{"report_id":"6af70fa7-8276-468a-8373-e588b5e2dd42","version":6,"status":"done","tags":[],"date":"2026-02-14T03:32:23Z","url":{"schema":"https","addr":"grok12ktoken.com/","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"104.21.36.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"grok12ktoken.com/","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"title":"GROK12K Official Presale including up to 200% bonus","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"grok12ktoken.com/","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"104.21.36.74","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-03-21T03:32:23Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":1,"urlquery":0,"analyzer":4}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2026-02-14T03:32:01Z","timestamp":1771039921,"ip_dst":{"addr":"Client IP","port":37274,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"severity":"medium","alert":"ET DROP Spamhaus DROP Listed Traffic Inbound group 29","source":"{\"timestamp\":\"2026-02-14T03:32:01.963934+0000\",\"flow_id\":1648098886645385,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"157.20.182.41\",\"src_port\":443,\"dest_ip\":\"172.18.0.14\",\"dest_port\":37274,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2400028,\"rev\":4421,\"signature\":\"ET DROP Spamhaus DROP Listed Traffic Inbound group 29\",\"category\":\"Misc Attack\",\"severity\":2,\"metadata\":{\"affected_product\":[\"Any\"],\"attack_target\":[\"Any\"],\"created_at\":[\"2010_12_30\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Minor\"],\"tag\":[\"Dshield\"],\"updated_at\":[\"2025_08_01\"]}},\"flow\":{\"pkts_toserver\":1,\"pkts_toclient\":1,\"bytes_toserver\":74,\"bytes_toclient\":74,\"start\":\"2026-02-14T03:32:01.947849+0000\"}}"}],"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"apijquery.com","ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-12-16","domain_rank":5139864,"first_seen":"2026-02-12T21:24:37.762119Z","last_seen":"2026-02-12T21:24:37.762119Z","alert_count":14,"request_count":14,"received_data":12155,"sent_data":7234,"comment":"","tags":null,"fingerprints":[{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"flagsapi.com","ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-12-03","domain_rank":101354,"first_seen":"2021-12-03T19:30:00Z","last_seen":"2026-02-09T03:42:56.891334Z","alert_count":0,"request_count":22,"received_data":57160,"sent_data":9636,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-02-08T22:17:48.645662Z","alert_count":0,"request_count":5,"received_data":128534,"sent_data":2488,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.socket.io","ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2010-04-18","domain_rank":199187,"first_seen":"2015-03-23T22:14:03Z","last_seen":"2026-02-11T15:37:55.185692Z","alert_count":0,"request_count":1,"received_data":41597,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-02-08T22:14:51.234086Z","alert_count":0,"request_count":1,"received_data":63295,"sent_data":543,"comment":"","tags":null,"fingerprints":null},{"fqdn":"grok12ktoken.com","ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-12-16","domain_rank":0,"first_seen":"2026-02-13T16:38:26.735358Z","last_seen":"2026-02-13T16:38:26.735358Z","alert_count":279,"request_count":93,"received_data":8282868,"sent_data":42936,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/popper.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","size":20122,"data":"","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-08-10T23:04:01.006057Z","times_seen":12329,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/gsap.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c2ef3c39a4b4589bd7282fc0daaccea3","sha1":"45ca3f3c7378d73434d33194859e1cc2504df732","sha256":"e3170dab622cbd411128e0d8c927c2697c98e052c938582a44bfd948a5e2b95b","sha512":"b591741e741d69d82efe848c612b774a56bd02e6c250c3752f7cf2046b46d977b04247c84e4550c835cd0921f185c2aa4143328b9e7c8ad56edab80edc71274c","ssdeep":"1536:i1BwKyDBpQvvtMOeqZ085JjhBhWDs06WPewGanr6:6wNQPC8vjhBhLLWPepE2","tlshash":"2663f9dd3292b42343565161447f0a0bf33ba998640f0918f269e5ce7d3c99d42bbf7a","size":70856,"data":"","first_seen":"2025-03-30T04:22:37.532333Z","last_seen":"2026-08-04T09:52:53.022655Z","times_seen":78,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/main.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2766560e5446c3d71e3ba4922630dd93","sha1":"1ca4a5d1c3aa33c4b493492484c17508982988bf","sha256":"9ee42fc4e590061e13640795def55137c1a1165b92ccf134b24163a20d222341","sha512":"1eb8fd688c9b10f0b4111c989d3f342fbb09c461564b56581753f84f2ef65a4ef3d0491adcde1fdfb8506c6e71b438961ccd033a1638320a437250ce360caa54","ssdeep":"96:1x8g2hIewgLJAWJmDQbQLFIKJcWHzYDbLCGFORVwlBwIfAi1GZcZPvcMRREG1KvN:1AzChgQLgBmGFORmAiPs4E","tlshash":"b6223f456c5a10b23c77e3b5ab2b7600fb7a121b9601ce5279ff00441fb2719a19ddee","size":10162,"data":"","first_seen":"2025-11-04T18:16:11.059278Z","last_seen":"2026-07-27T11:09:38.06267Z","times_seen":50,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/swiper-bundle.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"254f4cb7566a60c212786f9dd2d2596b","sha1":"5f3b14b0ecd6172cf897c64fadec73460d6eeec2","sha256":"d3422c182871135666da685419bbed480a08f51fead9546fb95965a6e47450a3","sha512":"db0f39a8633d6a95d6f4481ebec6384b87e7248533e94ea65e52db8032a9841bb087b8cf40d69def42e5e56fa9708ac9eab20c1a98cfd02c58190c0ab329c869","ssdeep":"1536:qIJcfGRELR8Nxb0LzGhd+IWzGolxUFnOk8+ILDX1ftgeQV9qDlUpf/arWcplXvQM:RJDNqLz2vHnOk82V9SAXiTnXpk07jl","tlshash":"9de3f8896220b57646e316db93e4c621b3b54540b80ac8f470b94c9f597ec9813feffa","size":143046,"data":"","first_seen":"2023-09-28T20:09:41Z","last_seen":"2026-08-10T20:22:32.743846Z","times_seen":5148,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/countdown.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6eccd44d13002452f69c0d9d198d3ab","sha1":"4aa54a0d27c5eda66d9c78f6085f8015d09a1a2f","sha256":"d8702cde5c6e252ac0fdb01b1766e0695e79812b97f2f56c8f6a4271662a998e","sha512":"696953b08194844ab6f8b40d03b5aaf8eb0b6a8b8270619a1c15b3a14f5db8acb6e889877b5da046d4278f8ebcf29ed05071be27808c6fe5f0819f0b62a43e91","ssdeep":"192:fQHe5p9diuBGpy4hiNey+SCGByoibvbrakjyPdebeDZnmHqvSsk4JmSXqSG95fqs:f5YpTvr9uDYqvSsk4JmSXqRpxUeMQZ","tlshash":"e8221e0cb7f71191956b71290fae00082236d24ba48add597ceca3c82f2587c55fbfb9","size":10006,"data":"","first_seen":"2023-03-07T12:12:23Z","last_seen":"2026-08-10T21:31:44.603721Z","times_seen":639,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/odometer.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","size":12147,"data":"","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-08-04T09:52:53.079076Z","times_seen":715,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.3.2/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cbe62664e9305f8871de91a6d8d9a08","sha1":"2afe29828d4ecd270162fd7d636e5e7d3ae4d64e","sha256":"22cef11b55876f2098ae12b812b21918d64394dd8d776c33071254a81f4d49be","sha512":"37925b64c113925fb449987997c380d95c527c5d76d28c1f432cb9e220174c920abaa027dc0f53acdcf5ca9079e68f1a494e4cc5aa1d120bfbe30194be05329d","ssdeep":"384:UZSQ3CJM9pXFnVtnQbd/3M1ShjwnkiwIph5RZLG5AebfkzMPvYdZ19TTmHyBKiim:E3CJM9NBKokBSXLGGYYh9fxhC4f","tlshash":"2c03c688f291b06087e37165447f110ba23a642964cac1ccf639d9f29eb8ecd7167f79","size":40868,"data":"","first_seen":"2023-06-13T16:03:33Z","last_seen":"2026-07-27T07:37:48.979706Z","times_seen":74,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"29d0c84b9d1d8da446a6062c6a840ad9","sha1":"6d6b3a6065667c7c50d92f3889c85ed65a9ad784","sha256":"3c3cbdb71d0d2c22f504f4d63d8a6ffe8d250cde7e58300619be35b6bbab26a1","sha512":"52cfcbf2f7c3521c5a6c6120099ee6822d16e04ffbc04720da925a11242c8c2050f9cfc8d864a6d39a0036ac599f701080195a29a7c5e8d3e9308b91f9f0390f","ssdeep":"","tlshash":"428004d533c350004753117c04571cc4d034447014444d405040d4531c570315115c7c","size":37,"data":"","first_seen":"2023-04-11T21:31:25Z","last_seen":"2026-08-10T22:55:43.951619Z","times_seen":741481,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/jquery.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7c5d401dc5392672ca71672f208564a0","sha1":"0d7beefbe3302d7b0f216732073dd7c8758eff51","sha256":"baa5d477bf24e8fac5dea470e12e916c33b3643113e46a0ee57915c11ebedbef","sha512":"1c40939f992c825bd4bbba3903b7f726c822a378c60c92f243f9c84f64e2d72ebe213a92738904df6731c33a591d5f5dcfe8334a78142ece2913014e5de9b36b","ssdeep":"3072:csByB9TCt/sUp7PA26wJC1WZOdQxGmvX8QQapO1ai:hByvCt/sUp7Pz6wJC1WZOCgK8+O1d","tlshash":"08f3958a77e631315207f03a9a6fc848f136584f268d9d05790c62a5af1583c97faff8","size":171595,"data":"","first_seen":"2026-01-04T15:47:29.538908Z","last_seen":"2026-07-27T07:37:48.916164Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/bootstrap.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4800bcc26467d999f49b472f02906b8d","sha1":"2c6c0a58345a09d3761230af823a4e4852b12643","sha256":"de040986d9a3ed89d5d5f9ad6d5727015e9e238c2cd13af8f1b55909386d0864","sha512":"ca4675410af4272ff8664bcabaa5a7e2217796a3d9ca28fd891bfab06a8b45d4cf918ebd617ebeef0bd51a6b1d05b8887cdffc39db08ec70018ef12893a668a5","ssdeep":"768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed","tlshash":"3043b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","size":60635,"data":"","first_seen":"2024-04-09T12:24:13Z","last_seen":"2026-08-10T05:18:18.669022Z","times_seen":4255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/smooth-scroll.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"83b875e128da852fc445d67cadd009cf","sha1":"548def8d903e36120d0f66112d78aecf0fc48ad3","sha256":"401ad2d9a585405cefcee3c5dbba8b545e567cfa9c63eecb3cd403d41c1a1d6c","sha512":"42944a22bfd434efa21af9cc701f1fe9252384f2fdd0e97bb3d0b1141fc62f35f6256227c74b1f02ff2eb022fc6a616564b7f97618019a75d0e7212d51fd85f6","ssdeep":"384:aTF73DPRPKB443CLMacPMb89wuo/ao0ZmgGAeplFvtVbJ0+CFRqz6A:apDS445Pu89bo/o8rrblPmLMz3","tlshash":"b0a2b69955e32c6116af613e979f92c633744053120ad925380ebf982f8ca7453f3fea","size":23038,"data":"","first_seen":"2025-08-29T11:52:54.213434Z","last_seen":"2026-08-04T09:52:53.036288Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"aa049e2749b8531cb8f233c2f64fc2b2","sha1":"b611a5a62c1813ae5b4763378b3a4a565556530a","sha256":"e52e51d5897d7a179089ddcf8f5de7aeb3ef4f27b054b63e937cf308b685c9e2","sha512":"fa951f3911de780608d6235a597758320388dff58cf18dd584a6941ac88cc36cac7d52caa72b678ee6f4dff47ee23955ab282714d03e713ae2bed4cb73a3c14e","ssdeep":"","tlshash":"71a0128471d6e4004b7320e40437448490396c60348c848051048c721c651108236c1c","size":79,"data":"","first_seen":"2023-04-11T21:38:58Z","last_seen":"2026-08-10T22:58:24.949792Z","times_seen":237546,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/bootstrap-dropdown-ml-hack.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c898a23d06bf74e00839925781d2fb73","sha1":"8e9a0dc8a71408c3624aaa2e83881fe2b6d047ef","sha256":"0a409a8b0d90bf9ea2f5e4237171b7a141e2bb68a0877f131090fa9e6a774c9a","sha512":"4a5b53580cad8e509bfc3687649002329bd1dee480b130f4bc09484f13485f1eb1796c2180f106017acaa96e44d9dc8c14c271baff26df73e10e51975e7f1e93","ssdeep":"","tlshash":"99219bd8f35426ba01eb66ba16a756857ba768c8b04081383035cdde3b945ca2205ffd","size":1117,"data":"","first_seen":"2024-08-19T19:51:47.85669Z","last_seen":"2026-07-27T11:09:38.160786Z","times_seen":139,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8df1c0bfaec053818374b8e00992a4ca","sha1":"79664d8ea6db35bd592356598a903f51e7e11194","sha256":"0039bd8453fcf0a638c46ed4fed45bb525ef47c35e564b4687aa442ce5fc5afd","sha512":"e02204c4eb7025c20655d53783eb633dfd744029239f45419ae5c37ecc8157a7627daa0a6183c8c489da94e65174f950c8e10e1e9a969f25e1dead453e421bc3","ssdeep":"","tlshash":"d401ce46237019341d3ba8ef565b13ec2552f2227513d8502cce940e28b6dcdea1a7df","size":825,"data":"","first_seen":"2026-01-04T15:47:29.652878Z","last_seen":"2026-06-06T05:56:30.076759Z","times_seen":43,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/gsap-split-text.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46699ffa70ff06a2af7723d329b89c76","sha1":"13fef23e00572d0bef4594ba4760931622369d25","sha256":"ae13acf4f5fff4c8d017d6f244bd9c2b9e6a8b236a92028aa1844e8543213deb","sha512":"16bd14a005a279b118aae00247186722e37dd16940482036e6951208803a3c6e26443f6cbaaf7b4f7678c8cbdd6ef127ac212b827a58057f77f3c2d4de0cfbaf","ssdeep":"384:erEawZ1w8LNjr4lQWszZus4/CaCKgiLEW:UwvRmj+aCKgiL3","tlshash":"a36295b010216f216172125399561b1ff0a8490be923db37dbacf0adb340935ebd7af9","size":15205,"data":"","first_seen":"2025-06-19T12:39:55.090542Z","last_seen":"2026-08-04T09:52:53.031171Z","times_seen":68,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/gsap-scroll-trigger.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"656fa09a811b94f597bff00f110acc6d","sha1":"e39b3ab7943b0f4218439d798aaa1f95a9b53575","sha256":"682c02f2244438296b056b9b8f59eb8b464f79eaa76fdfb798eaa676154694ac","sha512":"2eb24a24a3537b241742a2a6038f78d48193c03ff74c6016a48b49ee45e49bb17c36dd87a21a10e542c56ca95cc5220f8ba1c885d79bc32ea4eb85659edad24b","ssdeep":"384:sBdfDFqm2m+W5A/uJJFffJH4ukQIVK7FV8ZdrVbrha4L9vWqOMMtSyV9MsR72QIz:8djYWJJRpnIw7FVA3x9ROMMtSQ79TFU","tlshash":"4d0308ce3245b07267ef62ba912f0206733614d9681f4028f625a4e93c7e57c877be9d","size":40286,"data":"","first_seen":"2025-06-29T00:34:56.041248Z","last_seen":"2026-08-04T09:52:53.049702Z","times_seen":71,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/cursor.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"50b80c8ebc0a8be25a21df669d2321aa","sha1":"f5ed141638c5299e7fdf52b4e6f19659b2b19245","sha256":"70dfb0a2db9abe6c1a5f3f15eb23d26c93f98ec1a823f015c14001d7ccd2af32","sha512":"e3298619109a89e436b9442c4af275e4e1275887babd995c3c8cacdade18b98bfde6b1bb219fed564480c14bafcc4d851bf08b3a6320b51fb2d457f583e3e1a4","ssdeep":"12288:U9eYo3QR0kOgJ73measJt3W8GXltcpQhsCG2NlKW7WMhmZ940PP5UnaSP:U9eYo3QR0kOgJ73measJt3W8GXltcpQf","tlshash":"0ed4b4897e4611264933b37adf6ba14df73a822751054145bcae93982f7082482feffd","size":607532,"data":"","first_seen":"2025-11-04T07:43:31.448384Z","last_seen":"2026-08-04T09:52:53.07563Z","times_seen":60,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/magnific-popup.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","size":20216,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T22:46:57.778549Z","times_seen":73531,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/aos.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","size":14239,"data":"","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-10T23:02:51.995458Z","times_seen":22705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/appear.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a5562f4c5ee9be56af4f1476f3ab847a","sha1":"dae0c59843bc215b0e194642c92961d569e6af36","sha256":"084fc308e9fbbf4b63b2b829f86d01f2cd391043794a15b56273a1e6396f9283","sha512":"0c28c749c77ccaab08e9ec3fe5d9b7d816143832f2082f7e165eea1a12cf01b46a773b27b702b4964de3f52c383b3166ec199a3ebef047ab0cd3428b1c9e1da0","ssdeep":"","tlshash":"7c21bbca79c6bca183fb702c562b72411171953f824249a36ceecdbc3aa6c513d23e5c","size":1270,"data":"","first_seen":"2023-07-29T22:13:26Z","last_seen":"2026-08-08T08:11:49.648588Z","times_seen":208,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_3.png","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.649Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_3.png HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 43257\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-a8f9\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=acNz65NKK8c26Y2D99I9M0NzprVD%2F0S%2BqKnuRc9xsl%2B0K7S1an64dPxcL5mRb7wTrrPWbdFBJWFBYZTBFLXkbLg%2BhrUXQD%2B92Kf3wVRax%2FE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97eef78ea4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":43257,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"71b168a9cfdebba3e3fe5861e997976c","sha1":"92fb4230f57307c09f3cbb48bbd4333d539db222","sha256":"3dda8b03e2294299d30dba173c9baa349ec227e6bbf9f12b61b94b40bf9ba70b","sha512":"00d9621724551a3f7c605007c4cb42eec31d3004858ac2994524ca6f8f7e5d9ae56c2ff8c2d5ec320439bd16353ed5b764241e58c2a834e3fdf65a7213a4eab1","ssdeep":"768:xS8sGm3JTg3byVYyvoC11yADWwRCGKaZFGKAJZpuskmwS6s:0/g3bQY61cADfffG7ZYmlD","tlshash":"2113025ad5ff3c48f87eac58b94203121748a8f4dbb70e6d2f099098f5469e0635e637","first_seen":"2026-01-04T15:47:29.570271Z","last_seen":"2026-07-27T11:09:38.057221Z","times_seen":48,"resource_available":false,"data":null}},"time_used":302,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":246,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_8.