4ZTctOTBkNS00MDFjLTgwMGQtYzc4NTU1M2Q0MmEx.ahFJ3yVI5E-Utz5o4PMl49gZ1IbDF40YMviORpKfW-s; path=/; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":2921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1ca3945e40e5bd0a43307d67651bcfa1","sha1":"13159c03f91ada07bd8a8fb904dbb9bb352e20bd","sha256":"2836981f1ff30a08bd34b31ee907622b9065017bfdc563cf2095e2494658ecac","sha512":"eb673e9d05b7572bcff61f86f4e8278aeae69981895f337a3b30f8726d2247fd1b30b4e67d5757975c4e8934165a96f98596bacb2502c0d24d63b5b6958fd1d8","ssdeep":"","tlshash":"bb51014279e030c654672c0877eb5efcce8e54131145e43e359e8a2caeb7e464399b1e","first_seen":"2025-06-16T01:28:16.375627Z","last_seen":"2026-07-31T06:03:38.051221Z","times_seen":96,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:54.920Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:54 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"35.178.12.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:50.748Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fontshare.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:4C:09:79:67:B2:53:14:4C:98:6F:74:44:FF:48:93:87:A8:C7:74","sha256":"99:F8:8D:DA:9B:7E:5B:44:DC:C9:51:03:79:1F:D2:00:2F:49:3E:78:88:9E:96:B5:29:4A:C6:5A:87:18:DD:30"}}},"request":{"raw":"GET /v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:50 GMT\r\ncontent-type: text/css\r\ncontent-length: 2921\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://api.fontshare.com\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nserver: Cowboy\r\nx-request-id: GJEenZfoDyCumRcAGYpC\r\nset-cookie: _fontshare_key=SFMyNTY.g3QAAAABbQAAAAhndWVzdF9pZG0AAAAkNzRlZmNkNGEtNGJkYi00YjA4LWEyMzQtZmQ4ZTU4NTA0NmY5.9XjC5nC-A9WIMDeull6PMDUmmIeMrqDhRaHj6yYKYu4; path=/; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":2921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1ca3945e40e5bd0a43307d67651bcfa1","sha1":"13159c03f91ada07bd8a8fb904dbb9bb352e20bd","sha256":"2836981f1ff30a08bd34b31ee907622b9065017bfdc563cf2095e2494658ecac","sha512":"eb673e9d05b7572bcff61f86f4e8278aeae69981895f337a3b30f8726d2247fd1b30b4e67d5757975c4e8934165a96f98596bacb2502c0d24d63b5b6958fd1d8","ssdeep":"","tlshash":"bb51014279e030c654672c0877eb5efcce8e54131145e43e359e8a2caeb7e464399b1e","first_seen":"2025-06-16T01:28:16.375627Z","last_seen":"2026-07-31T06:03:38.051221Z","times_seen":96,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:51.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 04 Feb 2026 18:29:52 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=SyWd3bNjS1q.3VUqL8D6fq86r8Mh4HgvKJFRbto6osU-1770229791.5246205-1.0.1.1-q_sg9sCGSpuvSRma2LU8tnjrsdUv1GPtoZQlmq4qoBgOCxiNGzlm2WYKXA2pVe0GzpWR3UbRmRVEAilCVeld5oBuOu8iA_8RHF9aur3PzCDZ49jS8zbrhE0ycwu1S3X6; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:52 GMT\r\nx-frame-options: DENY\r\npriority: u=4,i=?0\r\nserver: cloudflare\r\ncf-ray: 9c8c3c650c711a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":598,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":598,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:52.161Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:52 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:52 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495825\r\nx-static-request-id: WZPYKE7V3AQM68NV\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c690ac656aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-DDwQ0J0v.css","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:53.973Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-DDwQ0J0v.css HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:54 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:08:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d2-7477\"\r\nexpires: Thu, 04 Feb 2027 18:29:54 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29814)","md5":"297ce226eca0f544e0ccbd1de3b1349b","sha1":"219e24ad9d1f0e0ad3fb9e0d77b8b5085129a976","sha256":"b4b6f7bc6ac2325e76fcbb07149a6ca4111b9a4f325b230ae1e80ea8c281e5f4","sha512":"3671a338304b47be543f138d59eb3bcc20baf409f2b872dfb1e8fd0d5907737262e370795def8903d57710296fbfde5b9c4fc2b38a34715b2a05c65b13db6926","ssdeep":"384:b0A0PgThs3XzR5wmNKhTZ/y/m/HZNUrzCTP:YA0Pehs3XkZNUrzCj","tlshash":"b8d2562e6b45003b7da740f5e5d5eb8df21ab0c2df2a5be9e99252209bc63f70c57204","first_seen":"2026-02-04T15:47:45.232985Z","last_seen":"2026-02-04T18:30:34.260965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:54.767Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25516\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"e706bdd0c3a0dfed5d0aff7ba11b0b84-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-version-id: F_E1vrGrVYpe9DsT1R7lkqIvWO0Pktpz\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Hx3D41AeCuRVxND2JflvYrjtBx2J4fBujOhR9JmTlqg2lQ1xNQlB6g==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 1461f548931b7ad470f24d1b1af70dec\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":25516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25516, version 1.0","md5":"71a6023c087c936859024eb16ec7a519","sha1":"21633c7ccdba2846eae71554fc2a7cf7a0d90ff2","sha256":"50dca57f0b77918e0fb7dac998c3f5ef6b0c2a29657da97658a04f98ac532fc5","sha512":"f2711bd9fcf5ebfaaf6432ef67ae9c79d6ec844cf79302fb3a9fcfc0cc4725dff193004e8544bac5fcd4423c5655a8707a587366798babd1fae633351bd91340","ssdeep":"384:6uI7ehX/vtPqchzb7E0COoY4OTjRclw5nfU0C6Yr3uLyZn+GG0jOVAo3Udw+K5O:3I7CFdzFtoY42lJs0QYyCoOV53I","tlshash":"b4b2e160b2f85dd1e93e4732e50b12256580d0a984e5ca7ca39cfff6a88f28864d172d","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.301857Z","times_seen":3923,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:55.297Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14200\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 18:29:55 GMT\r\nage: 16128\r\nx-served-by: cache-fra-etou8220087-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-08-07T08:46:06.82298Z","times_seen":2955,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:58.