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.661Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_8.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-15c31\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oBzv3e5V5CgRXAAFtRuaNW5N4SEno1aW6qfJmiiLC5VoInIk4TrDdIE9h5Ced7gIIM3Wll%2FrHw6zj8N4qZMUDv6nSGDzL8UeF3IoRMmDi1A%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef78ef4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89137,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100\", baseline, precision 8, 400x400, components 3","md5":"02ae49aa79766332d34f10638518e585","sha1":"488e06dfd3aecf20ecd0489a291b9b2300ffd403","sha256":"8c1fee9a20a3b5f8384065623e3a1cf930fd40a4fd071881ca9a7256641f5578","sha512":"fd8efdc3516e4306520312c29b1d200e623fe720b24a5c1fa7177117b906c983eda3eeb2cd0c7c965ac3f946b3384058c2588f96ba8c59c8dc886b4ddad6181b","ssdeep":"1536:bA2PIMPEil+OqPAlsJ9Fb4IV8AZWIwJXpeWXbDgoEimpD35jLS38rVXsojZ:c9TkqPAlsHFb4M8AwICXsWHgPimTfQa7","tlshash":"b593123a6f03e5da79e7355bb56c22548c632237bc6a060f51536b7bc3091e5300e9ba","first_seen":"2026-01-04T15:47:29.554603Z","last_seen":"2026-07-27T11:09:38.159944Z","times_seen":49,"resource_available":false,"data":null}},"time_used":367,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/bootstrap.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.671Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/bootstrap.min.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-ecdb\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tSTk%2Bgaa93fyeynqbtWMfA4lvprFgQX0CLas9R%2B8ZYZOaxuVW6sSo3aj3smf4HxMLPifRIdD84aYOuvbLMdlJ0IdlZyztxE9ayVnAOCyUXk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88fa4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60635,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (60356)","md5":"4800bcc26467d999f49b472f02906b8d","sha1":"2c6c0a58345a09d3761230af823a4e4852b12643","sha256":"de040986d9a3ed89d5d5f9ad6d5727015e9e238c2cd13af8f1b55909386d0864","sha512":"ca4675410af4272ff8664bcabaa5a7e2217796a3d9ca28fd891bfab06a8b45d4cf918ebd617ebeef0bd51a6b1d05b8887cdffc39db08ec70018ef12893a668a5","ssdeep":"768:WkN++EvGHWyOOY/uwAxOlU5iBNY5XPxyvTPBVRKwi/C9rfz7uxk6yH8Xae53XC7e:W0xY+t/Nhho1d76KV2O9Ed","tlshash":"3043b6563244b9330ade84e68172430bf7195d98b547816cb5bcacde2b7dc827273bb8","first_seen":"2024-04-09T12:24:13Z","last_seen":"2026-08-10T05:18:18.669022Z","times_seen":4255,"resource_available":true,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/ping","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:06.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"POST /api/visitors/ping HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grok12ktoken.com/\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"url\":\"https://grok12ktoken.com/\",\"timestamp\":\"2026-02-14T03:32:06.854Z\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 03:32:06 GMT\r\nServer: Apache\r\nX-DNS-Prefetch-Control: off\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Permitted-Cross-Domain-Policies: none\r\nCross-Origin-Opener-Policy: same-origin\r\nX-XSS-Protection: 0\r\nX-RateLimit-Limit: 1000\r\nX-RateLimit-Remaining: 996\r\nX-RateLimit-Reset: 1771040823\r\nCross-Origin-Resource-Policy: same-origin\r\nAccess-Control-Allow-Credentials: true\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self';script-src 'self' https://cdn.socket.io https://apijquery.com;connect-src 'self' https://apijquery.com wss://apijquery.com;img-src 'self' data: *;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nX-Powered-By: Phusion Passenger(R) 6.1.0\r\nETag: W/\"20-9ymQHAAxckWftkeRgMR9g+eyth8\"\r\nContent-Length: 32\r\nStatus: 200 OK\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7585c12e78855d87b071ab6185b2d17d","sha1":"f729901c003172459fb6479180c47d83e7b2b61f","sha256":"197c1a3c1348ec6b2165f302a2b51af9d759b7d32a15baf995c48dbdfcc1cf8c","sha512":"0038fa1ab83af03ff9198835bf19892c647b9864e2150a99e41378261fc53572394806467ed897311ebce57470e65d915b7afc2951b725a7b268b1d4392e529a","ssdeep":"","tlshash":"0180000a2823ec0fa3ab0002300030880a8002e00a8820c2a8fc8e088388ca80002200","first_seen":"2026-02-12T21:24:45.382694Z","last_seen":"2026-04-21T00:55:27.033756Z","times_seen":39,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/ping","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:16.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"OPTIONS /api/visitors/ping HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://grok12ktoken.com/\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nDate: Sat, 14 Feb 2026 03:32:16 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nX-Powered-By: Express, Phusion Passenger(R) 6.1.0\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With\r\nAccess-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS\r\nStatus: 204 No Content\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_ico_hero_section_bottom.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.603Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_ico_hero_section_bottom.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-1bfa\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=raesZay2pdwC%2FmRco2d4trYIVHK5x0dql9U1cXSC7Mu6Kj6nXkMDaSKa8sBQ6XbqGmh3dlZSiyEnfzJdaapeLs%2FhCGiDE9J9dFo%2Fc%2BxSJxY%3D\"}]}\r\ncf-ray: 9cd97eef48c44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7162,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bab5d1db10ec874e31cf2688d943ab0a","sha1":"8a3b304de3f90375f60d9d0d42586ef2858b321d","sha256":"e63394e0c0076f20582049a18311329a5a1b5e537a71d75e6d50dc1a79394358","sha512":"733257f896fba19c5f66e8fa5817c350521015abdfcc4544f1218c1b7cb7dd82482c08e96e5a44209f9f6edde5cdd88938e4aed02f1f39084ee2832945042550","ssdeep":"96:23nzJDX2wo51wMSp9jdW6Shs/qNYhNY9NYzNYWPXNRhCqgPQ/9DAuS4+:inlDX2zmX5W6Shs/wc8MXuJYRAu4","tlshash":"b2e152f5966178f5fc71c75cfbc64481a12bf27689934754c0bda73e2812c88acaeac4","first_seen":"2026-01-04T15:47:29.5912Z","last_seen":"2026-07-27T11:09:38.097873Z","times_seen":51,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":254,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_circle_3.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.445Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_circle_3.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-16f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2B14TQfOYQmF0q9dDXe08cs6UiAPOchJ6JkTOt9nfy%2F4XVuQIKNDNuvaoVp84%2BEjEYdQ6L0Oxyfaim4MNtv%2Bt8CEySNDSlWP8OMVfqmWj5E%3D\"}]}\r\ncf-ray: 9cd97ef4e97c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eb7b46da956b3beeabe87d6f8ef797e7","sha1":"d8ed6657f54a6722ba0dad180689b2a09bce409a","sha256":"40597cd114e40c8a153ad070f21965da415133fb3928ad376075aff74cd27364","sha512":"7c5f46fb4fe5e24d742cb7e952615700865adc829d8b68c8ffacae8f480a6fd23e39b4cbfcf6904a2bf8868f6e3cb96de5ed3fc400f04314a316f12134f3f99b","ssdeep":"","tlshash":"3ce0203ee55eec67e668c49dce69e839816a41e794c58261b0c0ff1d601c5c2390d2b1","first_seen":"2026-01-04T15:47:29.578949Z","last_seen":"2026-07-27T11:09:38.143113Z","times_seen":49,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_duble_dot.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.733Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_duble_dot.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-399\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvPYqARN59BQHZdK7eVuK4FGrXLn0YCWidgllAbsC1WmfsoyAo0LYfv28Ga%2FrVZvwH1GPszhKp6sptdw%2FcHF4Yuea%2BgzZrU73Sxr7q7gndI%3D\"}]}\r\ncf-ray: 9cd97ef6c9b74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":921,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e30ab6eaa7ecc74655462c739cff5ea6","sha1":"090562de0f8e9c27e0e23fa2760c8ecda9ab1428","sha256":"b868183a3a46a4f0238e8ad919ba40975c4928042b432dbf288083f2e3ff1db6","sha512":"9c0942793ffe62faecd63da767dcfc2cadd0613dd7094ff35b6af85a00f2b783668a5a04ea6e5b23044440c8c19f9458ad459420caab34f7f3e60b39f145374a","ssdeep":"","tlshash":"511136e5d17c9535f469c19c879fa4c5705ec5ae12818241a2e0de6f3890ddb386c3b5","first_seen":"2026-01-04T15:47:29.574274Z","last_seen":"2026-07-27T11:09:38.060224Z","times_seen":49,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/ID/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.170Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /ID/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1041\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ckkdAsDmrA%2BpxHrjZl4q0ZoXsV%2BCrsOMG2%2FuooYAmTYZAh9mHClt2A%2BgeDYMr3vnKfGkW1g%2F3kvADOwAm5qKH%2FEwAGPjT1zUAJfH2A%3D%3D\"}]}\r\nage: 579745\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 07 Feb 2026 10:29:36 GMT\r\ncf-ray: 9cd97ef96a84a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1041,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1aec1d763d983673a455df5825bf435d","sha1":"8d6feaee2ea4cb3def9cfee97f3ce18123f7527a","sha256":"504118381b69be8167fe0bff2668b023c65be311231cee7fc715edfb883acd79","sha512":"f8f39d9c069eed294c16f3c67794fde1d2e8f57517953eedd5c82e74081f22e2610c663912f6811d0f01ebce0a8b77128ad0eeb3733fefdb2d06c5fc752abecd","ssdeep":"","tlshash":"fc11e592c5d2b62be5c8c6f8e11830780bae8d871728600e840ef07e0e201a38d580f1","first_seen":"2025-09-21T15:33:36.550561Z","last_seen":"2026-07-27T11:09:38.175384Z","times_seen":74,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/about/ico_whitepager_image.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/about/ico_whitepager_image.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-21e90\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XHPunn%2Bqf%2Br2F9TiOcyqA5J0GGiYxYLSyztWQVn8SOLWLP9aieyjwZM234FQT8%2BT5dFwsSYC0M1IkkmSd2P7SbVvmDjn9y2jq56ASlgAuKU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88f54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":138896,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee905494c83ef8ea237123980204e48b","sha1":"ed42f53ec55d3706223a77dfd3d3ab381a0eb10d","sha256":"7c450b2cb6d21a16babe378a4af7a4dd9ea5b7c8d2ca11c602d2f579d146cbc3","sha512":"36ceddda5cfc251b386747317a578b967f79200b510255ceffb7106678316442314ca2cbebb980e9a9d7e7593aaf910aa01b82efc86aeb8e43a06f6d487cbd2e","ssdeep":"3072:gepOjk9EWXyxRVEt7KFrte8WbQ3J/W/AflkZWA:gU9DXeRKmhjVW+lk","tlshash":"40d31271a9938a646985f3fa8e163428202f784d0f17efd50ca12530e993c36df5537e","first_seen":"2026-01-04T15:47:29.546245Z","last_seen":"2026-07-27T11:09:38.167652Z","times_seen":49,"resource_available":false,"data":null}},"time_used":388,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":126,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_net_ico_hero_section_bg.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.433Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_net_ico_hero_section_bg.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-8cd\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pd%2FxreGf8vwvHrDrl20cc6LaeVYLiJOB8a9Q3gZUbttO6udYLcQbEBV38ODS%2B89KFY1YJw0QRV9tRwR93PP%2Fo0WYfmYEwRWomCzUSn2eJH8%3D\"}]}\r\ncf-ray: 9cd97ef4e9764c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2253,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"81b0ef12075aef34b92776717bdd64df","sha1":"7bf99f03bb5498a4b340d47f27a35aa559c74234","sha256":"910432c2db123fef10f3f42e25bc4de052d296c91f094e5ea527e2325c692f92","sha512":"8de73b4c1e99bfdf9bb0ec087f10c99a29451c882a4ec07a758557619293ca50472033a6213b7ffb775847a6abb1b9f1b705a4338194f8733f9dc586f8e225a5","ssdeep":"","tlshash":"0941336cf1683663f6acd678ff3344202819615fce8491c0c072a7ea20357ee9d9d4c1","first_seen":"2026-01-04T15:47:29.642439Z","last_seen":"2026-07-27T11:09:38.093654Z","times_seen":49,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_circle_6.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.449Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_circle_6.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\netag: W/\"6940fb6c-16f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=saerbOviub25UcsRiHiQUKfZpvAo0kKwdvfzGvL4r3zv5MKs9obGWc1OACl4vBVAoSq204tAOBo1l%2FeVhGaAQ5kwl6qHto5%2BHwoteXGbZwo%3D\"}]}\r\ncf-ray: 9cd97ef4f97f4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da5b70d04b8d13b0e25c5564d0ad7de9","sha1":"b9850a67962d10a03aa701041fc7a54edbfb2b82","sha256":"2aa29a510833d7f7334ac8bb4016346c77d705c7d1746b03799b09a23ed5de7b","sha512":"b8aed8eb80977473752bcec814886f85cfc12bbd5cd9fc79f6d9f4501221038d7eeb14bc9a53f668e8d5b05e48ee0b6db52640fd5dd0c460d7ad8f33f56f19e5","ssdeep":"","tlshash":"74e0c03ef51eec37e629c08cca59f839406a41dba8c48261b0c0ff1da01c5c2390c2b0","first_seen":"2026-01-04T15:47:29.543081Z","last_seen":"2026-07-27T11:09:38.099231Z","times_seen":49,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/IL/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /IL/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1882\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Vz9peNMovyiqpNTiwnrHHGQ%2BoVxHd7TuraBI5x3YAWhB5x550b7opC%2FY72aV7dvGF%2BRQ2V%2BPBM0gj6o9mVVN7QPHpEL%2FWmkNJv4XA%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef98aa4a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1882,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"6f3395cbe433f80c4ec8feb871c1d039","sha1":"543c99a9acf757613db1d9d4c0c0f012beab1722","sha256":"bcdd419ff416ab7c99024a6e1618dcd5089c24e418a7e3b4ed43df648732e366","sha512":"0edb5a382b58be835dcbdda2584f10f8cb3c9726318ed7339632f3ca0f62b853bd0b22b39990295eea53881386f8f1acf0d6b3a350902a46fe64d883ae1f8a42","ssdeep":"","tlshash":"de4119422605fe7ec604b73174386ce8a9d75734aa881302edc9f5f96ac3d889d236d5","first_seen":"2025-09-21T15:33:36.590068Z","last_seen":"2026-07-27T11:09:38.171939Z","times_seen":82,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/partners/partner_logo_2.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.612Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/partners/partner_logo_2.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-14ae\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSi%2BgT%2BBjycpppAKFnXEole13ojShOJOnq%2B8%2Fr2IWfvNalFEGikg5Zi0J7HK4ARqOEi2Q3YKzear%2BpblqBHlfv%2Fi1qx7WxpxGlSnfoKT8UQ%3D\"}]}\r\ncf-ray: 9cd97eef48c84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5294,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"197d9372640a39152ba65ab6f963402d","sha1":"5072a56de06917d1b97913983bccf9b439181794","sha256":"4973f280a50181645b3c4c87801cf78e2d09556f38357b0c5eb3f3056ea8bd2f","sha512":"1d548d3d24973beac26838d94a9d076c6384959c791f76f14d1e2f122678537e38b316083ec682331bf3c8b00d6314ecbe22062aa08d7d463f723a49af056004","ssdeep":"96:JPi7s2hDNwCm+K8zVGovaEMeInGQSBBcP8gddeEYVyKL/mEJdCAPX:Jq7TFNwC880oCDGNBQrkDdPX","tlshash":"edb1b9e9b7ac51e1da80d3f89b2914b9712b28be3301c5bc83e17db1f5150ae4854cc6","first_seen":"2026-01-04T15:47:29.646139Z","last_seen":"2026-07-27T11:09:38.12587Z","times_seen":49,"resource_available":false,"data":null}},"time_used":216,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":216,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/css/bootstrap.min.css","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/css/bootstrap.min.css HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-38d63\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P9bVV%2FOmWT0YaUNxkftOd2VJuO9wYw%2FhDeWjiTbs2ge0BCv4MuNjypAIEYZqd4jspG9oOzfn%2F02oOX8ebD89YIxbric3oKFqhUgYSM4%2FnKQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef38bb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232803,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65342)","md5":"a549af2a81cd9900ee897d8bc9c4b5e9","sha1":"c5ac1dee961cb59a045256ec203f69e317872f7c","sha256":"3c8f27e6009ccfd710a905e6dcf12d0ee3c6f2ac7da05b0572d3e0d12e736fc8","sha512":"8e74ae0384acd8f9248a448e2ed62cf0195821e7882b587df6dcb861fbd13c0973af7efbbebdc25c36fbb1bede1040588c3b5c623f808c11f714bbf9b9226e5e","ssdeep":"1536:O9YnIWbn98fdRfvO5wlP77k9P3EV98IsYRElV6V6pz600I41r:RnIw98fbV986I6V6pz600I41r","tlshash":"dc3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2024-02-25T11:27:02Z","last_seen":"2026-08-10T22:56:45.307217Z","times_seen":26245,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":300,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/partners/partner_logo_6.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.618Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/partners/partner_logo_6.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-1727\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZFpZUJzZIKv68adZ8uN3B2Nc9QLRBbMuQYShMC2%2BHuemH4Bozy%2BIP4uOYJ4wmKSEQVpLf3WU7QOLAf%2FsIVSDeeDWkEQrXCc8xeMzlcBy1W0%3D\"}]}\r\ncf-ray: 9cd97eef48cc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5927,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9dd371dd4149a6d2bb0aa3d3634f4b93","sha1":"f16a46eb28e72d81aaa1dd5bb4a4896bbde80f9b","sha256":"878011b4da3f59344ec88817609fb04d0ccc651d03c80ae57ee7ba9b7609a041","sha512":"f7332bcc07a3509f57cfc1c43bbe610eb11b50892bf95139c00ef02791aa9e07aa513e864e667eba625113780cc899250f65b5b88cba0a6bf61001f7c4912ac7","ssdeep":"96:OQEZekEVFQwDbPTMBIVzF7FwMz37SGz3X+k4/BLLSgb6TKHvVC+hn:OUTFQwDbPYBOFJwe/z3XoL6iC6","tlshash":"11c185d87bad72f0e802e7f5ce2a6064761714ba2e52cb60c7d5fe50f55106d9d88cc4","first_seen":"2026-01-04T15:47:29.559399Z","last_seen":"2026-07-27T11:09:38.124532Z","times_seen":50,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_range.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.631Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_range.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-481\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R6JrlarBfZ0AeM3doqZ2UcK8qFmnFjc5fipKo4w3Y0VEi84WlFjv4EVVxrz54KESfMpGxfOr3n298Ca37rnePJv%2BmPi5JP1ic8XhgF%2BXZKA%3D\"}]}\r\ncf-ray: 9cd97eef58da4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1153,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7ca8d666529ff2626a8c68cb3d2483c6","sha1":"a44349b004c51da19d4a80d90c3321df0b116ca9","sha256":"0247cb23ae55398c2bc7dea4e96a9e9d3e0021e90daecbef3a6082a2d79e265e","sha512":"a75b507b50034e1ef3bc67cece06cd78f94798e6dab8dcfc84ff6f087cdb47a68e35d2d4f0e67776637aa9933e28893fde2b9adbaa060e87a816ae82e9fb669f","ssdeep":"","tlshash":"8a21b112a27cec19d174c218edeae451602984c389c98358f0e9ff2b5926dc37d1abd4","first_seen":"2026-01-04T15:47:29.595442Z","last_seen":"2026-07-27T11:09:38.054012Z","times_seen":49,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/bootstrap-dropdown-ml-hack.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.672Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/bootstrap-dropdown-ml-hack.min.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-45d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PR1%2Bru8Ix%2FzA0hR9fg5U%2Fn4HUsmBy1u%2Bjgs4zi9U9MOhF0dwwYhph5WHoG%2F3KSjaktc4xxgUv9ZQuHmz20qKsOcb9Enp5L9f7zTeGxyOe0E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88fb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1117,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1117), with no line terminators","md5":"c898a23d06bf74e00839925781d2fb73","sha1":"8e9a0dc8a71408c3624aaa2e83881fe2b6d047ef","sha256":"0a409a8b0d90bf9ea2f5e4237171b7a141e2bb68a0877f131090fa9e6a774c9a","sha512":"4a5b53580cad8e509bfc3687649002329bd1dee480b130f4bc09484f13485f1eb1796c2180f106017acaa96e44d9dc8c14c271baff26df73e10e51975e7f1e93","ssdeep":"","tlshash":"99219bd8f35426ba01eb66ba16a756857ba768c8b04081383035cdde3b945ca2205ffd","first_seen":"2024-08-19T19:51:47.85669Z","last_seen":"2026-07-27T11:09:38.160786Z","times_seen":139,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026family=Lilita+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026family=Lilita+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:32:01 GMT\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2356,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"30abd5186a303fc8f732b8639aeab7d8","sha1":"229a3bc435b7a0be2ecacf33ff4a66a084cceb1b","sha256":"86a2551de05ebbdf226eae7cc03d9d99ae36455117d83f02d27632158eda728f","sha512":"59f25e988b6ba2641f8140372039ddb8982a8f37913173e7c45989f5b0f819d24d910b1d8196e1e0df3ce2133671442be3d4a5c471fba64b27a3b3c641e06e91","ssdeep":"","tlshash":"d7410155043bd54097938cc623cabe33ee2ea1603444e5787ffe189c9c6ac166351b4d","first_seen":"2025-09-17T11:13:44.577294Z","last_seen":"2026-07-27T11:09:38.08159Z","times_seen":58,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":82,"dns":0,"connect":23,"send":0,"wait":18,"receive":0,"ssl":71},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito+Sans:ital,opsz,wght@0,6..12,200..1000;1,6..12,200..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Nunito+Sans:ital,opsz,wght@0,6..12,200..1000;1,6..12,200..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:32:01 GMT\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4508,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"a488bcde91dcd77a2b08df7c14309b76","sha1":"ea59048de13f337d0db089e1f949cd0d53176128","sha256":"2e0feff7167d96984458be6848c7a66e14f845ee738132b11feca94d68f994ae","sha512":"ccd1fa44695846dc559b3707ce5da91c67f06d5b588da13b6eb040b4112af2beca4e25371f8707f05a8a89b697e06f9704c04942f91f34042f8aeb0d240fc0f8","ssdeep":"96:kYgrbav+0YgrbavvFZO1YgrbavrYgrbavaJc+uBYgrbavlNxOrbav10OrbavLFZs:tjv+djveyjvUjvSjjvjv1wvCnv7vICvP","tlshash":"b091e081002b5081aa47acc533cf7f39ed5eb1613451c4bdabfcd4a9dcaac5aa274b0d","first_seen":"2025-09-17T11:13:44.578431Z","last_seen":"2026-08-10T15:19:34.004811Z","times_seen":1717,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":130,"dns":1,"connect":22,"send":0,"wait":20,"receive":0,"ssl":117},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/magnific-popup.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.683Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/magnific-popup.min.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-4ef8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=asFSq%2BLZ1VYLGdnp30awR208vr3HOqqET9bnIimhKRQRxIKXlXWzkZUULkskLu66270Kt6DvFAL7wNefDA4ASfNLYB4aRzeFGzeNUP2AORA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eefa9044c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20216,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20087)","md5":"ba6cf724c8bb1cf5b084e79ff230626e","sha1":"f455c5f153f872e52265f87a644ff89fe14a6fb6","sha256":"3fddc6d28aba3c13d64cfd4847c333ff48c71d4a5a58bd1a0494ca6ae8ac1bb4","sha512":"22c361e44dde632dedaff2625f6631e2fb02ba3b6487097b48baa09f02cd81fd381ebb7d053f525e52e56655b1f8e2b89ddcc0a002e1b0c35c0a6920823641d7","ssdeep":"384:lPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpmst:lPBIt8I5h5t1qkOLCMst","tlshash":"bd921894f2b2b21383a735b8686f70093a729952ed06c855a55d94d87efcec89037f3c","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-10T22:46:57.778549Z","times_seen":73531,"resource_available":true,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/VN/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /VN/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2024\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CkHaIAFaOwxMsh%2FXc2WvnZ%2BxzQRdmF5MUkrjajaneX0kK4mlpHWTZSwn%2B1JywFD5Fpj75zy%2FF4u%2FAZgvsIer48jbb1p9PuDk9QnOXg%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef98aa0a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3d95cfeee08465290118286c6ac6debe","sha1":"95a4ea46131575c75046fba5d766591c6b0b368f","sha256":"2d9cee51162bc441a8d6fcbc7b9a285218b8e82e815d670384d7be45a718b552","sha512":"0591062d8919524cc934facb3f684cdb2ae90e50c34376d6de731b2d682e2bd372cfd9122ecf9e14970678cc9950a46530c522952ddba3762a569626149d52d6","ssdeep":"","tlshash":"71412c419764c585d4099206b59309e0ee335230f40b8ce8e77ee8753f23372b3c2181","first_seen":"2025-06-30T18:13:20.307868Z","last_seen":"2026-07-27T11:09:38.171219Z","times_seen":85,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/socket.io/?EIO=4\u0026transport=polling\u0026t=PnQD9XG\u0026sid=my17hvPYlgy55_TfASob","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.483Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PnQD9XG\u0026sid=my17hvPYlgy55_TfASob HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 03:32:02 GMT\r\nServer: Apache\r\ncache-control: no-store\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nX-Powered-By: Phusion Passenger(R) 6.1.0\r\nContent-Length: 32\r\nStatus: 200 OK\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/plain; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"e2cb065c0209d68c33bc5e034195a23e","sha1":"1d73609ab457872330efe41be7378bbc18092094","sha256":"7af181bb9ac0e27a5d51556f6002ad486a826669c21962d58694bc874a3b4598","sha512":"379af2b2eeeb3540d6c2faa1f533912cc58dfb828b8c85b50f93b5a025715ad9f462b9c8f05c9697e827846d1e97f5c9f0533131eb6be9530927d2d5623f53b3","ssdeep":"","tlshash":"e4800008a20030a220b28203aa28003880c82c22e202028ce38fca8000230aca208020","first_seen":"2026-02-14T03:32:29.894274Z","last_seen":"2026-02-14T03:32:29.894274Z","times_seen":1,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/about/about_image.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.620Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/about/about_image.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-c7bfc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g1YJ4xbYxLJxAQ0pAzsIF0JjSOj4Eyv9cCUyEVtEDLh9gxGoND0nI9NN9IsH8Nwj4I5avSmGf%2F7t1gjF3qgqWTakiyzKIRUQC2PIZr11bOg%3D\"}]}\r\ncf-ray: 9cd97eef48cf4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":818172,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8c54cec57c62416f47664db321d8c3f2","sha1":"c3208d9e4376d88b32370990550abecc1c0f10f6","sha256":"615065dfc5ab575f809ca9959c6acbc54456b8bc8a80be235d4ced9674a90728","sha512":"f2b6aa93b110da6eb18d83f87fc7e98f8d37e54180524185756ea3cd9e6aba073de7d74de81e8fae0d0508c04d23f2550cf1b448def5581f23af382e27138ac2","ssdeep":"24576:PvtnYUV/BLwMBz7LIYEr+calGVj9ztDH+r:PvFTVJxmypkjZtE","tlshash":"f00523705a5fff3d81981d02e02b4d1833b89e86d8e6e0bda6cc624247bda505d6b4f7","first_seen":"2026-01-04T15:47:29.649178Z","last_seen":"2026-07-27T11:09:38.127162Z","times_seen":49,"resource_available":false,"data":null}},"time_used":474,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":248,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_6.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.659Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_6.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-40b35\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oHNVYDDm4L1BI2oD%2FpVpMwxku7pBhwPAPP98HCUZ2aXUrl1%2FGxzH%2FzPJgGr0L4DWqTT%2B93E%2FDIEujCM71VqZaBxRd5vcdgwjazkbRTBmwsY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef78ed4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":265013,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"0a51af0076e58a29bb93b3524dd98b2a","sha1":"209744910a6b1b29e48432613ab21929b6241c4f","sha256":"bcd0ec6f3a90a2056932960b7c9c2bc197622f02f17686cad03b7917ca5f03b6","sha512":"9e1e834957be49d0d6bfd88cf00460d3cc77b764a6f19844192ee57408dcd74dd35e9edb2053f08fbca266d55a353eefe59ca182541d1484f5bbb1823af538d9","ssdeep":"6144:OTj/GeGvOQYmzvvm2GXSwwveUTMoA3riU0N8K9riptwW//0nzYc:OgvOQo2Gi9T4Lb0NL9QwQqR","tlshash":"864423e2d4e4b71e89d6bd0c4452c84113b5948a326a3c47b937dc7750aba67bafe303","first_seen":"2026-01-04T15:47:29.650102Z","last_seen":"2026-07-27T11:09:38.071305Z","times_seen":48,"resource_available":false,"data":null}},"time_used":390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/main.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/main.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-27b2\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kP9ldIevtuw9bHv6TtZJIt8QrHM0ZOeoTpMNHgmROgGjhSjD95%2BxPCVAopJh3O34yjT0jUMQzmApaO3hJ5mqLRhFtFEYN7KmGd1nfjBHXwM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eefa9074c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10162,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"2766560e5446c3d71e3ba4922630dd93","sha1":"1ca4a5d1c3aa33c4b493492484c17508982988bf","sha256":"9ee42fc4e590061e13640795def55137c1a1165b92ccf134b24163a20d222341","sha512":"1eb8fd688c9b10f0b4111c989d3f342fbb09c461564b56581753f84f2ef65a4ef3d0491adcde1fdfb8506c6e71b438961ccd033a1638320a437250ce360caa54","ssdeep":"96:1x8g2hIewgLJAWJmDQbQLFIKJcWHzYDbLCGFORVwlBwIfAi1GZcZPvcMRREG1KvN:1AzChgQLgBmGFORmAiPs4E","tlshash":"b6223f456c5a10b23c77e3b5ab2b7600fb7a121b9601ce5279ff00441fb2719a19ddee","first_seen":"2025-11-04T18:16:11.059278Z","last_seen":"2026-07-27T11:09:38.06267Z","times_seen":50,"resource_available":true,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/FI/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /FI/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1190\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbbecSe0bWdmLncbyz4uu2yvdqTNsh%2Fwt%2FxJ3Og%2FA5aWdqH%2BJWNI5XWrPhEprsc8k5HdgePRMYWY6%2FbXMTv4G2p1Y%2FtIgq1zF%2BfHsg%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef98a9aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1190,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"47bde97962c0d30df66fc0595e561ef0","sha1":"894246008571aa056f93041daf1869084064a323","sha256":"d57e450eaf26c5f017ed95a0a10bfd59936aed144dd759d88beb95d63a7e11ac","sha512":"eda7ae025f67a81f6b6fb9d6c36823d0c38bb849abcb1aaaaf44ef7c4a19364662a262b5304590907702fed2d5ef91051dca55e84f1496d30d46b9fc2093eece","ssdeep":"","tlshash":"c821b4e332434db19d2e88322b3ad4416472c9b693986054cb289a6282e83d5aba718d","first_seen":"2025-09-22T18:33:21.474742Z","last_seen":"2026-07-27T11:09:38.100616Z","times_seen":65,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/gsap-split-text.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/gsap-split-text.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-3b65\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lSGFF%2BDzGtXHgDGqnoMx4mHOz8W%2BIhKssRMFiXx5pmGnGdfb44ZiTmR4ZLAjnXs34%2BX27CnPaUVz60xjMhsRDq5Hz5RkOp%2FFZrsunH9WaFY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef98ff4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15205,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15205), with no line terminators","md5":"46699ffa70ff06a2af7723d329b89c76","sha1":"13fef23e00572d0bef4594ba4760931622369d25","sha256":"ae13acf4f5fff4c8d017d6f244bd9c2b9e6a8b236a92028aa1844e8543213deb","sha512":"16bd14a005a279b118aae00247186722e37dd16940482036e6951208803a3c6e26443f6cbaaf7b4f7678c8cbdd6ef127ac212b827a58057f77f3c2d4de0cfbaf","ssdeep":"384:erEawZ1w8LNjr4lQWszZus4/CaCKgiLEW:UwvRmj+aCKgiL3","tlshash":"a36295b010216f216172125399561b1ff0a8490be923db37dbacf0adb340935ebd7af9","first_seen":"2025-06-19T12:39:55.090542Z","last_seen":"2026-08-04T09:52:53.031171Z","times_seen":68,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/ping","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:11.