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/LAFFD4SDUCDVQEXFPDC7C53EQ4ZELWQI/PXCT3G6LO6ICM5I3NTYENYPWJAECAWDD/GHM6WVH6MILNYOOCXHXB5GTSGNTMGXZR.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:58 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25328\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"92f582103b6a5067ba758e2f7a2b3ccf-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)\r\nx-amz-version-id: LMhk.sn82dT8C4wpKvpgRCP_z_kQjpB3\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: S-nTRio0-_vOAal0dTxdBGqfxGlw1U01a3PCKI9mZVyJpEkC60ww6w==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a571357954ac83969faa81fdec1bfba7\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25328,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25328, version 1.0","md5":"d4db658f4dd63bc2d0d84f325a341e29","sha1":"7a67e42dc79b056b46a286a7461028fccbde7e8a","sha256":"353a7fbfb4475f0c31470a7449226006cb64211c71055ca9db860a8acdaa9f68","sha512":"9c3bc25ed9d0e1146ebec313a25bd767e95ff16969b304bf15c811b6175e8ade80f55c38a2b0892374356603934792645501545eb4983e025d65205fb28740b2","ssdeep":"768:naFCZbcnqIsClsf+PUJFlO0NTXLLJZfoiNA:nu6B352h0NNRoQA","tlshash":"b2b2e1cb93922efcccd8c1d24914d71dd00d72561bb2d192e9db9e62a512abc9f3d805","first_seen":"2023-05-03T21:29:57Z","last_seen":"2026-08-07T08:02:54.277713Z","times_seen":4034,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-DDwQ0J0v.css","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:44.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-DDwQ0J0v.css HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:44 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:08:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d2-7477\"\r\nexpires: Thu, 04 Feb 2027 18:29:44 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29814)","md5":"297ce226eca0f544e0ccbd1de3b1349b","sha1":"219e24ad9d1f0e0ad3fb9e0d77b8b5085129a976","sha256":"b4b6f7bc6ac2325e76fcbb07149a6ca4111b9a4f325b230ae1e80ea8c281e5f4","sha512":"3671a338304b47be543f138d59eb3bcc20baf409f2b872dfb1e8fd0d5907737262e370795def8903d57710296fbfde5b9c4fc2b38a34715b2a05c65b13db6926","ssdeep":"384:b0A0PgThs3XzR5wmNKhTZ/y/m/HZNUrzCTP:YA0Pehs3XkZNUrzCj","tlshash":"b8d2562e6b45003b7da740f5e5d5eb8df21ab0c2df2a5be9e99252209bc63f70c57204","first_seen":"2026-02-04T15:47:45.232985Z","last_seen":"2026-02-04T18:30:34.260965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.323Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"79b58359f5110a8678b4b6191e78fc1e-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-version-id: wWiNu9TwtBGLADIvtnVxgpwydW4xY0Bk\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jhsatPw6dewyb6ZXxbb5TFrXdmaoU4FNEQleQxxOiIFoONzzpyvCZQ==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:33:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: d59808e9e45cdee0dfaf90fb0d4efd43\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25596, version 1.0","md5":"cd790237ed63c56b30aa8fb9d99a7563","sha1":"7f6de341cbc6058b8376bd8b26568d35b1d38fcf","sha256":"af02a72246f53ad49c44a591921edbd39ec8258a03d8cc2e0532aa1e497e85b4","sha512":"7970e7a0141d8e4c2268251afc7a8b0521f6debf741e48a99026dafd0d1272c12dd6d59a7ec67ba06914a6a57701854b066efaa9859323cd9857aadb1ce77fa8","ssdeep":"768:uXiaHuUbyuVyRM87QSs2TKMj3KwG/ilRvr3S:Mi6uowM87LsAlc2Rji","tlshash":"5fb2e163408105aacc93ba3eb26c718d47c079e2de524ccf5465f59ea31e437ee0aac3","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.289033Z","times_seen":3428,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:49 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 30 Jan 2026 00:46:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:48 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495822\r\nx-static-request-id: WZPH93ASMDZM2AGW\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"3c9a8c0dab13c3e1b04a9c46233ac3dc\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c54ca7f56aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2072713,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"931919aa8af14ee05977e8d4be136a7e","sha1":"7b036a682cd918e7286a5b11e8fcd8524db35923","sha256":"08fd16e6c98ece3460c7c80acbdedf39d7e4f7f38ca3747fa14f13a946935c9a","sha512":"e49ec43e459c4720f1c5318671ea90b46417add570c1ad8052f291b3abc70c0f5069983b97c8d6cd2d24ccbd54a05e5f4c1c7c5e7f4018c0ac02be2e4359622d","ssdeep":"12288:Ly7gd+eNiQ0x2Z1AgqYHeW+mFLXdddTC6F5fdF02CJNVGlo:9dP4Q0x2Z1AgqYH+mF7ddEgf02CJHT","tlshash":"4625c6ba5d1c6b4e777a4d2ddb12247d2e4770eeb24881dfa9cf72ecc162441e621ca0","first_seen":"2026-01-06T03:24:39.281833Z","last_seen":"2026-02-06T07:11:34.437634Z","times_seen":185,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-DDwQ0J0v.css","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:50.