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"POST /api/visitors/ping HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grok12ktoken.com/\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"url\":\"https://grok12ktoken.com/\",\"timestamp\":\"2026-02-14T03:32:11.854Z\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 03:32:11 GMT\r\nServer: Apache\r\nX-DNS-Prefetch-Control: off\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Permitted-Cross-Domain-Policies: none\r\nCross-Origin-Opener-Policy: same-origin\r\nX-XSS-Protection: 0\r\nX-RateLimit-Limit: 1000\r\nX-RateLimit-Remaining: 995\r\nX-RateLimit-Reset: 1771040823\r\nCross-Origin-Resource-Policy: same-origin\r\nAccess-Control-Allow-Credentials: true\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self';script-src 'self' https://cdn.socket.io https://apijquery.com;connect-src 'self' https://apijquery.com wss://apijquery.com;img-src 'self' data: *;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nX-Powered-By: Phusion Passenger(R) 6.1.0\r\nETag: W/\"20-9ymQHAAxckWftkeRgMR9g+eyth8\"\r\nContent-Length: 32\r\nStatus: 200 OK\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7585c12e78855d87b071ab6185b2d17d","sha1":"f729901c003172459fb6479180c47d83e7b2b61f","sha256":"197c1a3c1348ec6b2165f302a2b51af9d759b7d32a15baf995c48dbdfcc1cf8c","sha512":"0038fa1ab83af03ff9198835bf19892c647b9864e2150a99e41378261fc53572394806467ed897311ebce57470e65d915b7afc2951b725a7b268b1d4392e529a","ssdeep":"","tlshash":"0180000a2823ec0fa3ab0002300030880a8002e00a8820c2a8fc8e088388ca80002200","first_seen":"2026-02-12T21:24:45.382694Z","last_seen":"2026-04-21T00:55:27.033756Z","times_seen":39,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_expected_ripple_price.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_expected_ripple_price.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-154c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6QHy3K41VxFlDrWqmt2lEodzzyI%2BkZsOAYXLzY%2B99AyaC0J0oHQxA6AzLM2a5xHpvSn7W3SBJkhuVkV55eIu3MEAFlVD0qab0%2F0AjTSp2r8%3D\"}]}\r\ncf-ray: 9cd97eef68e54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5452,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4fb5c1cba8ae122c77cd2c436ce56db9","sha1":"28d5f171822059b1d3421278f12e6e701ec4c994","sha256":"3f90ee74bc72091fafeb5f9bbf77d5cb4a9e0e7bbb21a2ecfdd2348704d2afb5","sha512":"e4db62327dd9114b16cf62edee6e9d883db728e9652282bd533f367d6818e39bc8abfd4bc558777d604830dc875c412740480f9aa6252eea65ab8a6c9e8ddec7","ssdeep":"96:/rsuC0AVZfsaf0FB62X2WHucTLGMW00rzNSha+gnLOhTXqPlQaLzuNBo1i:/rBGffMFDOc0NlLcTXuyPF","tlshash":"90b1854ca3a6a668f100e7e8c753f8703d571ec52922d82c87fa6d26dca804d5cb8dd7","first_seen":"2026-01-04T15:47:29.553521Z","last_seen":"2026-07-27T11:09:38.113782Z","times_seen":49,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":191,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/CN/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.135Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /CN/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2109\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Avsnc5VPjzZJxy1tutwNeC%2BfKtA%2B90EhLcOWF9%2FxOgq5GwSQToZhvO1V2GvjWQuu87NyOZNJTVqnzSrm1HCt31BB83Xxli9qA0Trxw%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef96a7fa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b2fa0be9affb84002363db5b7436e3c6","sha1":"ea92f5323ab3d637e8be03bddb8c66665232cf98","sha256":"bec1310a920bf50e32ec7769a0013c662594a9f83cab4142aca5f212a0f65fbe","sha512":"62ffbba24729727cff53f46363ec18d013d7d0f2058e9027bb3f1d54067355731ce0f822f63b30a62895c719260d29f96d284bb76d5852962ae32e0674b3eb10","ssdeep":"","tlshash":"a6413863c3650822ee1a2429581ce3677ee59817b52b36cfd0e36c762d61060e74ef13","first_seen":"2023-07-06T21:15:24Z","last_seen":"2026-07-27T11:09:38.103377Z","times_seen":148,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":10,"dns":3,"connect":3,"send":0,"wait":6,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_4.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_4.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-18c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QnMNJbRgSxUIkn6fiB7dYZLXp3rlj25YqZ9kA85%2F84sR0v6c8n%2BXMd3iAa%2B5%2F9FQlMjM%2BbfjdipgieoDSdr%2FPX0zy7N6PjpunAOcbVIzNh0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88f34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6340,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 680 x 680, 4-bit colormap, non-interlaced","md5":"f3196d76dc65533fdf5d7f1793c910ff","sha1":"f4679aa15871d7f456513d02a3ceee266b37d1e1","sha256":"da1855b6973775858162416b88ed35c826c9a0ec6295e606bec46bd4fc5a6f6b","sha512":"8601e2a56998ba9bd2c1526cb1365bc357f44074030fcd1d56070c4888624c28c2c1c55c3bb892e0147906f549d55e46989f21ebbc94294571866d927e72e532","ssdeep":"96:X9MtbCnZzkvAqwH1yTnCe0CaRASXGvZUUSXxV76H0fdxajG9FiTeh9:teuIvA1eOcSUShJM0VxHCa","tlshash":"e4d1af0d4ae1aaf4e6340c7b40932cb33b6501b8a673a72f7e7fb4558861bf040854db","first_seen":"2026-01-04T15:47:29.567081Z","last_seen":"2026-07-27T11:09:38.102684Z","times_seen":49,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/services/ico_service_image.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.633Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/services/ico_service_image.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-4995c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1fKGg2hCdJxX1SQllbIUF9iDPONAT1k4uk%2FNSjkZ0cElOC%2FHYP9MW0CrKm7FHKvDz2Qnjy432cn2iJsrTqwUyfpCf%2Bwc5cJSfUTkYJBVrzA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef68dc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":301404,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"80fabe2b54d50e0a5f93a6f816821709","sha1":"7b3be85d2e3267fecb509fe420754ed7030fd9b7","sha256":"d9de4bbdeb45fe935051c2c498e4a9e9e5bd888bac1fbe3509a325d4588689c1","sha512":"39b5ce2573e62583ae465feffa58d9fb16847b91d0291ad6b63313f53870f131602d50e36d6c5f7fa11976480cbaa605c68055e26fa99500544cb6753a791101","ssdeep":"6144:LTRb/R6YwlUA6ts/Wt+MUUBLvcuhpur7gl7iKjdKJTg:qvl16tzUKzcuhpY0l7iKjuT","tlshash":"be54233a5189d189c1be4ff495322721ca6c41af1f0e60e3ba2757e89b62176df1ed03","first_seen":"2026-01-04T15:47:29.587195Z","last_seen":"2026-07-27T11:09:38.153403Z","times_seen":49,"resource_available":false,"data":null}},"time_used":405,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_dollar_2.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.634Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_dollar_2.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-72e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vHNoQf%2FV0rFLmSvOgJjhlU6ft6dw0gyul4iXQfWsmQOgjmjpxuzER2ZyHVJgFh%2FXWQ62FdGE5z5xn6GEwz1VkiwfZtEqsx1DhD%2Bz0MsZFT8%3D\"}]}\r\ncf-ray: 9cd97eef68dd4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1838,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3f0b7d1fd5116291266656c2f1eb31b8","sha1":"dd964dc0c00d9921bab498dcf217541322fc0a8e","sha256":"ce181ab7c8a3f25ca2e45ad4a190fb5d1a4b0ab0f8ee2b7e1fec410fdcceac76","sha512":"750fcc3144fc7ad5b1512162e3532c8f908e09ac2e6ecbe59772bcfee422efcc653f63b813e3856341b484900deeb6f4563a8b900ef65fd32c128ba07de02813","ssdeep":"","tlshash":"8531ad14832ec678f04614ac095cfc30d912999bbac7d5f091a52d171cb98fe1d6e6f7","first_seen":"2026-01-04T15:47:29.548447Z","last_seen":"2026-07-27T11:09:38.166135Z","times_seen":49,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/swiper-bundle.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/swiper-bundle.min.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-22ec6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FTB6qNsNsrgpzjfm4l9N8aIy1T7dNJ5ZpOkqgDm1KUErpzvTNahTAls2EALa78YnBx5gzxPYpKC4%2FgtMr8oO5D2UBocXdC4ldd1oZ74Fu9o%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eefa9014c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143046,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65277)","md5":"254f4cb7566a60c212786f9dd2d2596b","sha1":"5f3b14b0ecd6172cf897c64fadec73460d6eeec2","sha256":"d3422c182871135666da685419bbed480a08f51fead9546fb95965a6e47450a3","sha512":"db0f39a8633d6a95d6f4481ebec6384b87e7248533e94ea65e52db8032a9841bb087b8cf40d69def42e5e56fa9708ac9eab20c1a98cfd02c58190c0ab329c869","ssdeep":"1536:qIJcfGRELR8Nxb0LzGhd+IWzGolxUFnOk8+ILDX1ftgeQV9qDlUpf/arWcplXvQM:RJDNqLz2vHnOk82V9SAXiTnXpk07jl","tlshash":"9de3f8896220b57646e316db93e4c621b3b54540b80ac8f470b94c9f597ec9813feffa","first_seen":"2023-09-28T20:09:41Z","last_seen":"2026-08-10T20:22:32.743846Z","times_seen":5148,"resource_available":true,"data":null}},"time_used":321,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/backgrounds/bg_image_1.png","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.440Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/backgrounds/bg_image_1.png HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/assets/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 47024\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-b7b0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=McWr97ufSreDvkTysIQfIqY0QEva8ffvBRJiI0KZEGBo%2FTKxXkLupCzN62gB93LiZD4ifBpXAA%2F6a5J%2BX3wUS%2FyIlxSKHO4Xu5durCXgzCA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97ef4e9784c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":47024,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1612 x 1960, 8-bit/color RGBA, non-interlaced","md5":"bc53fb1e7aa219d987549417e3699dcc","sha1":"02b8ff64f1f2223e370ca6834302b6cdb2b084bc","sha256":"79e4f17dee2759399214c8d89bac37c3f52916a68a3caae8daea1f4b1874b8a0","sha512":"96c383a92e33a720f1e0e41c141e3a1fa76336f534fadf3f4c7731fe1dc773fc1e655f41eefa6c3113f9462387712d770fbdec493e302fc05d66a0d7963ca6c6","ssdeep":"768:qLKRsN2H8zzmtgpMr7Zo5GOnkHneAjtH2TF4n:q+RsNjz+t7Z6D7krn","tlshash":"ec230f74d2c918b0eb9a02bf3b180f9a67f2ba08ddc1739b853220b5fddde5d8055994","first_seen":"2026-01-04T15:47:29.650967Z","last_seen":"2026-08-04T09:52:53.069944Z","times_seen":51,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/SA/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /SA/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3172\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FsJ21N1YNwql3qiPII3tSxxNn1zMFPG96R%2FFuccfLHLnP%2F0ryE2dI163E98bXQSgIq8oXePjQYehREqSRCxpFl0dpIWddMqMQZzpQ%3D%3D\"}]}\r\nage: 98741\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 00:06:20 GMT\r\ncf-ray: 9cd97ef95a79a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3172,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"745c7afc376ea42458fbc71d554009c3","sha1":"6b994f1014180691429703cefe0bc6e28a015030","sha256":"c06080acde309e11bea8b4becd65ae2e4d67c785ef5c6d9965b4340b9ece5c0b","sha512":"675b70adb88c50df47a028bf555703fa589118b2c16108ff906696125e3e51dcb5ce2a235f2950cb937003b4cefe4cf37e3c4a66b0b8c21f6752d70df18b008b","ssdeep":"","tlshash":"34613c97646b35d8c5f8b0d02ebd1219e0b4e5606d2f236d9fdd106539978b4460db0f","first_seen":"2023-10-31T17:27:49Z","last_seen":"2026-07-27T11:09:38.14047Z","times_seen":105,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":13,"dns":4,"connect":1,"send":0,"wait":11,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_chart.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.630Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_chart.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-7e3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xCVa2A9Mza2i%2B0yM0Y7dMt7g6Gpt4bsXABXFcLisDEmvezMxTlzjaQiMKtPFmfc0ooEbNBhSa7A69iFSoAZYS7gsIBmrCsbCbOSjANDXv1A%3D\"}]}\r\ncf-ray: 9cd97eef58d94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2019,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7399084634b8c9589651af835ab3402a","sha1":"24d25087608d28143504bfd61b8ddca84daa6e04","sha256":"21910d8f21f184878dee0a3ab3a77d4a189fefa437807d4a2656c5be0a4ad515","sha512":"fc859af83ead6c6a5046b68b15f0be9ec1623367c9edebb77559866b57294e4ae0cc29505897cd0a6de50b5d5e3a9faa1d2bfa2a02980bb491106fa71aa6276a","ssdeep":"","tlshash":"02410036e369ec36d264d26cdea1c456212951d7c8cac2a0d1a8ff1e64348c37d1ebc1","first_seen":"2026-01-04T15:47:29.583893Z","last_seen":"2026-07-27T11:09:38.07041Z","times_seen":49,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/ico_coins_image.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.638Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/ico_coins_image.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-47a3\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r0L5Cx7Zq9kZ2r6i%2FSjyoVIgrbd6h8blzLjdkNdDrsgaZiGHjmz5tcC9Ol6rTqr13c9Ucl1qnWDWEvX%2Fk8r3hRq3UkPMNHr%2FufZKe0MHwFU%3D\"}]}\r\ncf-ray: 9cd97eef68e14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18339,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a6fb07b9d658a03f6e79ae9b2ec3f9e9","sha1":"ec8fafd2f3335e4201515d3c36aa1c94859670ae","sha256":"9a3893e6c7c77b6ca1153adb88f387174b02a8a0fee00a54d7e7d43d12ece7e4","sha512":"b0f7f04f9baead2558bd8d2a7fd7da3a4d084bb941bf591c490c81fdbb29ce494ffb395359afe8052edb8528ba28a46b749e17f2c34ce6db8fd046ccff0223d4","ssdeep":"384:Xb2gtk63TXFhT+nvYAc9Tad3luy7nyLKzPcL93q7Od3h:XLeITXF1+nvYx9Ta1luWnzzkZoOX","tlshash":"d482a4ee7bb05ce544c897efbf1190bd38a2c2b75c568a1cc19d5f1d1880c6eae16983","first_seen":"2026-01-04T15:47:29.582977Z","last_seen":"2026-07-27T11:09:38.093002Z","times_seen":49,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/gsap-scroll-trigger.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.678Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/gsap-scroll-trigger.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-9d5e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z50CSarmnt1k%2BnCvBQDbrJO3hHg4Y%2Fato%2BEynNro53LulVobcBtmRIEI%2BbDK%2BRKEpjdHO9eRq30yowXMTMPitfW8TWSdybCiCrdXhQqyCzQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88fe4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40286,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40286), with no line terminators","md5":"656fa09a811b94f597bff00f110acc6d","sha1":"e39b3ab7943b0f4218439d798aaa1f95a9b53575","sha256":"682c02f2244438296b056b9b8f59eb8b464f79eaa76fdfb798eaa676154694ac","sha512":"2eb24a24a3537b241742a2a6038f78d48193c03ff74c6016a48b49ee45e49bb17c36dd87a21a10e542c56ca95cc5220f8ba1c885d79bc32ea4eb85659edad24b","ssdeep":"384:sBdfDFqm2m+W5A/uJJFffJH4ukQIVK7FV8ZdrVbrha4L9vWqOMMtSyV9MsR72QIz:8djYWJJRpnIw7FVA3x9ROMMtSQ79TFU","tlshash":"4d0308ce3245b07267ef62ba912f0206733614d9681f4028f625a4e93c7e57c877be9d","first_seen":"2025-06-29T00:34:56.041248Z","last_seen":"2026-08-04T09:52:53.049702Z","times_seen":71,"resource_available":true,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/RU/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /RU/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1328\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XGt1vKyN54XhjWGNsY3im8eRh68MlXDBKEmo060YupzhGf%2FvDeoyS4RtZqUlUbxKO0zLRchnGGihYYtd2571Q3EcqNR0VWoOPMg7vg%3D%3D\"}]}\r\nage: 257522\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Wed, 11 Feb 2026 03:59:59 GMT\r\ncf-ray: 9cd97ef98aa3a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1328,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"6ef17f4c3424b38c046ed1d0246f68e0","sha1":"c3426e9d2d5ba4f6796cd760fb324074240cfa88","sha256":"f01d865d438d4324b6c9a99d018c6136574bf2b71d3d5161a12756db5fefa3b7","sha512":"f4734a82822295d10fd389abe636419bf3d65399181ff6ee9ee47824c16db3c0827be4b46fddc933bc208139f2f817eeeec321422638493592e76684428ebeea","ssdeep":"","tlshash":"6621d591d683aaa9fd2b3850833d73788d709117259c0af0019164f16971ef2869bc0e","first_seen":"2023-06-09T07:36:07Z","last_seen":"2026-07-27T11:09:38.141349Z","times_seen":184,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/ping","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:16.898Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"POST /api/visitors/ping HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grok12ktoken.com/\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"url\":\"https://grok12ktoken.com/\",\"timestamp\":\"2026-02-14T03:32:16.870Z\"}"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 