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-DDwQ0J0v.css HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:50 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 04 Feb 2026 12:08:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d2-7477\"\r\nexpires: Thu, 04 Feb 2027 18:29:50 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29815,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (29814)","md5":"297ce226eca0f544e0ccbd1de3b1349b","sha1":"219e24ad9d1f0e0ad3fb9e0d77b8b5085129a976","sha256":"b4b6f7bc6ac2325e76fcbb07149a6ca4111b9a4f325b230ae1e80ea8c281e5f4","sha512":"3671a338304b47be543f138d59eb3bcc20baf409f2b872dfb1e8fd0d5907737262e370795def8903d57710296fbfde5b9c4fc2b38a34715b2a05c65b13db6926","ssdeep":"384:b0A0PgThs3XzR5wmNKhTZ/y/m/HZNUrzCTP:YA0Pehs3XkZNUrzCj","tlshash":"b8d2562e6b45003b7da740f5e5d5eb8df21ab0c2df2a5be9e99252209bc63f70c57204","first_seen":"2026-02-04T15:47:45.232985Z","last_seen":"2026-02-04T18:30:34.260965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":175,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:51.690Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:51 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:51 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:54.912Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"GET /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.860\r\nx-dyn-request-id: yhgtC8L201dutuF_r9MPhn1EKYUtAWIPbF86cg02-JgzU0sdJB\r\nx-dyn-version: WalletKit/4.59.2\r\nx-dyn-device-fingerprint: 71867ef377c6762c25a722c451c95d3d\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:54 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4721-zoQ1v/V8QBgh9ZZYEEkaKINfbso\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\npriority: u=4,i=?0\r\nage: 12\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=VHRVqPTNXYYl_TpYFRZ0t28EHl0pVhQAwY.LK3zHQIQ-1770229794.9062047-1.0.1.1-BRDqJxz8WhH4C_f0hanrs8Ousu9ruAC7XGXoYX2TPwW5M.30FuAuHczLo5gtk5VwkSShLlIZRenCmpD6zpbpGHN3u8IW6CVicAWEzYNB2wxgbg8OxmLNgcz5wxWAVHal; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:54 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9c8c3c7a2bac1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":18209,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d6c625eb997851776c56fb1b094c54db","sha1":"ce8435bff57c401821f5965810491a28835f6eca","sha256":"b38dbd0e4416347ae6a74374dabd47db1ee5d45a1c1079d2108536440d6aee4d","sha512":"f7a0d31b7a2ef2ec237bc51fbe6beab117757fa5e7ce034e34cbc2c18d9c22f9ec2a043aeefbfc0ae9f2f7035518881b43cbf7f4f0e202b1c423d9b445b05143","ssdeep":"192:iDAeTzFA4ov19BVg7z+QkVQu5VvW0fgdZy+/B/B/GvuvjOpPHONsfctRSslZUxbK:wTzPQJg72DLYr5BJ/GvuLOprAqbFjy57","tlshash":"d182fc9e6d542cbe5b02d98cc45a270b42264d31b2a738fdc0a5ceb8e1dbdb54725e33","first_seen":"2026-02-04T15:47:45.239181Z","last_seen":"2026-02-04T18:30:34.258239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/sdkSettings","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:42.091Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/sdkSettings HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Wed, 04 Feb 2026 18:29:42 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\nx-frame-options: DENY\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=hwQpU4gXKny3NVEWQhalpdMj_lhfTA3xpSAHoTXdYjI-1770229782.094705-1.0.1.1-a_ZIlRYFo0D86wN9WgdIe1CNQ0xqefYWmepiRafmEeZpz6zcWfxZTk_rPr.P4BJZvoOBrYY5mRRtB.mu9IoJsVkSRBPnFFQ5vTaAq9VGMHL8UBlkv0E.Jb6PRW5pzSgL; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:42 GMT\r\nserver: cloudflare\r\ncf-ray: 9c8c3c2a1d24b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:45.023Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"79b58359f5110a8678b4b6191e78fc1e-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-version-id: wWiNu9TwtBGLADIvtnVxgpwydW4xY0Bk\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jhsatPw6dewyb6ZXxbb5TFrXdmaoU4FNEQleQxxOiIFoONzzpyvCZQ==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:33:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4674e6cc4d76b76b4be239eab3e7a55a\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":25596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25596, version 1.0","md5":"cd790237ed63c56b30aa8fb9d99a7563","sha1":"7f6de341cbc6058b8376bd8b26568d35b1d38fcf","sha256":"af02a72246f53ad49c44a591921edbd39ec8258a03d8cc2e0532aa1e497e85b4","sha512":"7970e7a0141d8e4c2268251afc7a8b0521f6debf741e48a99026dafd0d1272c12dd6d59a7ec67ba06914a6a57701854b066efaa9859323cd9857aadb1ce77fa8","ssdeep":"768:uXiaHuUbyuVyRM87QSs2TKMj3KwG/ilRvr3S:Mi6uowM87LsAlc2Rji","tlshash":"5fb2e163408105aacc93ba3eb26c718d47c079e2de524ccf5465f59ea31e437ee0aac3","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.289033Z","times_seen":3428,"resource_available":false,"data":null}},"time_used":3,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:45.146Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:45 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:54.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/P2LQKHE6KA6ZP4AAGN72KDWMHH6ZH3TA/ZC32TK2P7FPS5GFTL46EU6KQJA24ZYDB/7AHDUZ4A7LFLVFUIFSARGIWCRQJHISQP.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:54 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25596\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"79b58359f5110a8678b4b6191e78fc1e-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)\r\nx-amz-version-id: wWiNu9TwtBGLADIvtnVxgpwydW4xY0Bk\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: jhsatPw6dewyb6ZXxbb5TFrXdmaoU4FNEQleQxxOiIFoONzzpyvCZQ==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/14/2025 09:33:00\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 4cd4aa10aa9b89a4f335c9b33bd89578\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25596,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25596, version 1.0","md5":"cd790237ed63c56b30aa8fb9d99a7563","sha1":"7f6de341cbc6058b8376bd8b26568d35b1d38fcf","sha256":"af02a72246f53ad49c44a591921edbd39ec8258a03d8cc2e0532aa1e497e85b4","sha512":"7970e7a0141d8e4c2268251afc7a8b0521f6debf741e48a99026dafd0d1272c12dd6d59a7ec67ba06914a6a57701854b066efaa9859323cd9857aadb1ce77fa8","ssdeep":"768:uXiaHuUbyuVyRM87QSs2TKMj3KwG/ilRvr3S:Mi6uowM87LsAlc2Rji","tlshash":"5fb2e163408105aacc93ba3eb26c718d47c079e2de524ccf5465f59ea31e437ee0aac3","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.289033Z","times_seen":3428,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:42.083Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"GET /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.860\r\nx-dyn-request-id: F5aOqjbWisg9eI_LP2aMwxMPrAnnAqp8peRnBJ4PqktnkXgBaS\r\nx-dyn-version: WalletKit/4.59.2\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:42 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4721-zoQ1v/V8QBgh9ZZYEEkaKINfbso\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\nx-frame-options: DENY\r\ncf-cache-status: EXPIRED\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=hwZ6w2TATNP4YZ_eofKVXekTIWlLOtdZD8dIg7QWlmk-1770229782.0645053-1.0.1.1-_hELHo9qcN7n9oqPRQkCiRKdaKi4VwWkleFvTtPU8BOZsNdkGAFWTYQrawFgPtE1FkMLX7OVIs5VzdlNqL1Q1kMQJpgV9q8_4gOpqeuahvXHHyIta.V_nhd4Xl9jXSpn; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:42 GMT\r\nserver: cloudflare\r\ncf-ray: 9c8c3c29ecbfb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18209,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d6c625eb997851776c56fb1b094c54db","sha1":"ce8435bff57c401821f5965810491a28835f6eca","sha256":"b38dbd0e4416347ae6a74374dabd47db1ee5d45a1c1079d2108536440d6aee4d","sha512":"f7a0d31b7a2ef2ec237bc51fbe6beab117757fa5e7ce034e34cbc2c18d9c22f9ec2a043aeefbfc0ae9f2f7035518881b43cbf7f4f0e202b1c423d9b445b05143","ssdeep":"192:iDAeTzFA4ov19BVg7z+QkVQu5VvW0fgdZy+/B/B/GvuvjOpPHONsfctRSslZUxbK:wTzPQJg72DLYr5BJ/GvuLOprAqbFjy57","tlshash":"d182fc9e6d542cbe5b02d98cc45a270b42264d31b2a738fdc0a5ceb8e1dbdb54725e33","first_seen":"2026-02-04T15:47:45.239181Z","last_seen":"2026-02-04T18:30:34.258239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.328Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25516\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"e706bdd0c3a0dfed5d0aff7ba11b0b84-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-version-id: F_E1vrGrVYpe9DsT1R7lkqIvWO0Pktpz\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Hx3D41AeCuRVxND2JflvYrjtBx2J4fBujOhR9JmTlqg2lQ1xNQlB6g==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: a712d9e5d31efc5cf853643ac0b9ff5d\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25516, version 1.0","md5":"71a6023c087c936859024eb16ec7a519","sha1":"21633c7ccdba2846eae71554fc2a7cf7a0d90ff2","sha256":"50dca57f0b77918e0fb7dac998c3f5ef6b0c2a29657da97658a04f98ac532fc5","sha512":"f2711bd9fcf5ebfaaf6432ef67ae9c79d6ec844cf79302fb3a9fcfc0cc4725dff193004e8544bac5fcd4423c5655a8707a587366798babd1fae633351bd91340","ssdeep":"384:6uI7ehX/vtPqchzb7E0COoY4OTjRclw5nfU0C6Yr3uLyZn+GG0jOVAo3Udw+K5O:3I7CFdzFtoY42lJs0QYyCoOV53I","tlshash":"b4b2e160b2f85dd1e93e4732e50b12256580d0a984e5ca7ca39cfff6a88f28864d172d","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.301857Z","times_seen":3923,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"GET /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nContent-Type: application/json\r\nx-dyn-api-version: API/0.0.860\r\nx-dyn-request-id: cXxJkIh-59yK2oFrXtO0UccrOd3cvc8pS6bgXz2hUDICgqlTve\r\nx-dyn-version: WalletKit/4.59.2\r\nx-dyn-device-fingerprint: 71867ef377c6762c25a722c451c95d3d\r\nx-dyn-is-global-wallet-popup: false\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Accept-Encoding\r\naccess-control-allow-credentials: true\r\netag: W/\"4721-zoQ1v/V8QBgh9ZZYEEkaKINfbso\"\r\ncontent-encoding: br\r\ncache-control: max-age=30\r\npriority: u=4,i=?0\r\nage: 6\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=l90S39FHosZsl_B6l3c9Dnrgv_c4rXGIyMjjKxmSHj8-1770229788.4369142-1.0.1.1-BWU.cnowOwKhrGTKl2J4_CCzUchLEUAAPu7WRlhI8iBgQROVfkNbRfrp7bZ7YpkSv3QgZZh9C4VLWnXM1M2d4ZqghJZheSet.4.jdgvs.N2KpaVrnvAexPefmGxSzP.U; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:48 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9c8c3c51bbfa1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18209,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"d6c625eb997851776c56fb1b094c54db","sha1":"ce8435bff57c401821f5965810491a28835f6eca","sha256":"b38dbd0e4416347ae6a74374dabd47db1ee5d45a1c1079d2108536440d6aee4d","sha512":"f7a0d31b7a2ef2ec237bc51fbe6beab117757fa5e7ce034e34cbc2c18d9c22f9ec2a043aeefbfc0ae9f2f7035518881b43cbf7f4f0e202b1c423d9b445b05143","ssdeep":"192:iDAeTzFA4ov19BVg7z+QkVQu5VvW0fgdZy+/B/B/GvuvjOpPHONsfctRSslZUxbK:wTzPQJg72DLYr5BJ/GvuLOprAqbFjy57","tlshash":"d182fc9e6d542cbe5b02d98cc45a270b42264d31b2a738fdc0a5ceb8e1dbdb54725e33","first_seen":"2026-02-04T15:47:45.239181Z","last_seen":"2026-02-04T18:30:34.258239Z","times_seen":2,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:53.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-CfYHhppD.js HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:53 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:08:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d4-2f1d34\"\r\nexpires: Thu, 04 Feb 2027 18:29:53 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3087668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37675)","md5":"4baf50909b956407c07783fe198c548e","sha1":"0683137166d300df59d13e6a78b3affbd5783925","sha256":"471d64da4d72928590c1b063b91c055570158d8ed778f91a8c7d4cd1ef25bb0d","sha512":"ce89a0474b3a81fcc99a84e8e094002fb0da2f06bde5c27b0c2820fe75448f2ac69ed381f6dc7e31c8658fd47579637f70d76594300087b2d9dc8ee7db96776b","ssdeep":"12288:S8LlGK5m8gKqsiViavWuYSntK9AnG/ZTzxILZzHOqovJ0LSuS3x/xPe2+:SGs/KPILZzVovJ0euIx/xPT+","tlshash":"ce254dc4b259711127a363a4e4bf122ae338aa16bc1d0470f9b9cc8f3571e499177f7a","first_seen":"2026-02-04T15:47:45.231898Z","last_seen":"2026-02-04T18:30:34.261856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:54.734Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 04 Feb 2026 18:29:54 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=Bu.SJgTxfBHvaumZcKy4Qko0I7GbeaZCsQzEGl5Vq44-1770229794.7369618-1.0.1.1-1_yT100HZ1e9FgLi8xfHf73xmNW6g5gSCO5D_iZ34DZRIknoTuZgyoNIYafVmrl3fknQOwEsBpQWknDCJ4ZEUgOLf7o12w_FxOWAHLgMrGFIxhBX0m8FoQ11ITyrly.n; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:54 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9c8c3c7918b21a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.fontshare.com/v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap","fqdn":"api.