03:32:16 GMT\r\nServer: Apache\r\nX-DNS-Prefetch-Control: off\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Permitted-Cross-Domain-Policies: none\r\nCross-Origin-Opener-Policy: same-origin\r\nX-XSS-Protection: 0\r\nX-RateLimit-Limit: 1000\r\nX-RateLimit-Remaining: 994\r\nX-RateLimit-Reset: 1771040823\r\nCross-Origin-Resource-Policy: same-origin\r\nAccess-Control-Allow-Credentials: true\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self';script-src 'self' https://cdn.socket.io https://apijquery.com;connect-src 'self' https://apijquery.com wss://apijquery.com;img-src 'self' data: *;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nX-Powered-By: Phusion Passenger(R) 6.1.0\r\nETag: W/\"20-9ymQHAAxckWftkeRgMR9g+eyth8\"\r\nContent-Length: 32\r\nStatus: 200 OK\r\nKeep-Alive: timeout=5, max=91\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"7585c12e78855d87b071ab6185b2d17d","sha1":"f729901c003172459fb6479180c47d83e7b2b61f","sha256":"197c1a3c1348ec6b2165f302a2b51af9d759b7d32a15baf995c48dbdfcc1cf8c","sha512":"0038fa1ab83af03ff9198835bf19892c647b9864e2150a99e41378261fc53572394806467ed897311ebce57470e65d915b7afc2951b725a7b268b1d4392e529a","ssdeep":"","tlshash":"0180000a2823ec0fa3ab0002300030880a8002e00a8820c2a8fc8e088388ca80002200","first_seen":"2026-02-12T21:24:45.382694Z","last_seen":"2026-04-21T00:55:27.033756Z","times_seen":39,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":70,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/css/aos.css","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/css/aos.css HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-65c5\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z3BbUevK3H30OoEmN5MU1ZLubxd30IyFP7eDDts3YVTabVblC%2F4P5j3IAw1%2BvkmZJnqNKWYP3HdqZcn47AvPjuqvaGH3GrMFq8%2F2cneoHRM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef38bf4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":26053,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (26053), with no line terminators","md5":"847da8fca8060ca1a70f976aab1210b9","sha1":"0557d37454b67f42f2cb101e57e5070fb1193570","sha256":"1aa8845fd06e475aefe733d4e55b36a92fcd487975049c8172341827ac9cc03e","sha512":"d5c2bbf1ad68fa1b7625c696ea0f0e5d8c2aa5ebfdfba1aa3a4cfdc6604df625148489dd2adc7020b19660e4a26ce2a32ec11d8f28d9bd80eafdc67035e6a4d3","ssdeep":"768:CMJihoCcZCOud8G8tKS65wqsZQ1G+dM2cl6iCRotsV84sxIKcv4g01UeEPEQEB4D:CMJihoCcZCOud8G8tKS65wqsZCG+dM25","tlshash":"f0c24b5a7a4cd100bf831b4762df2a0859347588e5301986be3f35ca2cd5ce6b973fa9","first_seen":"2023-04-05T07:18:45Z","last_seen":"2026-08-10T22:59:32.794547Z","times_seen":43542,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/css/odometer.min.css","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/css/odometer.min.css HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-cfa\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4iwvD2UCKfqh8zY7jPOqHvz9s9ggxKo4XDyWEgRBOLiceYIgbtFeBsrVdkPoUil2yjkaOsbjqw42eSH9snWdVfAeaIJwYezOsAwhuVJyTwU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef38c24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3322,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3322), with no line terminators","md5":"118873996cbbf7b1ff839ea78e6f8a6e","sha1":"f9648d7019bbe4e571cef69d34c3359e426e01c7","sha256":"6187a45d59805c9dcb970e0c4428e9f685202b6af87749bb0fa0aaec6840403b","sha512":"45200d1b41a544d9ed108cf5147eab5eb62044a4c2969c405695fd52d69e8d9f8e49874de4c1cf1021ee3f87d5a7c77de2e9cb606720e8a76fd9d6b347bdb959","ssdeep":"","tlshash":"546126291f60132863367406b6d91761fefcf9616223e59db31aa44bce03db9c399b07","first_seen":"2025-05-07T21:42:09.694284Z","last_seen":"2026-08-04T09:52:53.035518Z","times_seen":144,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_estimated_launch_price.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_estimated_launch_price.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-5db\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=53xpFiDyqj1twfQMQh70TJxwMoEtcDss2bzBFeCrnJzxrsjDq%2Fpme6PyzsnGlmmKymYe9O2mGVs%2F312nzxlRqRB72255Hd4n3BHp%2BfMZ5yo%3D\"}]}\r\ncf-ray: 9cd97eef68e44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8f99f39bb75adcb7a4c2e2539dec21a9","sha1":"e8bbacf82fce8660d9107660bff2b0f0139a6cf6","sha256":"f388626f442db1ead8325955a04144e948f86732919cbf37c9220a05c0706185","sha512":"a5780567868bfb900ae2a595abc3e8abb456f40f635ed05caae9763ab9e837e3fd9b4ed9946ecdbc7e2c3bccf3e947dc09467279d02197eef11401090d67111f","ssdeep":"","tlshash":"b931546ca17896f8da14e6fcc2efe469291f10e56912dc3e23e05c6eac0049f3c486e1","first_seen":"2026-01-04T15:47:29.573476Z","last_seen":"2026-07-27T11:09:38.064564Z","times_seen":49,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_5.png","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.651Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_5.png HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 126288\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-1ed50\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dE65nYJmtnPSvvNOt39V3WEDXi0twk0PLKRJZVaQQaTu4wspxtXqgc0vS7eX5aXOrdeA6uMYIX1eftkBCd2hmw59FkItFSxyKrU5q3e27KY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97eef78ec4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126288,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced","md5":"3f1d23a0f61e1a7fdd9aaf2fbbea2d47","sha1":"98614c7c0aea1f7f2f618906f02bb85616f8b02a","sha256":"d78d3b6f6fb26db6b9f3b934c36dbc989472b45a7f2607fff34feebeb9057dd4","sha512":"ecc5cb23f48ea653d156eb2972bc4eb69f8ce43c2a02dc8230cdb22db764b08395538c60d786637b1d235656f9557d100741d04627b9acde073087d957221368","ssdeep":"3072:D5wM0ZxHwEcQ6fngdUASLO5Yi3nIQY8Qd5jCS:twMMYQHdULO4QQjx","tlshash":"75c312eb9835ccc48e93d250115914eb1c6c666c097f92bc159d0e817deb98acfb19f1","first_seen":"2026-01-04T15:47:29.606136Z","last_seen":"2026-07-27T11:09:38.166892Z","times_seen":49,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/countdown.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.681Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/countdown.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-2716\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o36ZHGIcDNifJ98hsDoXtYsHMUJrasuVtbHFOMa7nanHfDTW8GYD8nkxOJwyibEGe%2BNqiAihost5IyKfDMW66lV4ROk%2Boz9KogvwBvSSVoA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eefa9034c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10006,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"f6eccd44d13002452f69c0d9d198d3ab","sha1":"4aa54a0d27c5eda66d9c78f6085f8015d09a1a2f","sha256":"d8702cde5c6e252ac0fdb01b1766e0695e79812b97f2f56c8f6a4271662a998e","sha512":"696953b08194844ab6f8b40d03b5aaf8eb0b6a8b8270619a1c15b3a14f5db8acb6e889877b5da046d4278f8ebcf29ed05071be27808c6fe5f0819f0b62a43e91","ssdeep":"192:fQHe5p9diuBGpy4hiNey+SCGByoibvbrakjyPdebeDZnmHqvSsk4JmSXqSG95fqs:f5YpTvr9uDYqvSsk4JmSXqRpxUeMQZ","tlshash":"e8221e0cb7f71191956b71290fae00082236d24ba48add597ceca3c82f2587c55fbfb9","first_seen":"2023-03-07T12:12:23Z","last_seen":"2026-08-10T21:31:44.603721Z","times_seen":639,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-14T03:32:00.026Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u4hZxaW3sIrObOCQp%2BXsmqoxBY2iDyDsOQgwyBRF0Yfx5MbvzYrRk90v1mFXNP7DQ1pc82S4JQNosTe3kJzZe3b8hceWThA3qg9zYcyaoyA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9cd97eec4c5c32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Magnific Popup","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":183539,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (339), with CRLF line terminators","md5":"932b95d7b877e2796856bd4df6d80094","sha1":"a6b94e64929d9a3bc4fe748ce86bd91231c7dc2e","sha256":"c9e3513af20bdc7ce125f71953c21f426ac5127047ed7a8f2f8b4078ce6ac3e8","sha512":"795632e5583e2814c3e321e8f03afe15ade51a1ea980a10f67e4a8b37ead09c147d0035f2f9d0e8ba25a003f39ebb7e8c359503c26e1ae1eafbcb64a1095af3d","ssdeep":"768:7x06xWULwVSSULwvGxUDwUp1k7iaUjwdIopLIIUCFqEQZpmuEijHX7naeUDww54w:JWULwV9ULwvGxUDwaaUjwPeUDww54j8","tlshash":"6d04317160c4a16302b3c2d28f295fa6fe958253cb46458976fd6beb3fb3e05ac07560","first_seen":"2026-02-13T16:38:35.02222Z","last_seen":"2026-02-14T03:32:29.915972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":24,"dns":9,"connect":1,"send":0,"wait":190,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_3.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.665Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_3.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-18c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kO%2B0c3zZnGiWTz0xTGCre0ZBk80ADhZyDxeEvVBI2vPnpMTQpQcEUXg7g1BBjFpf4wuUAk3BGjl5ERCoiwf4%2BIUtij0p%2Br1e%2B8Z2DmUdH6I%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88f24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6340,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 680 x 680, 4-bit colormap, non-interlaced","md5":"f3196d76dc65533fdf5d7f1793c910ff","sha1":"f4679aa15871d7f456513d02a3ceee266b37d1e1","sha256":"da1855b6973775858162416b88ed35c826c9a0ec6295e606bec46bd4fc5a6f6b","sha512":"8601e2a56998ba9bd2c1526cb1365bc357f44074030fcd1d56070c4888624c28c2c1c55c3bb892e0147906f549d55e46989f21ebbc94294571866d927e72e532","ssdeep":"96:X9MtbCnZzkvAqwH1yTnCe0CaRASXGvZUUSXxV76H0fdxajG9FiTeh9:teuIvA1eOcSUShJM0VxHCa","tlshash":"e4d1af0d4ae1aaf4e6340c7b40932cb33b6501b8a673a72f7e7fb4558861bf040854db","first_seen":"2026-01-04T15:47:29.567081Z","last_seen":"2026-07-27T11:09:38.102684Z","times_seen":49,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":239,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/jquery.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.669Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/jquery.min.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-29e4b\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NKNZxvIX92b7CFLC%2F%2FWY0rcNoA6ClvXLb4DWv1HN2sD5h2shbfIohA0rHKRJKwFGd943zIBFjyhTXbNGa8xXHT6mkhAiYb0OwqJ5eGV7orw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88f64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":171595,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (862)","md5":"7c5d401dc5392672ca71672f208564a0","sha1":"0d7beefbe3302d7b0f216732073dd7c8758eff51","sha256":"baa5d477bf24e8fac5dea470e12e916c33b3643113e46a0ee57915c11ebedbef","sha512":"1c40939f992c825bd4bbba3903b7f726c822a378c60c92f243f9c84f64e2d72ebe213a92738904df6731c33a591d5f5dcfe8334a78142ece2913014e5de9b36b","ssdeep":"3072:csByB9TCt/sUp7PA26wJC1WZOdQxGmvX8QQapO1ai:hByvCt/sUp7Pz6wJC1WZOCgK8+O1d","tlshash":"08f3958a77e631315207f03a9a6fc848f136584f268d9d05790c62a5af1583c97faff8","first_seen":"2026-01-04T15:47:29.538908Z","last_seen":"2026-07-27T07:37:48.916164Z","times_seen":17,"resource_available":true,"data":null}},"time_used":397,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/about/whitepaper_image_bg.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/about/whitepaper_image_bg.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-8cb8a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KvfDMQ6mRe%2FegQZP3VDYyQHitLyrid4KbK0eh7O2QA9AuUxl0k1B467Pp3hdtAiLSc3I9rMqgV4G3angNXWxSSJtQaXhuj8QH%2BhlsqAFODU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97ef4f9824c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":576394,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"344a47b29d5b9c75e0d9012d6071baf8","sha1":"c9cf5fae6850f714bb5f9c667ad7f6b08eafc876","sha256":"e0c394e2bccd6e6722862903984076e813551c8e0704e3a1836ddba12cbb4ad6","sha512":"2cdb701d9476f432568d6306f82fc9f2fe65a0f5cab39e8780cb448c3bcafc0ad93c696d0c15a09274d93bcea9378f742c409d142f0ed531fd22d61339b87c79","ssdeep":"12288:4muMpFVCZc7NXwVwVfimklkZkYSi0lisQeM1QpoxAzJx4WLpXzDsi7:PpFVDgVs7gOkY/Js61QdxLXPsM","tlshash":"0bc423f596a8f705ee2ac0f766638488255d8879db3800d913c9dfeff28a943d2171e1","first_seen":"2026-01-04T15:47:29.614933Z","last_seen":"2026-07-27T11:09:38.087685Z","times_seen":49,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":129,"receive":295,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/socket.io/?EIO=4\u0026transport=polling\u0026t=PnQD9Qx","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.875Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"GET /socket.io/?EIO=4\u0026transport=polling\u0026t=PnQD9Qx HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 03:32:02 GMT\r\nServer: Apache\r\ncache-control: no-store\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nAccess-Control-Allow-Credentials: true\r\nX-Powered-By: Phusion Passenger(R) 6.1.0\r\nContent-Length: 118\r\nStatus: 200 OK\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/plain; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":118,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"42c64f80e8f18ffc1c9668f1cf84d2b9","sha1":"1dbeba7c94ef778b6c1ab241bf282e89e48be296","sha256":"e23085c7e1c4d1c29fd1d3b63b0750e3a8013b00a1f0663c8eea8d36e6a6ed9b","sha512":"884cd76e93fc575d3253224d439eaa3ff0decf7011c9c0e296b2bb29d50d4846c7d76901a2a93eb4ebb68eb5cb448a0eda1187412232647e44a9adc4e0b96008","ssdeep":"","tlshash":"bcb02b80810de3c6fa20b6c0b4f35e040414785f49c1108c32200444450b400500163b","first_seen":"2026-02-14T03:32:29.919897Z","last_seen":"2026-02-14T03:32:29.919897Z","times_seen":1,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":116,"dns":78,"connect":16,"send":0,"wait":59,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_bulb.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.626Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_bulb.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-b56\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HW8%2FUIBkxH17LJAtkT8YDqQi%2BXjiuxRvmO9Dluf5rBzmOtm8QSH%2Bkz0O2bDx8%2BMY7nadSrjBli3zj4E%2F6juCuv62GP7tD128xRj6TPKarDk%3D\"}]}\r\ncf-ray: 9cd97eef58d44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2902,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ac09565ebf437924809d158354435bd","sha1":"d45122f27b14a6df578575d9b44a806328535c6b","sha256":"378ca87865449a2d1d53522ac305ab48bb81ae796ebd3067c631998eb4f2fcee","sha512":"d427a960c802d849fdeb6a140850de803a207f4f4677fa96ff944e4b84a7b6acb1fb5e53e6a3638505c5912f284c0db7ea02621e7117b80f9e6b5d7f2c3a495b","ssdeep":"","tlshash":"565151eae3dc39e0fa05d7f09a265d11257b34f53b67c6ca06607da4ec221fe049c886","first_seen":"2026-01-04T15:47:29.552427Z","last_seen":"2026-07-27T11:09:38.069377Z","times_seen":49,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/aos.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/aos.