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"35.178.12.10","port":443,"asn":16509,"as":"AMAZON-02","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:40.883Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.fontshare.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Thu, 29 Jan 2026 00:00:00 GMT","end":"Sat, 27 Feb 2027 23:59:59 GMT"},"fingerprint":{"sha1":"69:4C:09:79:67:B2:53:14:4C:98:6F:74:44:FF:48:93:87:A8:C7:74","sha256":"99:F8:8D:DA:9B:7E:5B:44:DC:C9:51:03:79:1F:D2:00:2F:49:3E:78:88:9E:96:B5:29:4A:C6:5A:87:18:DD:30"}}},"request":{"raw":"GET /v2/css?f[]=satoshi@300,400,500,600,700,800,900\u0026display=swap HTTP/1.1\r\nHost: api.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:41 GMT\r\ncontent-type: text/css\r\ncontent-length: 2921\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: content-type, authorization, cookie\r\naccess-control-allow-methods: GET, POST, PUT, PATCH, DELETE, OPTIONS\r\naccess-control-allow-origin: https://api.fontshare.com\r\ncache-control: private, max-age=86400, stale-while-revalidate=604800\r\nserver: Cowboy\r\nx-request-id: GJEem1PkPMPonqEAGORR\r\nset-cookie: _fontshare_key=SFMyNTY.g3QAAAABbQAAAAhndWVzdF9pZG0AAAAkNDVjNTU5ZmItZWU5MC00MTU2LWEwMDYtNDAwMDNiNWVkODFj.u9Tx_BONdMTsm7Ot-Cpk_5WHmbjruCVExcKFuWY72vo; path=/; HttpOnly; SameSite=Lax\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cowboy","description":"Cowboy is a small, fast, modular HTTP server written in Erlang.","website":"https://github.com/ninenines/cowboy","common_platform_enumeration":"","icon":"Cowboy.png","categories":["Web servers"]},{"name":"Erlang","description":"Erlang is a general-purpose, concurrent, functional programming language, and a garbage-collected runtime system.","website":"https://www.erlang.org","common_platform_enumeration":"cpe:2.3:a:erlang:erlang%2fotp:*:*:*:*:*:*:*:*","icon":"Erlang.png","categories":["Programming languages"]}],"data":{"size":2921,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"1ca3945e40e5bd0a43307d67651bcfa1","sha1":"13159c03f91ada07bd8a8fb904dbb9bb352e20bd","sha256":"2836981f1ff30a08bd34b31ee907622b9065017bfdc563cf2095e2494658ecac","sha512":"eb673e9d05b7572bcff61f86f4e8278aeae69981895f337a3b30f8726d2247fd1b30b4e67d5757975c4e8934165a96f98596bacb2502c0d24d63b5b6958fd1d8","ssdeep":"","tlshash":"bb51014279e030c654672c0877eb5efcce8e54131145e43e359e8a2caeb7e464399b1e","first_seen":"2025-06-16T01:28:16.375627Z","last_seen":"2026-07-31T06:03:38.051221Z","times_seen":96,"resource_available":false,"data":null}},"time_used":260,"timings":{"blocked":111,"dns":27,"connect":24,"send":0,"wait":33,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.fontshare.com/wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2","fqdn":"cdn.fontshare.com","domain":"fontshare.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:41.794Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.fontshare.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Sat, 10 Jan 2026 13:02:59 GMT","end":"Fri, 10 Apr 2026 13:02:58 GMT"},"fingerprint":{"sha1":"81:EE:1D:E7:BE:79:92:F7:4A:B8:AF:7D:99:72:61:6F:BE:6F:3D:6A","sha256":"04:A1:EA:A6:6F:29:38:39:C2:84:2C:78:05:29:56:A2:8C:FC:64:43:60:00:1C:1E:37:AA:2E:03:34:5B:81:5F"}}},"request":{"raw":"GET /wf/TTX2Z3BF3P6Y5BQT3IV2VNOK6FL22KUT/7QYRJOI3JIMYHGY6CH7SOIFRQLZOLNJ6/KFIAZD4RUMEZIYV6FQ3T3GP5PDBDB6JY.woff2 HTTP/1.1\r\nHost: cdn.fontshare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://api.fontshare.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:41 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 25516\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 337273\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\ncache-control: public, max-age=604800\r\netag: \"e706bdd0c3a0dfed5d0aff7ba11b0b84-1\"\r\nlast-modified: Sat, 17 Jul 2021 08:42:39 GMT\r\nvia: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)\r\nx-amz-version-id: F_E1vrGrVYpe9DsT1R7lkqIvWO0Pktpz\r\nx-cache: Miss from cloudfront\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: Hx3D41AeCuRVxND2JflvYrjtBx2J4fBujOhR9JmTlqg2lQ1xNQlB6g==\r\ncdn-proxyver: 1.33\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 08/09/2025 15:07:53\r\ncdn-edgestorageid: 830\r\ncdn-requestid: ceea9aff576be916dfbb5da2eb648d20\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":25516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25516, version 1.0","md5":"71a6023c087c936859024eb16ec7a519","sha1":"21633c7ccdba2846eae71554fc2a7cf7a0d90ff2","sha256":"50dca57f0b77918e0fb7dac998c3f5ef6b0c2a29657da97658a04f98ac532fc5","sha512":"f2711bd9fcf5ebfaaf6432ef67ae9c79d6ec844cf79302fb3a9fcfc0cc4725dff193004e8544bac5fcd4423c5655a8707a587366798babd1fae633351bd91340","ssdeep":"384:6uI7ehX/vtPqchzb7E0COoY4OTjRclw5nfU0C6Yr3uLyZn+GG0jOVAo3Udw+K5O:3I7CFdzFtoY42lJs0QYyCoOV53I","tlshash":"b4b2e160b2f85dd1e93e4732e50b12256580d0a984e5ca7ca39cfff6a88f28864d172d","first_seen":"2023-05-03T21:29:56Z","last_seen":"2026-08-07T08:02:54.301857Z","times_seen":3923,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":43,"dns":25,"connect":1,"send":0,"wait":2,"receive":1,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:43.