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-379f\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zUHBlJeLdOkO%2B%2FFip1RBYZFhEcLPzb6nicmWwsRvIepneeA4OL%2B69RBKbCcDrudRjqAwHH6eelpCfeMg3BfGt4Qv9imP3mp3osZzEPzN9sw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eefa9004c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14239), with no line terminators","md5":"70b4897108480dbe11c443c2ab7679c9","sha1":"70dbfd38a0f1fc3b1a7d9fadab58786484c34f17","sha256":"f268612ba59ead1b24353bb77d66783bcc435aff1c22be5f93c40bac3869968e","sha512":"466084fa711d299e394e96c2260bd8bdf103cf75da8869934c997a19fc884d6ddfa2e92ce253533a4a0c5d627d580e9a40efb7155f1c8c0e9fbd3a2c3a06c2ae","ssdeep":"384:3I2fNaC8QiHbcggNFUWTgMe91sa6XCZy54:42fNaC8QiHbfgNFUWg17slXCZy54","tlshash":"a752e6dc3681f0a617a794f7827f600ff2f14835245e90a0d269c4e27db58ae8673e5e","first_seen":"2023-03-07T01:14:45Z","last_seen":"2026-08-10T23:02:51.995458Z","times_seen":22705,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/track","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.107Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"POST /api/visitors/track HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grok12ktoken.com/\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"url\":\"https://grok12ktoken.com/\",\"timestamp\":\"2026-02-14T03:32:01.849Z\"}"}},"response":{"raw":"HTTP/1.1 201 Created\r\nDate: Sat, 14 Feb 2026 03:32:02 GMT\r\nServer: Apache\r\nX-DNS-Prefetch-Control: off\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Permitted-Cross-Domain-Policies: none\r\nCross-Origin-Opener-Policy: same-origin\r\nX-XSS-Protection: 0\r\nX-RateLimit-Limit: 1000\r\nX-RateLimit-Remaining: 998\r\nX-RateLimit-Reset: 1771040823\r\nCross-Origin-Resource-Policy: same-origin\r\nAccess-Control-Allow-Credentials: true\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self';script-src 'self' https://cdn.socket.io https://apijquery.com;connect-src 'self' https://apijquery.com wss://apijquery.com;img-src 'self' data: *;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nX-Powered-By: Phusion Passenger(R) 6.1.0\r\nETag: W/\"12f-bmx1REEywjvOqacY/4FHl0Mj8GU\"\r\nContent-Length: 303\r\nStatus: 201 Created\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8040c23c0b2b08e381ef902a43f36787","sha1":"6e6c75444132c23bcea9a718ff8147974323f065","sha256":"cead3e1c417b4075660a15579c0fa1267a99344f14e1223f52e33fceeb25c35f","sha512":"407ed276416f6ebef038d6c4586f5414d22cc160ac0382ef7a2b0b6851e1983dada226aedb85a06bbd8223c0156426429a856679df62e1c7b38dd03245d40b48","ssdeep":"","tlshash":"aee07236163429bc4a032280c2c93f8c07d9b13b1b02dc80fbc81b484e00f732e0a167","first_seen":"2026-02-14T03:32:29.923307Z","last_seen":"2026-02-14T03:32:29.923307Z","times_seen":1,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/IN/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /IN/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1992\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CSRo%2BJq%2BkNobpcXQYeU9XYcezXMHzFOZ0uqpkrh6p1GW1KYdPIpXrYQJoShVD4BUT4xfBtpzD1S75NZO6EJgqHNDQDoEpXbBKx7zbw%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef95a7ba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1992,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"0dcd490e639eec6657d6f1f7c1de7bc4","sha1":"ebb577ad52bb17bbea4e894eca614a39e4a0ecad","sha256":"e271e69b57ae9e9d548a8a885319943fe807ce4e3b61cc047d4fef46e082b382","sha512":"610e3c7d8cbc92e2929eb378459618569fefef9e6595fa3386064b46f1a77722f119a747612d8aac1f134adfd8896baa4d2d8336afe199360f1b95bbb9f743cc","ssdeep":"","tlshash":"18412a66103efef6a19e662029412740c9f8d94416aa34622c7074a11db2f5ebba674a","first_seen":"2023-08-04T15:07:23Z","last_seen":"2026-07-27T11:09:38.118757Z","times_seen":112,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/TH/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.320Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /TH/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1468\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BNbQiVSyLaPB2xuN04n%2Bya0GaPSZJ9KJYo7oRy0Xj23tciySc6Gjouuv9GQLDlA%2FZwBiuysJP7WBqq9X8RSvR9OEihVn6R9GYpYnBw%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef98a9ca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1468,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"19a895f515f9a71b7e9208c5a7852185","sha1":"3451e9e2091be26d2a23e58f8541740faeb8425d","sha256":"73f4717db8634048dc13ace303ddd67d8461cfb06af1aa33219f8c6e98e5e04b","sha512":"3c9457a22f48edf8e5ee5c6470dec14217d04863d8879dcf3bb24e98d84e3f8afd7d5cd7502e9b79272e664febbeddc394c9223978f27ff05778d11e928755b7","ssdeep":"","tlshash":"69311973fa95b2faef9b518fdc2a763c48028eb3051a206392e4010f110929166f77f3","first_seen":"2023-09-27T05:02:22Z","last_seen":"2026-07-27T11:09:38.122278Z","times_seen":111,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/css/magnific-popup.min.css","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/css/magnific-popup.min.css HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-161a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aBtHKEWQPXkdj7d%2F2vpGCHGxuTW%2F9hZbSgEtMnhPYOURKCTWCvYIKCalRKgfGBn5OfNyqlJYo%2BNzjYumhbntVa394pc63ejxciS7qm9BQSk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef38c14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5658,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5658), with no line terminators","md5":"fa7b637b2e4db9da796d3743adb3be10","sha1":"fcee93aed608e27cb7fea3241826f77718da302f","sha256":"5bbb2011bb8aeb248b452130bf35325e2f2d66801922f46a4d81883f2fd15f1c","sha512":"8d2fd47014a1a89b226185d67a646a179e1dfb739040b6fc17c9f17fb5768b487ff4ced6832bca817ce1c123b02379280d6f352a0032c85781e63e1156c87ffc","ssdeep":"96:1+ASvI4RSTNbnPbtqtMaHMoB4hoFaZkV2CnYk:1+Fw4RSTNbPbtqt/ckaZkjnYk","tlshash":"0ec165d17b513129de26edaab1939b191327512bf30310efdbd36809c7cf488066b6ca","first_seen":"2023-05-03T11:45:41Z","last_seen":"2026-08-09T18:39:44.828259Z","times_seen":192,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/css/style.css","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.602Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/css/style.css HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-2ec74\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Gn30JjwldK0b4dHTWCqjrPaF1kuWnjMT0Af6dhJqpNk4%2FSen4tNADTKW2O8r5mCBZsdBK8HZdO8kQ0q%2BEpKeCrpM7cds9mGHSf36K1G%2B6%2Bc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef38c34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":191604,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"002614ab426b5815d7462f528bca5773","sha1":"c22289147d08bd43984c59ce97c20e380ebd4201","sha256":"28cfe5a22c9600fc6ed880606aa9f916b2f508e7442ec639374fefb6014d3759","sha512":"96b4880644d2b78e46db942504bfbd324f1e08e13692517cf35235a81e025ca48c42a02cf5eafa29c237572036d232e11cfc37bff030660bf0bf002974bc8409","ssdeep":"1536:4yaLnZqHaVG644h4Oc8owCoAmXz0n3RCcK+VOmbiEEi82Y82j2iNkgatBK467Myx:4y+G4hcnOD52R1iyyQaT9","tlshash":"0814839a91b151443927ed242bd91f6533688013d60eddf6baef204c8fc6be855a33ce","first_seen":"2026-01-04T15:47:29.558353Z","last_seen":"2026-07-27T11:09:38.094801Z","times_seen":47,"resource_available":false,"data":null}},"time_used":348,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_circle_2.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.444Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_circle_2.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-16f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Db6BsStl2EtBO2d2glRayDTAoicV5AmlCXD%2FbV3s5jPHICdiyxU3oaOaEjzUmrMu%2BykBlZg7jk9F7lYW5uf5w0M80zUTn8vZdCnnO701JRk%3D\"}]}\r\ncf-ray: 9cd97ef4e97b4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"109a7ca451f45ff9999461ca927c504d","sha1":"89ff5eb15d3c94316ba44fb2c000392839765b3d","sha256":"cb6aeaff93502e8fef6f19219efb4b71ad02fbd4bd4df7c7e8973a2a849adb4a","sha512":"bf40dba0088c6ca989a590f43d6b71d6e05d41c9554cbd452ba9ccdb6e827ab9814edf655dd1afd8f85ebd8398f00595ee598d8b6d56eee7eee81525f2738825","ssdeep":"","tlshash":"98e0c03df45edc6be228c04cc558e838115e80e794c88261f0c1ff1d70188c2790c2f0","first_seen":"2026-01-04T15:47:29.576099Z","last_seen":"2026-07-27T11:09:38.131656Z","times_seen":49,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.socket.io/4.3.2/socket.io.min.js","fqdn":"cdn.socket.io","domain":"socket.io","tld":"io"},"ip":{"addr":"3.167.2.78","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.socket.io","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M03","organization":"Amazon"},"validity":{"start":"Mon, 18 Aug 2025 00:00:00 GMT","end":"Mon, 14 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"36:31:34:3C:FE:6A:94:47:2E:CD:E0:26:D6:4D:DE:E6:D9:31:A7:E3","sha256":"C2:34:E7:66:CF:D6:AF:AA:30:42:B0:50:F9:74:CE:BC:8E:BA:E3:A4:6E:8D:7D:A2:7C:10:10:F5:12:12:6A:A6"}}},"request":{"raw":"GET /4.3.2/socket.io.min.js HTTP/1.1\r\nHost: cdn.socket.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-disposition: inline; filename=\"socket.io.min.js\"\r\ncontent-encoding: gzip\r\ndate: Sun, 05 Oct 2025 02:28:50 GMT\r\netag: W/\"5cbe62664e9305f8871de91a6d8d9a08\"\r\nlast-modified: Sun, 05 Oct 2025 02:28:50 GMT\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: fra1::rcffc-1759631330302-af602456aabc\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 57d04bb9ff0f23ac1c33e083d49e973e.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: YQupawaUpQkAmVbg7QVSnKlW120Lu3TvSnH5AMk2z8fdGX7WRuenxQ==\r\nage: 11408591\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":40868,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (40729)","md5":"5cbe62664e9305f8871de91a6d8d9a08","sha1":"2afe29828d4ecd270162fd7d636e5e7d3ae4d64e","sha256":"22cef11b55876f2098ae12b812b21918d64394dd8d776c33071254a81f4d49be","sha512":"37925b64c113925fb449987997c380d95c527c5d76d28c1f432cb9e220174c920abaa027dc0f53acdcf5ca9079e68f1a494e4cc5aa1d120bfbe30194be05329d","ssdeep":"384:UZSQ3CJM9pXFnVtnQbd/3M1ShjwnkiwIph5RZLG5AebfkzMPvYdZ19TTmHyBKiim:E3CJM9NBKokBSXLGGYYh9fxhC4f","tlshash":"2c03c688f291b06087e37165447f110ba23a642964cac1ccf639d9f29eb8ecd7167f79","first_seen":"2023-06-13T16:03:33Z","last_seen":"2026-07-27T07:37:48.979706Z","times_seen":74,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":65,"dns":52,"connect":3,"send":0,"wait":3,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/track","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.881Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"OPTIONS /api/visitors/track HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://grok12ktoken.com/\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nDate: Sat, 14 Feb 2026 03:32:02 GMT\r\nServer: Apache\r\nVary: Origin\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nX-Powered-By: Express, Phusion Passenger(R) 6.1.0\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With\r\nAccess-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS\r\nStatus: 204 No Content\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":111,"dns":77,"connect":16,"send":0,"wait":51,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_chart.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.628Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_chart.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-949\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ILOy4u29QJeQ0XfH9f%2Bb8qZ%2BNv0wBj4W22sv5V876wV0FrOIuZI1ofR63FOgK8afUp9jT9APtnRcEHKKX1m3gP%2BitIozRBy1izlxQh9Hvnw%3D\"}]}\r\ncf-ray: 9cd97eef58d64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2377,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d9c3e05fa3559c446af119fce64ac6d4","sha1":"be966f0aa576a28519e0c657dc681d1bcc10ccff","sha256":"3ec8ace4b96d87a6538d1d9bf9d89da1bb2dc93def60c788ad465a14a812eaca","sha512":"12b0dba0f2886a63708b927903a1c6c7360de5cceb807a3ee52f59cfe1a66cbf2f229c92f02e44fc43ec60a9c9fb14b7f0d798c2c9716cc2e82e0c872c398485","ssdeep":"","tlshash":"b541444ae3e4cb20f7889395ede0e4313dd42af33546c27c86a5fd46b42544c2848bd3","first_seen":"2026-01-04T15:47:29.61238Z","last_seen":"2026-07-27T11:09:38.135718Z","times_seen":49,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_section_divider_1.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.632Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_section_divider_1.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-305\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9jTL2CGFEGQBUIieRHh08K7avd0pbJvRt7kCnlo2ZPqJ8isd9lV%2BxClvhRcFoC5C4rQxfbgro4MyubxS6g6YJZHuL3XPzYBLcejUixsgs%2Bs%3D\"}]}\r\ncf-ray: 9cd97eef68db4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":773,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"037520848e077fe17cc4b052e077a5b6","sha1":"ff54e2925c7d98a58bf5eb6b2810235e59b6f00f","sha256":"e9fa146e3e2f93e2a27bc51fb9c0aa4651e209fa30af798fbe347481f7c511e6","sha512":"0143c9bcbb7482fbb3d2d2fc73877614a8389f430f9abdc0286168a348cddea7c1b43e3d44a591b3acfc145b326db4cf4d40fa0c3226558a2cbd81da172ce5ef","ssdeep":"","tlshash":"1601c9edd21cc932a275c3d4ad68947188ad069e1b84c392d0d0efae3034ad61f5f9d8","first_seen":"2026-01-04T15:47:29.605175Z","last_seen":"2026-07-27T11:09:38.089117Z","times_seen":50,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/appear.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/appear.min.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-4f6\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fIJqKiutwUfDPS4%2BUDLPz5sr5u3w%2BnqHAGGht1RIod4iYHbWarqq%2BUC18QEMjsiss6GNNWd19qSFwDnrx9Te6FBQShELL1X0Ouu%2FSdFRx1M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eefa9054c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1270,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1270), with no line terminators","md5":"a5562f4c5ee9be56af4f1476f3ab847a","sha1":"dae0c59843bc215b0e194642c92961d569e6af36","sha256":"084fc308e9fbbf4b63b2b829f86d01f2cd391043794a15b56273a1e6396f9283","sha512":"0c28c749c77ccaab08e9ec3fe5d9b7d816143832f2082f7e165eea1a12cf01b46a773b27b702b4964de3f52c383b3166ec199a3ebef047ab0cd3428b1c9e1da0","ssdeep":"","tlshash":"7c21bbca79c6bca183fb702c562b72411171953f824249a36ceecdbc3aa6c513d23e5c","first_seen":"2023-07-29T22:13:26Z","last_seen":"2026-08-08T08:11:49.648588Z","times_seen":208,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/odometer.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/odometer.min.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-2f73\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UvT5z35soDuG5xw1QD9ajA6R1EaVX6uX0%2BJnnzxQgS6jNFGdGVnQ73oXjWoKxaRR4ULrKEXEo5K5EmXmiM%2FojC3O%2Btg8BSg2xYKQw58%2F71w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eefa9064c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12147,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12122), with CRLF line terminators","md5":"c35fce96f1ea9d38b7245102bcdecefc","sha1":"de238751846de9d3ca6880d04b25dc38de5e2e38","sha256":"23bdcb34c21f829e7a33294fd040c1c54376b6ed1d79157d87c87b93d5f7e476","sha512":"8df8ef1c8e44b5ee8645c8482e6cdb193cc7f4cc9e26c2e73de328d98e74bd204cd2b2c84c9ddfbdff392f76629bd126dff4b753c0be3622525126bd0af0df25","ssdeep":"192:X2vNkLkN/cBQiCmchU752Z/mE7hJrky6XHdKyXmaWZShW1Ik7IaB:GvokN0BQiX5y/m8XklHdKyXIZS8OiB","tlshash":"6042451163e1273d9307e1a1aeef8d44b7b989296194808eb61cd4d9a831c348b7dff8","first_seen":"2023-03-07T12:08:36Z","last_seen":"2026-08-04T09:52:53.079076Z","times_seen":715,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/NL/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.275Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /NL/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1445\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G25tvkKNjFysZYFkwh9TfsHNSShQnvZjir5hvW%2BRbY%2BHbv4ETxrxAhFrkk%2BUV2QEIAktdEjWXlEi3zyB%2BuvCbHI4vYf6keP88yxVvw%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef97a8da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1445,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ed888c322fad6761169a4366cc5bc23a","sha1":"aba971fc23f8b42974fdb42739d0fd2444124ac2","sha256":"37afb8f75ec621dbe4fd2bbad826640607adc0f736f76dcbb729af25900d78a5","sha512":"08a7780de2c077cec1edb91e571165ae53aa46a63e7248771c2c12833ec877948184b39c41891d1a854d532e4ca33609611c42c5a8930b52f1b6c9b6683f5e55","ssdeep":"","tlshash":"d831b9d782ea2ebddd5fd07849e734401da7dbf4f98d90a2d3725461e1207509148f1b","first_seen":"2023-07-06T21:15:24Z","last_seen":"2026-08-01T20:00:20.569751Z","times_seen":86,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/UA/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.334Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /UA/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1452\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CAgmPCB7YL2uv%2BHv9J1P5s4bLNBuAAou917jmzn3Q7uizJmmBxPu4kV%2FIeHKW91YNfnmIa2ed7cbPwN1%2F8b8ZWyszJ6mQoW0To0uJw%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef98a9ea41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1452,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"1ae9eac34a2d591af0daa430b6fb8a22","sha1":"66562abbc7e3d965881ff06d5914e0df1d0c9d87","sha256":"8c41d7064ca6ec032407b242e94b02d5665141d470136b530824345b9fe4b8a2","sha512":"16f18c3702be3ca9ca71fb1333fa2afe66889457caee9c4fd07f05ea72b0bdb9e568c7d07694009a05059713b8cdb447283093f7ff598b87cfb77f854dd13ed4","ssdeep":"","tlshash":"e0311997817b1e3cfa269834871e4817949f222b2ad1f2aa344ea22c51cc212bde3058","first_seen":"2025-09-21T15:33:36.553597Z","last_seen":"2026-07-27T11:09:38.104812Z","times_seen":70,"resource_available":false,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/site_logo/favicon_1.