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:43 GMT\r\ncontent-type: application/json\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:43 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495816\r\nx-static-request-id: WZPYKE7V3AQM68NV\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c316b4556aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":21,"dns":0,"connect":1,"send":0,"wait":33,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:52.035Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-length: 14200\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 18:29:52 GMT\r\nage: 16125\r\nx-served-by: cache-fra-etou8220087-FRA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-08-07T08:46:06.82298Z","times_seen":2955,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:50.754Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-CfYHhppD.js HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:50 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:08:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d4-2f1d34\"\r\nexpires: Thu, 04 Feb 2027 18:29:50 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3087668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37675)","md5":"4baf50909b956407c07783fe198c548e","sha1":"0683137166d300df59d13e6a78b3affbd5783925","sha256":"471d64da4d72928590c1b063b91c055570158d8ed778f91a8c7d4cd1ef25bb0d","sha512":"ce89a0474b3a81fcc99a84e8e094002fb0da2f06bde5c27b0c2820fe75448f2ac69ed381f6dc7e31c8658fd47579637f70d76594300087b2d9dc8ee7db96776b","ssdeep":"12288:S8LlGK5m8gKqsiViavWuYSntK9AnG/ZTzxILZzHOqovJ0LSuS3x/xPe2+:SGs/KPILZzVovJ0euIx/xPT+","tlshash":"ce254dc4b259711127a363a4e4bf122ae338aa16bc1d0470f9b9cc8f3571e499177f7a","first_seen":"2026-02-04T15:47:45.231898Z","last_seen":"2026-02-04T18:30:34.261856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:51.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:51 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\nx-static-request-id: F9XPS9F99T79V9ZP\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:51 GMT\r\nage: 22484\r\nserver: cloudflare\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c636efc32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533766,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ccb0706dd992816479ecf0a10ddcb00","sha1":"0fe2b22e893cd22a6b80106a6e2c26d6ae02bca8","sha256":"a80fb1c0816a6bfee58f0f5c56389dc38f0e5e64ce8af48d6a3117280b03e99a","sha512":"371f65686b16c00a00ee7e7815956921569fb6858f15008fe574751d181edad52a80f9a29cdba5989e13c8474c043a3619bda420c0cac9230e26624d60ce98ed","ssdeep":"1536:4QHOrsyn19pSh27VRtJ9DIMsM7y1Iuvxv5Aff2Rum0xKKiKXj6eEexLuA:4QurP9U27VJLsz1IuV57uBxKKiKl","tlshash":"d1b40e48ca600d8310a6a359dc7e90d6a424c6578ed93d683bbc85bc4f6d92f25fc6fc","first_seen":"2026-01-30T07:50:08.934429Z","last_seen":"2026-02-04T18:30:34.256086Z","times_seen":11,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/fav.svg","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:42.015Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /fav.svg HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:42 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Wed, 04 Feb 2026 12:08:54 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d6-1672\"\r\nexpires: Thu, 04 Feb 2027 18:29:42 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5746,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6b0500c4f8ce130aed24c107a49c33fe","sha1":"217aa356c716e7ec2fd5d80524a2abebc809233c","sha256":"e5c218c85f34c93a0cfe8a4d418a922f0b8671bf03b6b658295d11211c1893ef","sha512":"d58119bc852ab1e2043cd445bf0e2a4c5455c5201fbe58bbf58cd57972ace4f8241f8b2ca0820baf1a96a7234c6ae5d31f8b403f48f770ace077f4ec79e700ba","ssdeep":"96:gmuFhCIhB1cjkm1W7QawuJ2QKbVcDHm07sxYQwnp6psgbo8sUIP8WyDBaP:gAIL1com1dawuJ2bpcDH37sx1W8psgQJ","tlshash":"5ac10eef2f904df1dd46d2d7fa060088620fe4bb6e918b74c35dab0d34a2868d956c12","first_seen":"2026-02-04T15:47:45.235085Z","last_seen":"2026-06-26T20:35:35.223756Z","times_seen":7,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:44.265Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-CfYHhppD.js HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:44 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:08:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d4-2f1d34\"\r\nexpires: Thu, 04 Feb 2027 18:29:44 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3087668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37675)","md5":"4baf50909b956407c07783fe198c548e","sha1":"0683137166d300df59d13e6a78b3affbd5783925","sha256":"471d64da4d72928590c1b063b91c055570158d8ed778f91a8c7d4cd1ef25bb0d","sha512":"ce89a0474b3a81fcc99a84e8e094002fb0da2f06bde5c27b0c2820fe75448f2ac69ed381f6dc7e31c8658fd47579637f70d76594300087b2d9dc8ee7db96776b","ssdeep":"12288:S8LlGK5m8gKqsiViavWuYSntK9AnG/ZTzxILZzHOqovJ0LSuS3x/xPe2+:SGs/KPILZzVovJ0euIx/xPT+","tlshash":"ce254dc4b259711127a363a4e4bf122ae338aa16bc1d0470f9b9cc8f3571e499177f7a","first_seen":"2026-02-04T15:47:45.231898Z","last_seen":"2026-02-04T18:30:34.261856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.1.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:45.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@fontsource/dm-sans/files/dm-sans-latin-400-normal.woff2 HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: font/woff2\r\nx-jsd-version: 5.2.7\r\nx-jsd-version-type: version\r\netag: W/\"3778-fPihwUbFN/KHGQYBbTcAfGHH/mw\"\r\naccept-ranges: bytes\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\nage: 16118\r\nx-served-by: cache-fra-etou8220087-FRA, cache-hel1410032-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 14200\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14200,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14200, version 1.0","md5":"a220a32881ae190f4784c437c1e467e0","sha1":"7cf8a1c146c537f2871906016d37007c61c7fe6c","sha256":"4ab51eb2cd7305d177187908d6397474d4520663f6c6e572feb0a64f4fa80006","sha512":"bf6503a157d8bb1c221812e845136fdfc4344e3c67802023647b0ff9be233ef2a1035a0a188e0a3612911b695cc142f5d8a874e27a0ec51da7b2a120f78c8e2e","ssdeep":"384:Po4q0QKjXsVLZ0e3mUS+4to3EXf/S5IXxVlU:Q4bFcVL4Uh4W3AHNBVlU","tlshash":"b852d1cded244eeec1744676038cc21996a9f36326f1b955bd90bf86937a8145f043b3","first_seen":"2025-09-12T00:51:45.933668Z","last_seen":"2026-08-07T08:46:06.82298Z","times_seen":2955,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":15,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:48.049Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:48 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\nx-static-request-id: F9XPS9F99T79V9ZP\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:48 GMT\r\nage: 22481\r\nserver: cloudflare\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c4f5a0032fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533766,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ccb0706dd992816479ecf0a10ddcb00","sha1":"0fe2b22e893cd22a6b80106a6e2c26d6ae02bca8","sha256":"a80fb1c0816a6bfee58f0f5c56389dc38f0e5e64ce8af48d6a3117280b03e99a","sha512":"371f65686b16c00a00ee7e7815956921569fb6858f15008fe574751d181edad52a80f9a29cdba5989e13c8474c043a3619bda420c0cac9230e26624d60ce98ed","ssdeep":"1536:4QHOrsyn19pSh27VRtJ9DIMsM7y1Iuvxv5Aff2Rum0xKKiKXj6eEexLuA:4QurP9U27VJLsz1IuV57uBxKKiKl","tlshash":"d1b40e48ca600d8310a6a359dc7e90d6a424c6578ed93d683bbc85bc4f6d92f25fc6fc","first_seen":"2026-01-30T07:50:08.934429Z","last_seen":"2026-02-04T18:30:34.256086Z","times_seen":11,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"iconic.dynamic-static-assets.com/icons/sprite.svg","fqdn":"iconic.dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:55.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /icons/sprite.svg HTTP/1.1\r\nHost: iconic.dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:55 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Fri, 30 Jan 2026 00:46:06 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:55 GMT\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\nserver: cloudflare\r\naccess-control-max-age: 0\r\nage: 495828\r\nx-static-request-id: WZPH93ASMDZM2AGW\r\naccess-control-allow-methods: GET, HEAD\r\netag: W/\"3c9a8c0dab13c3e1b04a9c46233ac3dc\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c7dced156aa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1709674,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"931919aa8af14ee05977e8d4be136a7e","sha1":"7b036a682cd918e7286a5b11e8fcd8524db35923","sha256":"08fd16e6c98ece3460c7c80acbdedf39d7e4f7f38ca3747fa14f13a946935c9a","sha512":"e49ec43e459c4720f1c5318671ea90b46417add570c1ad8052f291b3abc70c0f5069983b97c8d6cd2d24ccbd54a05e5f4c1c7c5e7f4018c0ac02be2e4359622d","ssdeep":"12288:Ly7gd+eNiQ0x2Z1AgqYHeW+mFLXdddTC6F5fdF02CJNVGlo:9dP4Q0x2Z1AgqYH+mF7ddEgf02CJHT","tlshash":"4625c6ba5d1c6b4e777a4d2ddb12247d2e4770eeb24881dfa9cf72ecc162441e621ca0","first_seen":"2026-01-06T03:24:39.281833Z","last_seen":"2026-02-06T07:11:34.437634Z","times_seen":185,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":87,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/assets/index-CfYHhppD.js","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:57.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /assets/index-CfYHhppD.js HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:57 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 04 Feb 2026 12:08:52 GMT\r\nvary: Accept-Encoding\r\netag: W/\"698336d4-2f1d34\"\r\nexpires: Thu, 04 Feb 2027 18:29:57 GMT\r\ncache-control: max-age=31536000\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3087668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37675)","md5":"4baf50909b956407c07783fe198c548e","sha1":"0683137166d300df59d13e6a78b3affbd5783925","sha256":"471d64da4d72928590c1b063b91c055570158d8ed778f91a8c7d4cd1ef25bb0d","sha512":"ce89a0474b3a81fcc99a84e8e094002fb0da2f06bde5c27b0c2820fe75448f2ac69ed381f6dc7e31c8658fd47579637f70d76594300087b2d9dc8ee7db96776b","ssdeep":"12288:S8LlGK5m8gKqsiViavWuYSntK9AnG/ZTzxILZzHOqovJ0LSuS3x/xPe2+:SGs/KPILZzVovJ0euIx/xPT+","tlshash":"ce254dc4b259711127a363a4e4bf122ae338aa16bc1d0470f9b9cc8f3571e499177f7a","first_seen":"2026-02-04T15:47:45.231898Z","last_seen":"2026-02-04T18:30:34.261856Z","times_seen":2,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":85,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":[{"sensor_name":"urlquery","alert":"Suspicious - Suspicious Javascript code","verdict":"suspicious","severity":"medium","comment":"","tags":["suspicious"],"meta":null}]}},{"url":{"schema":"https","addr":"dynamic-static-assets.com/wallet-book/v1/stable/wallet-book.json","fqdn":"dynamic-static-assets.com","domain":"dynamic-static-assets.com","tld":"com"},"ip":{"addr":"104.18.14.33","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/","date":"2026-02-04T18:29:41.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dynamic-static-assets.