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/site_logo/favicon_1.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:03 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=6,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6d-16bf\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gjjW%2BEOmLOVnbm4Y9TYPSoeX6MaLIBAcmS%2BRjNmCB72tED2eNKuFVXo59Tl9mLyqvARumTGQS%2Bqh1TcFENqhT%2BUydZoTr674kp92oU5%2FAMY%3D\"}]}\r\ncf-ray: 9cd97efe6a804c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5823,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"67a0ed7bcd1c2316d9275f4d2145935d","sha1":"86b78d997e5f487247158cf3ebbb854541d072ae","sha256":"2485c53b1b8bd93686bb1d0be8710e9d466f5d3c7f3b7fcfd25e6cd9aafb1203","sha512":"5c792d48f3f0f39f05b15cb959c5d360e402e23c4afa300db0dbc215422cc94c9ea132655b823326ee2a6faf9148746bfacc03bbd53c7613ac0fdca875ab1e8d","ssdeep":"96:NzzCjzgZuPx0jagz//NsCagz//NCzm+vleJQ64ix1+G0ap2WU+AcHQ1O7jE:NzzozIuWGgzHUgzHozrEURGXDU+DAyw","tlshash":"e1c184e5b38c11e6a10cd7bcc1351cd57b912ce56fa1c28a8f919c41d9ba00e8d6bc9b","first_seen":"2026-01-04T15:47:29.616912Z","last_seen":"2026-07-27T11:09:38.096824Z","times_seen":48,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/css/animate.min.css","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.592Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/css/animate.min.css HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-f242\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hT19%2FCjA1e%2BjLisetq4tzxbk40e9YjVo2957WLSFXfeO4roiUUjNccue2UWrR9fyhORDNFlvBbenbKnV6K3%2B873MqXDVO7%2FpKwIBCO%2BUTAQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef38be4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":62018,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (62018), with no line terminators","md5":"c10921850b5ce9db03a5052ceb45e639","sha1":"064e95bd98143f4983ed3c9d26512687cb52dbad","sha256":"7f5ea25d7b20c2b3b7ca083776104d5e24c5fed557a30a483348e96dbf2ea783","sha512":"a5c0b954095aa8639748e1cbfeaf9c8e8f271e7375e27e80bb60e5845a405a7579b3f0130c0a377da906398e336492ae81ecf4b987c6d5f43c036a992d766086","ssdeep":"192:4xHSW35HeHGFg52jBW9hMoLrWn9jX5SEMSEZC+xY+MvD:KHeHMy2j2hMoLrWnBXmC+xY+MvD","tlshash":"a153d89a5ca0214857224915d7ce9fa89a3cf67324b14cfe73912c8fcb45bac13dd62b","first_seen":"2025-05-07T21:42:09.692959Z","last_seen":"2026-08-04T09:52:53.054461Z","times_seen":109,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/partners/partner_logo_1.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/partners/partner_logo_1.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-c73\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NcTTHe4E%2BZS11qfChh7dtTYFLg6tHeEuTGsos56F8hXKpRetHNLSp86RQVnikpF7cO2AOoRadFrLBXXF1hsvG4XLIQlkPTBaeezRE7WaHhc%3D\"}]}\r\ncf-ray: 9cd97eef48c74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3187,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"301d0c68c8bdff1cbd7d7954cedcda16","sha1":"6f19e58c2168256151d573723c62fa65a8aed528","sha256":"82e9f68f91d342cb2976cd914458536e7fd9af50ae4dba9830813b5ff556e529","sha512":"eae1c1491e6bc212cf4292853537ca2eaba4c9f1f7df81c36c83effed6c52decfed352203e544d6a5fe5592930685f632e732fafae4e514399c8ca13d64f70bb","ssdeep":"","tlshash":"946111c8569d65acd946d3f99a0f40763d2378fe7301c96dd3d52c06e4a00ae8859fd3","first_seen":"2026-01-04T15:47:29.631363Z","last_seen":"2026-07-27T11:09:38.12383Z","times_seen":49,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_dollar.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.627Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_dollar.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-a10\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GA48bB7DhBnNMwNx8b7Y49ub9X0qRQx7qBAkSXGQOHSOFh1QW2N9zegLwt299d%2F4Wcvm8PxRH2qqjSwdCk%2BfMVkfrr4x55OoE%2FNXhDV3GiQ%3D\"}]}\r\ncf-ray: 9cd97eef58d54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2576,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"cfb89a0f21e51ad8c03accabec5f97bf","sha1":"2c6c1dd569fee66db636d19f23326479b8e9a0d4","sha256":"98551ab1778d8df35286fef035543e56b22be02bcf10f3bb2a8b84240ecaa993","sha512":"8fdf41c746166a73b1823237e738ca611128fdf333c9ae3a6796ff9ec5b5c954677a7e6b9e44cced056d4b2b5001c7bf258f1dda9c06862fb84e71d3b2b75552","ssdeep":"","tlshash":"855154a5a3ef8598730ca3f8439abcb8a25748b93421d41447dc1ea3fb5584c1c76bd7","first_seen":"2026-01-04T15:47:29.588251Z","last_seen":"2026-07-27T11:09:38.083307Z","times_seen":49,"resource_available":false,"data":null}},"time_used":252,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":251,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_scan.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_scan.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-9a2\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D08NNN1zcg%2BKp54PB8xWIFjI1GOq5nsdi2CJJudyozeGzL%2FS2xCWhD%2B01bts%2Bim1wsJqpCMOoibX7SoWFpA6sccSaF0QzNBr1QJvC%2Bfmw0E%3D\"}]}\r\ncf-ray: 9cd97eef68df4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2466,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9551bfa937e69e08f705b047d1e1f14b","sha1":"5452668c2f4618062d21af31fc58e9360c2102dd","sha256":"a5a222473ffd99892fdf9221a2b1d6ac182a517ffe4d88c7a1bc1a8b1fe917d1","sha512":"4d3f5946da889816e3af8fefabcf73aa3e0ef9ad0baa8e8f4191b5e6ae858e653906a9d66fed79b2917c2d2ab5d5cb6f7f4c8e4ad79534ee6276b1a8c0ca89bc","ssdeep":"","tlshash":"6851c074a62d823ca948237f3c34bc74884988cd96c5e5a4c092fd677de3c6e6da95c3","first_seen":"2026-01-04T15:47:29.64377Z","last_seen":"2026-07-27T11:09:38.09618Z","times_seen":49,"resource_available":false,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_4.png","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.650Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_4.png HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 76451\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-12aa3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=espKJLCMWNY90o%2BA5lNb2XaTqiDdrLl1XtsYvBh%2BAvelRPMWKGtH1Y0W1QrQZ%2FHvaDpXqu%2FUlrgzAo53fM1tSj2HvtT9SulNSYh5VgmlQAU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97eef78eb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76451,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"c6d7ac61b76035722ef74d4cc78c3316","sha1":"97ca6487881c6ff800384e9e14c5b83f85b36203","sha256":"998fee54d513d5f20881374252ef2d3362db27d09d7c20b1728b25fcc78f4c7a","sha512":"3bc61bc28db94690bfc60ae07a0d04fd4a6e60933e8dd36754cfd6162385f3710a3647783f5b1cc93f69c349a2fcdd4856f2490c1ebe6d6a37b314921997c234","ssdeep":"1536:qJG99wVic1bnGP7ybtbruG8jmndNKIv7FlQMklNfLTadxPawu:qJpYlP7IJNdN5rDkOpawu","tlshash":"0b7312ab31657227cb4708f26f2404645cacbeec18a1d7d9c2973892043ece05dde6f4","first_seen":"2026-01-04T15:47:29.624856Z","last_seen":"2026-07-27T11:09:38.086709Z","times_seen":49,"resource_available":false,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":115,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/FR/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.151Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /FR/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1563\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XhdTqqGBCIDm2D52sjPyMlzHwqCR5fCf6wRTYFlmqKNdPCjlhKZl7R%2Fbx1MlWyiFtNmqimtA%2BgSuB5EV2OHYGf6I9HMjHwGLPzAmLA%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef95a7aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1563,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"35b23cb8a9ace025ac01e41ae8006d62","sha1":"ca90cfdaaa071586eb2235da81c7ec0c0a3eac34","sha256":"bc276a74281c1e02485a5946bcadf753999f8f5f53115b5d5fff77aa665c52ff","sha512":"561212651779129cd54e524f79fb62339ee356223f6cc4a538445599852de79ad809cd25266a756aa72e372f01d20a9b5a2f9362f2dff02e5b8ff868e10fb62a","ssdeep":"","tlshash":"ee31e79a57a2fdc4dae94294db1e28dca5bc713212c47b19e0a702f71fa060d6ba09c5","first_seen":"2023-06-04T08:01:57Z","last_seen":"2026-08-01T20:00:20.55188Z","times_seen":137,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/IT/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.168Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /IT/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1571\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fCqBOwvITWpUsVJnJ6J95GF6iekNT1lZ4fOJ%2F42OWG2VGorKLiXS7sbPKsfyPuHKPnueKayCsK%2BhdPbaQpcb0ELha3XJ0hhO1eIF0Q%3D%3D\"}]}\r\nage: 131751\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Thu, 12 Feb 2026 14:56:11 GMT\r\ncf-ray: 9cd97ef96a83a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1571,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"b5a111f02c80d1380474c9a00b3c6ba2","sha1":"d38440c5d51b1da1926a723182dccbdb4490766e","sha256":"06706dfbcc2ad630aaba10ec426f9f550ecef1fd085ea5b2831f7f83c3a7c6a1","sha512":"e4a2fdc36e922238b005311783ebe9685006f4491abcd188779d0cfa3c60c1f8c243afdd2087d55366925f66559387304736013cdcbe5e80a82781633d3dd298","ssdeep":"","tlshash":"ac3107a1e714ed65af88238a247d34a2d6298d4c3ef4ba78f94c9bd50d0890e204023b","first_seen":"2024-01-10T13:52:24Z","last_seen":"2026-08-01T20:00:20.552922Z","times_seen":97,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/css/cursor.css","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/css/cursor.css HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-1b69\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uX9TEjEWVqFjKua2J6XtTF6kfR0dBdoNMByjVneNu9ujSneOeroqDFYapLPytmu6nK%2BevfYEitVjmuis0PjEnVcMJgXwHic7WP9gNQ1Q3A0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef38bd4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7017,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"598a51d4efc48730d6a2b5c066c37a4e","sha1":"1ae33ad71e7ce94cd6d44de8043662fdf258fc7f","sha256":"c7b04061367a0b1c9cad4df79ac2c16e0f8b85f44a03eae055ae92fcfb8d42bf","sha512":"33b63b087d2bff94e55cd281b43e2d14d7aab70436dcf081405a9b36f5e0bc269a1d92ac4577b5326894d292f63aa3dc90ae9f0d78d7cf15bb380341919197cb","ssdeep":"96:x7SWUDnQ5CGdCJ3UpBbgFQEY5CSFT5ju5+es:eDn/tJ3UpBbgFQEHG","tlshash":"b8e18cb85a060185b53b980863ca6b25537cf113a547cdef7b83598d9fe37ac10d2763","first_seen":"2025-11-04T07:43:31.469419Z","last_seen":"2026-08-04T09:52:53.019456Z","times_seen":63,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_2.png","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.647Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_2.png HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 39293\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-997d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Fo9kwDDfEFPaiwpZEdhP9TCI3sKMUonsTAJjFQV0sgK0piVgN9fuSaKtHKG1spZlnwwe%2BpIWGwbL5R%2FqS3yoCMKUC45hMD3UhbROin1f0o0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97eef78e84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":39293,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced","md5":"f9a51dcd5600c504a3b3b4c870230993","sha1":"7b2d4be66ac10a6adc0ac7577e9a714c1a10a28a","sha256":"d133a755bee0b01a3a405efdf051f463f86f9a9c53a91d006f2e6d064e7b8d94","sha512":"591cbb2c169940326a6650fd6f5317f673d695c0e43f24a350153beebb0d40bc714571b87e53aaecf85632c9e5f972290784a096a70eafb1eeac831e00809aae","ssdeep":"768:Ivb6+xgy6M9+L2e7WpNFy1IuDhKqHx2rHOQV5MOx5+/PkEo:Ivb6zyR3elrJa+jo","tlshash":"a60301f257ced74a18c2ef240cfc929e83221188763f6748181a1f96a43db49ec197e6","first_seen":"2026-01-04T15:47:29.560506Z","last_seen":"2026-07-27T11:09:38.098497Z","times_seen":49,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Dela+Gothic+One\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Dela+Gothic+One\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:32:01 GMT\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":115011,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1981)","md5":"3110f94368d2b851fc07e6c8bbdc5b86","sha1":"a2c09443184d880946d0243812ca2d8de3da11db","sha256":"5cc0dedbc49580d4480d4b55ade892fb425df527e798669ccaad0797ac81b940","sha512":"50693113b66d3c07fb89e025f8ec7b9a192f4bd79c0ae170cf29f7a9762672994c0d4a7ef5fdfda7ee60d5e5c9fd5fe74083b135ac9f217ada15ea403928926c","ssdeep":"3072:/Xr4NuzYvtObb7bGq1ix6o62uh6lyCvcLJW3/Oj3FoApyk4IFiHTZ8D2hzHxWHiP:/Xr4NuzYVObb/Gq1ix6o62uh6lyCvAJk","tlshash":"e7b33e90510749cefee32ca342dee924be9964bdf981882d57f555c3ac0e09ad1c7b8c","first_seen":"2025-09-17T04:18:19.912071Z","last_seen":"2026-08-09T18:23:42.143772Z","times_seen":326,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":85,"dns":1,"connect":10,"send":0,"wait":22,"receive":0,"ssl":81},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/fa-solid-900.ttf","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/fa-solid-900.ttf HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/assets/css/fontawesome.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 902932\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-dc714\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ulbto3zsTohRUudmAOeLlVvtLyErPOQ7OAjMe8wqVhBDi2t%2BisWDlJtLhkd%2BGTo%2BfYHGAbtMAmUaKBDsfIpdViQAi%2F2xdJUHAV5Z4dCt%2Bf4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97ef549954c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":902932,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 22 names, Macintosh","md5":"e0edc621e4ffaa368d2e0677d3f137e6","sha1":"e374bb44d1834cf6eb688eabe1820aa5f7c827d3","sha256":"13da46f8e9749704bfff6b6f51a202c87facf593280dfde4127e5858c28aaeaf","sha512":"d60643fe87788d76dcf1cd941002ceef18390cac5eaa683bce2e2dbeaba684b6fd656a94187379b71105333590412d65b3466cc9c37cdaada7e009c1c9f8435e","ssdeep":"12288:ubjDzI8Psju4mzEetRorWpuJl48nnMtu9sHj3i8W0:urzDn4etRoqC4OMu9sHj37","tlshash":"eb15e6c7a3ec5e8fe4113d3883806d0e32d6663896a58265ffc7595ec0b88e4c765fa1","first_seen":"2023-12-24T21:26:10Z","last_seen":"2026-08-07T20:25:34.584453Z","times_seen":564,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/JP/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.171Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /JP/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1417\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ip9FVXZDt5OwlWmiOTdIXLZsPQck8sj3u%2Bg7JpW56jQiu3By7GKflUkt29eg8YJiiRvbG7gLAJqubeQW3kz4IghPd%2FG5x%2BsjMjWL7A%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef96a85a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1417,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"01ce5c76140f9aa0fadb0d6f3cd57781","sha1":"d85a26da86ac5ddddd472327d9e79e4e80b2e40f","sha256":"6ac97e0e589598931edc040ab70d7e051a959462e97447ca9b274df5b5adb996","sha512":"3669531867ac6f889f1e795679fd4da155448db51a0059c2da642501996686d1db06433dbd463daac029904869a478d119288ab9024954af74d19b448884af96","ssdeep":"","tlshash":"4c21e9d2109a6de0e2e0276d0787d75569963a14c009a37c52df10a1c975792b393417","first_seen":"2023-09-27T05:02:22Z","last_seen":"2026-07-27T11:09:38.066402Z","times_seen":168,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_gift.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.629Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_gift.