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 02 Jan 2026 23:54:35 GMT","end":"Fri, 03 Apr 2026 00:54:33 GMT"},"fingerprint":{"sha1":"20:E0:7B:88:87:4A:32:1B:29:3F:68:D2:9F:B5:65:8E:D9:CE:36:B8","sha256":"2D:45:3D:1F:02:0A:67:D7:49:76:93:4D:C9:37:77:65:80:4D:57:B5:FA:5C:34:D8:9A:CE:8E:BD:B1:12:AA:78"}}},"request":{"raw":"GET /wallet-book/v1/stable/wallet-book.json HTTP/1.1\r\nHost: dynamic-static-assets.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 04 Feb 2026 18:29:41 GMT\r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-expose-headers: ETag, Content-Type, Content-Length, Content-MD5\r\naccess-control-max-age: 0\r\nvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nlast-modified: Fri, 30 Jan 2026 00:46:04 GMT\r\nx-static-request-id: F9XPS9F99T79V9ZP\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=600\r\nexpires: Wed, 04 Feb 2026 18:39:41 GMT\r\nage: 22475\r\nserver: cloudflare\r\netag: W/\"6ccb0706dd992816479ecf0a10ddcb00\"\r\ncontent-encoding: br\r\ncf-ray: 9c8c3c267e3d32fa-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533766,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"6ccb0706dd992816479ecf0a10ddcb00","sha1":"0fe2b22e893cd22a6b80106a6e2c26d6ae02bca8","sha256":"a80fb1c0816a6bfee58f0f5c56389dc38f0e5e64ce8af48d6a3117280b03e99a","sha512":"371f65686b16c00a00ee7e7815956921569fb6858f15008fe574751d181edad52a80f9a29cdba5989e13c8474c043a3619bda420c0cac9230e26624d60ce98ed","ssdeep":"1536:4QHOrsyn19pSh27VRtJ9DIMsM7y1Iuvxv5Aff2Rum0xKKiKXj6eEexLuA:4QurP9U27VJLsz1IuV57uBxKKiKl","tlshash":"d1b40e48ca600d8310a6a359dc7e90d6a424c6578ed93d683bbc85bc4f6d92f25fc6fc","first_seen":"2026-01-30T07:50:08.934429Z","last_seen":"2026-02-04T18:30:34.256086Z","times_seen":11,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":37,"dns":20,"connect":1,"send":0,"wait":11,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"trackintel.org/?","fqdn":"trackintel.org","domain":"trackintel.org","tld":"org"},"ip":{"addr":"35.204.157.223","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-04T18:29:44.159Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trackintel.org","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sun, 01 Feb 2026 09:33:28 GMT","end":"Sat, 02 May 2026 09:33:27 GMT"},"fingerprint":{"sha1":"49:CA:B8:A0:B3:29:3B:31:6C:0C:11:25:D7:5D:89:C9:63:86:0A:0C","sha256":"8F:7D:C9:7B:EE:F8:08:33:F9:DB:FB:BD:0C:D9:65:90:2C:61:D9:31:63:C6:ED:E3:7E:95:E5:C4:A9:FE:6A:43"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: trackintel.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://trackintel.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Wed, 04 Feb 2026 18:29:44 GMT\r\ncontent-type: text/html\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 04 Feb 2026 12:08:55 GMT\r\netag: W/\"6a0-649fe6b8bf8af\"\r\nx-httpd-modphp: 1\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1696,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e70f690f82bef4a91c3d8b4976fc4f18","sha1":"c82354e482fca8dc74bae7f3acde545e4ba06f8b","sha256":"86d9a2508aa7ae4e87908e22dcaaaf386808d89ed3512894528130f1c12020de","sha512":"19b3e5ea7608c56893542aa6dc3df70f99d0bc362aff6e9abf529107d754e426954b23acaefbba961d4a65e05b580edfdf8d353b3959db3cec98de3a2e93c6bb","ssdeep":"","tlshash":"6d3150434a043eab13ec93145c62b08c887f1d0bd2400c6172ca696b3cd9ed0c7f65b3","first_seen":"2026-02-04T15:47:45.241941Z","last_seen":"2026-02-04T18:30:34.260329Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-04","alert":"Sinkholed","trigger":"trackintel.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"app.dynamicauth.com/api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0","fqdn":"app.dynamicauth.com","domain":"dynamicauth.com","tld":"com"},"ip":{"addr":"104.18.21.179","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://trackintel.org/?","date":"2026-02-04T18:29:44.992Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"app.dynamicauth.com","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Wed, 21 Jan 2026 19:50:09 GMT","end":"Tue, 21 Apr 2026 20:50:02 GMT"},"fingerprint":{"sha1":"A0:DC:9F:5A:28:95:EA:E2:35:50:49:B8:A0:BC:16:A9:CB:E9:4B:DC","sha256":"CC:A8:2E:EB:4A:66:C2:67:AF:C4:EA:78:C2:78:58:E0:85:4F:F5:84:DF:45:70:0E:95:1A:34:8F:4B:A8:E2:26"}}},"request":{"raw":"OPTIONS /api/v0/sdk/d04af0d8-a1ab-40ef-85de-cdb4d21cf7ae/settings?sdkVersion=ClientSDK%2F0.4.0 HTTP/1.1\r\nHost: app.dynamicauth.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\nReferer: https://trackintel.org/\r\nOrigin: https://trackintel.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\ndate: Wed, 04 Feb 2026 18:29:45 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://trackintel.org\r\nvary: Origin, Access-Control-Request-Headers\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\naccess-control-allow-headers: content-type,x-dyn-api-version,x-dyn-device-fingerprint,x-dyn-is-global-wallet-popup,x-dyn-request-id,x-dyn-version\r\naccess-control-max-age: 600\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nset-cookie: __cf_bm=mzQUvLzfR4WYynOLtODfxJyuWmw2X6tok_LK97pFL5k-1770229784.994993-1.0.1.1-1SEQ2LzXaYR41phAFqEHPDbollJDSNcGu72wTUKP64tAHj4bSvgKsW.eXU2T0QcwwRE0pukLKopY0fCY5O4qiiY0xJ.gChxIHhWP_ZGXMdfayKWnyed4HkGLmORmOVJz; HttpOnly; Secure; Path=/; Domain=app.dynamicauth.com; Expires=Wed, 04 Feb 2026 18:59:45 GMT\r\nx-frame-options: DENY\r\nserver: cloudflare\r\ncf-ray: 9c8c3c3c3b161a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare Bot Management","description":"Cloudflare bot management solution identifies and mitigates automated traffic to protect websites from bad bots.","website":"https://www.cloudflare.com/en-gb/products/bot-management/","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-07T12:07:10.599133Z","times_seen":17761025,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