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-1f7b\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pF1a4YKPb1Dc%2F8%2Fa6Trby7%2BNVZPJEbTAwwuE8kdciv%2BfGeijGVdT2Mm9k%2FCIyjS%2FknA5KP8WCw7E3wBBg3AHhfb%2B%2B4jrSMaI3ZLnw%2BgcNpU%3D\"}]}\r\ncf-ray: 9cd97eef58d84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8059,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"57e550e37bb9e51b282b9274b66aacee","sha1":"79bf76673aee98f171154ad17565822b3d5a14a1","sha256":"af417cd7e26259ce08aea30679d6d7af4544776ea81755696a0cb620efceec36","sha512":"f6c8fcf6b6ae770a296d9df47f2c221d14a312c1d728d031edfa64bc79ed796c237c015e9cbdd9d133de45c3ce21d0361010b824738d1d52845e20583afacd92","ssdeep":"192:w7UYXTPRByeU/+SZ/h2o/DI3LPMz2Lzhog3059KrsytPuWfehV:LTP3/DI3o2LqgQ9KrZPuWfKV","tlshash":"69f1730ad3b65bacf109b3fc8553d865a6c2af943d01d841d7d51c07e8e50ac1e6adcb","first_seen":"2026-01-04T15:47:29.64153Z","last_seen":"2026-07-27T11:09:38.162374Z","times_seen":49,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/popper.min.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.670Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/popper.min.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-4e9a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8%2FGSn1dWaUDy0KzIr6OnfscQAAScXToP5DTu2A7elJn7rp4aI5E5JkM%2Fhcr5%2BPv8tUB0rvrQcbyU69VFTKXfA5e%2B1sGRFQ4aV37J9RQZvas%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88f94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20122,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20033)","md5":"31032b08bd8e72220462d3f54f8bd69a","sha1":"871d6ef1070bd363ea390e0c8c384e47dce7f389","sha256":"c212f4b505a86352aed62b24a8f16f999f821ecbe6456c7f3c8a04bc87968782","sha512":"4cf8763b1960d73a7e933de7140d02e6f542ea5786ffa9a6d73f7e980f35308e5e69456a6ac3cb3bc0ae93880c1788147cfe5eb51ef7ae053ff0f34cb127aca1","ssdeep":"384:PZjckOxmemwN3igs6HdfGmLmnNV5LrpfV1Nn1K4kwTiO6rg3MI/9NUmJ/aZg:uxmemg3igs69TYf/pd1Nn1uwXSg3MI/9","tlshash":"f392d7dc3a94f0e5167b52bac03f011fb2379524218ee510a255d6c92c74ebba23bd7e","first_seen":"2023-05-30T11:24:05Z","last_seen":"2026-08-10T23:04:01.006057Z","times_seen":12329,"resource_available":true,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:32:01 GMT\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1500,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"924316297901b612ca90cacb95486248","sha1":"f53daf5e57ab1c45afdef5a130ab579b6e8388d4","sha256":"5da2c022161d7ab5ac473d8a9eb1cae5fb67a8a8c75dd6a3220551685a37af14","sha512":"b88f488982b02044b37098ab8a3d822b094a180c924b08c9507bbecaf86104252afe120caf2458a94078f667712e8af8da88735a42e7c960a727b9193c96246e","ssdeep":"","tlshash":"c031be54503bd240a793ccc663dabe33ee6ea0607488e5bc7ffa189c9c6ac12635174c","first_seen":"2025-09-11T19:38:49.174538Z","last_seen":"2026-08-09T22:51:18.060685Z","times_seen":1713,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":176,"dns":1,"connect":21,"send":0,"wait":18,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_circle_5.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_circle_5.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-16f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6uzQdTOoSmxUSPp3LymTPND833mcYKbPht1s%2B93eTIoKB2dm%2BNUYYHGlCrY%2BDU8DoO5vMe6glkJrL8tkSoiVZAp7L%2Bl%2F%2Bt8AAesHegCzJeI%3D\"}]}\r\ncf-ray: 9cd97ef4f97e4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1e1867efd0c4528f7738e91f16bb9f75","sha1":"efb2f3427e154290ac7e690f1e12cbf9f9c8a0fd","sha256":"5829829884d52ca71b89029d0ab9794eb5b2a5f0805c8e09e9d594c409b0513a","sha512":"28f56b261a99de2b83de45d98c84876c37c94fd7c9596f6c57f3f281b0a8207432622fafca4868d1f92844d04e39165634cf9365cb478e28815c7ce4835d48bc","ssdeep":"","tlshash":"b6e0c03df81e9c2ae228c48cc9a8e838405a80d7a4c48261f0c0ef1d70184c2380c2f0","first_seen":"2026-01-04T15:47:29.547638Z","last_seen":"2026-07-27T11:09:38.132378Z","times_seen":49,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/fonts/RoobertPRO-Bold.ttf","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/fonts/RoobertPRO-Bold.ttf HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 166768\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-28b70\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kT0%2B9zpkEngZP7d34Ok4S2BhcRGar6xB%2FCa4TAE%2BZ4nO0xV3Ai2S%2FFPGxBvwY9WlXpMos7%2FdQLpLbhxsitZu3HLb1Q%2BT%2BWg8K%2B0Pb%2FgWkZk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97ef509884c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":166768,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 18 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"81753df2d8f29007e8ff801bc985215b","sha1":"0509d3e084ea16bec954174a834273cad73c8a2e","sha256":"435226bd54191d812a6c136d7d8115162e10bedd0fc40a18610bc8797eb84b55","sha512":"978f4766b1252ec14f1a9b58a8a814ed703ae1e12be19fa10d8ed556d123cc0f001297b001f44ce00ba7e355b01dd27f3dd4d6af18400029c9b4f1de51a15762","ssdeep":"3072:dttyUcdjDIucrc1SXZS7YAA7H6FAN/Limlgamgeqlq8WS55Fa/:dttyUcd/c4/EW05i","tlshash":"59f35b17f7898702c5165d7c5eb8d375a366f8223e4d820fb1b12e59edca0c41e2279e","first_seen":"2025-04-17T19:00:52.900977Z","last_seen":"2026-08-04T09:52:53.069195Z","times_seen":65,"resource_available":false,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_poligon.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.621Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_poligon.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-40d\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdudS86M5t9XTvU%2FJWcBoER1NzxTdiRY4HonW8OtoXT5FDZtWP9JDa3b3Q1vNK%2FFX7OKi7JOWmIqB0q6HXtByCRIEVd6ZSNu6Isw8g92wlY%3D\"}]}\r\ncf-ray: 9cd97eef58d04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1037,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b0f7074692c8514cd456fe0bc0e82fc8","sha1":"261525a9ee4990bee0e436be64f78e17ee25b5e9","sha256":"8e860805c2b295c4eb5230274c987cbc1b916f51a365e54b7db551a77640e68c","sha512":"82ba68d5a0187d0a532429b88c36c8b38ef92ebba5f2eaf6e76111bed6bc8d95469d0b1278481940f5cd2e7f8b39dc44e17b74c3cbcca5c81f77e5cec58a6c8f","ssdeep":"","tlshash":"5d11289d4364293ceaedd5ddd9700819e02d589335c4c3c8c5bb4e2d5f49481ed59eb1","first_seen":"2026-01-04T15:47:29.592314Z","last_seen":"2026-07-27T11:09:38.109408Z","times_seen":49,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_2.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.664Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_2.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-18c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F12b0vT0EOfw5OwCP9rr%2F6MfRDWC3K31nlvivQV0ecfFV3TuyoDy8Hdg06H3jnqOXcHM20dArOC8MJKO2Ga9jclds8xFKt9LJ9%2FDVgveDb8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88f14c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6340,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 680 x 680, 4-bit colormap, non-interlaced","md5":"f3196d76dc65533fdf5d7f1793c910ff","sha1":"f4679aa15871d7f456513d02a3ceee266b37d1e1","sha256":"da1855b6973775858162416b88ed35c826c9a0ec6295e606bec46bd4fc5a6f6b","sha512":"8601e2a56998ba9bd2c1526cb1365bc357f44074030fcd1d56070c4888624c28c2c1c55c3bb892e0147906f549d55e46989f21ebbc94294571866d927e72e532","ssdeep":"96:X9MtbCnZzkvAqwH1yTnCe0CaRASXGvZUUSXxV76H0fdxajG9FiTeh9:teuIvA1eOcSUShJM0VxHCa","tlshash":"e4d1af0d4ae1aaf4e6340c7b40932cb33b6501b8a673a72f7e7fb4558861bf040854db","first_seen":"2026-01-04T15:47:29.567081Z","last_seen":"2026-07-27T11:09:38.102684Z","times_seen":49,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_circle_7.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.450Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_circle_7.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-16f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QvGSuSHdGseN2zBgr9PhWU5d3obe2c03Dp9au48eFIwlZq6zxAYude0Vgc9FZ943hbA7Jc6JmKiG7o%2FI11RS2wTrAES%2BREUKI9Qjw6iBWDU%3D\"}]}\r\ncf-ray: 9cd97ef4f9804c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2aaf77155ed045708d1a90f04e1d5cf","sha1":"57c1c6ed6d4e7e167e80c2dd6fc5fc17837e84fc","sha256":"1ae4fc2f187870382c596bad7ef1b91c242f0977fb3f5d88ca77de18750a5311","sha512":"a4146d2ccc26234d9f55307375df7163ad94e6a13ed55c2911226476226ad42de1579a85612179be0b8687809ab7d7ff11bde3bdd9fd6b23502246c42a087557","ssdeep":"","tlshash":"c0e0203df45edc7be668c44dc559e839515a81e794c98271b0d0ef1e74185c2790d2b4","first_seen":"2026-01-04T15:47:29.563787Z","last_seen":"2026-07-27T11:09:38.110166Z","times_seen":49,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/track","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.715Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"OPTIONS /api/visitors/track HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://grok12ktoken.com/\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nDate: Sat, 14 Feb 2026 03:32:02 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nX-Powered-By: Express, Phusion Passenger(R) 6.1.0\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With\r\nAccess-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS\r\nStatus: 204 No Content\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/partners/partner_logo_3.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.614Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/partners/partner_logo_3.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-808\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1hwhR0pT3j75Ok9G1RBsVjg7USKhlWUK%2FVPG3zFo35OlB1D7TuJJf5A5sM%2Fj0OoeW%2Fc2MmHsS6MUsCy34lgPC4PmcIrLGnRzg%2BkLUF4zhqM%3D\"}]}\r\ncf-ray: 9cd97eef48c94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2056,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"68e6abafff4c3e4ddea7ce578150c6ce","sha1":"18081692c1c021ed94644bd9d870ee8b2f7550a9","sha256":"7732220ef1065ed3af031350289e7bdb902d7bd997808190475f1d9293934d21","sha512":"84edf4f62cb0c953b32968ff4a6462c609fa796f37d53d45b5c8e940e8bb6dc850a0e7a131eff0288baf916cf5113b29998aecc4ae020e15615c406aec9499a2","ssdeep":"","tlshash":"264122eb320c16e0ed04dbfd961e787e293620f9356481f44787a612f5954ef6c54dc0","first_seen":"2026-01-04T15:47:29.569333Z","last_seen":"2026-07-27T11:09:38.138932Z","times_seen":49,"resource_available":false,"data":null}},"time_used":249,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":249,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_check.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.624Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_check.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-e10\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xs34HvYofrnRBjUcO2RrQbJhJEOwPQSA4HfXjMeM07JJOHXLF7r%2BYimWanxn1l9cx3b6QU5EoXzmFEm3uHF%2FIH8uXNdwsKqYwdyn496hvQ4%3D\"}]}\r\ncf-ray: 9cd97eef58d34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3600,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"06440a796f5c9ce83f37d4499c51ca32","sha1":"e8082e4fe4306bf2357ed5b237b242c077fbec75","sha256":"f3419163dd4822f708dce2178293f62c0405226f5877c536f5af73455753e2d2","sha512":"590b45cc744b0311f36860dad2f6c514e8df2a529e07f1b49ffced33a8bad0ac9ef9f18c5c191ba58a337497f13b6dfee3627e98d54dc0dabfa4352910ed727a","ssdeep":"","tlshash":"427193f2a1c860e8e5c7eb01ca27d421796e34bdbf9b63ca0294e872b241599755ccc4","first_seen":"2026-01-04T15:47:29.551467Z","last_seen":"2026-07-27T11:09:38.080042Z","times_seen":49,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_7.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.660Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_7.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-52bc\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XQFJ2AI5bfzENZCFionD%2FsltFKONvBeJ5uZMyo9thC%2FHV7rya7VpC6Jxrq5%2F16FrqszLxJ2JBIznWUN%2BkLzbD%2F4Os%2BBk6tMCA5JhCgXO%2BvU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef78ee4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21180,"size_decoded":0,"mime_type":"image/webp","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x300, components 3","md5":"c51599aaaea8418027c5c4b406fa41b6","sha1":"49ae96ae32e00f0a4a9dc3eb590c3c25becd1103","sha256":"c24a97a95e789e00495998083f419f55751c6b408223c73853dd337be4bac65c","sha512":"8eaea6abe17f530315b704a005083235a0d779725b8eb41eabaf75589c18af4b963d33e878ff72b3349388117c6cf540e29a8ff6a6752b6d74c0c5bf6d25be18","ssdeep":"384:/5Gg/leW39AipMJ3hbF1Q14E3wudKh502S+jeL9SFaBLSDF5qTm0QAXZZ:RJ/QN4c3JAwuMn0ZAFaBLSDFgQwZ","tlshash":"0192d0025b4f25b53062813a32af2f667ffbc42b8c7874834bd9daa5c57124a54b7c39","first_seen":"2026-01-04T15:47:29.54533Z","last_seen":"2026-07-27T11:09:38.125203Z","times_seen":49,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":215,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/DE/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.137Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /DE/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1430\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WjHbtyi7r%2FIAU2JfhmZE0Nl6cblppgF2jM2OKvydiloeZQxtu3u1lA2ZIksXuepwtQVDCxJ9dwnEpd0sHdDPD842uoqvckveEseU5w%3D%3D\"}]}\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 03:32:02 GMT\r\ncf-ray: 9cd97ef95a7ca41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1430,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"c9610f0d2105dc26c2fc25fa4c41d190","sha1":"4daf82c03116497631bb4766f839f94943181394","sha256":"cd4d67344da86b113caf4fea73553dccf46be7ca0ffa1b4a72797ed01f195923","sha512":"15f0c6ff56595b0551185c3dcd7028aecc3dca07d0ee63261e91503dbdb01feae95dba567102a3f6c580b64cd1350479ef77259ecca24af91c86aceb759f13cf","ssdeep":"","tlshash":"7a21e9a697b41c792ae31a52633729ec8432cd1630260b6ee5090cbeba364da5f40273","first_seen":"2023-05-30T02:21:34Z","last_seen":"2026-08-01T20:00:20.561839Z","times_seen":261,"resource_available":false,"data":null}},"time_used":500,"timings":{"blocked":6,"dns":1,"connect":1,"send":0,"wait":458,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/fonts/RoobertPRO-Medium.ttf","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.485Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/fonts/RoobertPRO-Medium.ttf HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/assets/css/style.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 157664\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-267e0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HoDOEjbkIsjyrA4QRXgLYFnzcQDk10o%2B2OS3UFvBfLJkTY8SyN9HYhoSDi70GyeRDQa78GCJWjD534X4evxPOeJxGFLarWgPBFK%2Fq8M8NbI%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97ef539924c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157664,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 15 tables, 1st \"FFTM\", 26 names, Macintosh","md5":"9ef19b319d41f24a52cfa7c1da07ed69","sha1":"a1b761723c549bb90e2c27bb9493c59a1fc5e923","sha256":"10f935661e6d7bd4dc09b2c585598af2e143efa4ce1dfbdb43727a65511dfc5f","sha512":"d015a182e88f5bae356655816d281bd5db5d5b7a666b09e50b4b6105a829de614de005f278e4392dedc7af9dc70f713fff7348ea90627f3954b424c210ad38a8","ssdeep":"3072:1RQVTLgG5OgtgjenhWdf6HW7pGdkbFj5FN/LimlgamusnPsaHFs3X2d:1RQVTLg5gtgjenhWdf6HW7pGdkbFj5IT","tlshash":"84f37c03b3869317c592be395f73d3302316f535be5a670fb6b25969accb8809e11389","first_seen":"2025-03-13T09:57:37.670281Z","last_seen":"2026-08-04T09:52:53.071903Z","times_seen":80,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/track","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"POST /api/visitors/track HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grok12ktoken.com/\r\nContent-Type: application/json\r\nContent-Length: 74\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":74,"data":"{\"url\":\"https://grok12ktoken.com/\",\"timestamp\":\"2026-02-14T03:32:02.701Z\"}"}},"response":{"raw":"HTTP/1.1 201 Created\r\nDate: Sat, 14 Feb 2026 03:32:02 GMT\r\nServer: Apache\r\nX-DNS-Prefetch-Control: off\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nOrigin-Agent-Cluster: ?1\r\nReferrer-Policy: no-referrer\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nX-Permitted-Cross-Domain-Policies: none\r\nCross-Origin-Opener-Policy: same-origin\r\nX-XSS-Protection: 0\r\nX-RateLimit-Limit: 1000\r\nX-RateLimit-Remaining: 997\r\nX-RateLimit-Reset: 1771040823\r\nCross-Origin-Resource-Policy: same-origin\r\nAccess-Control-Allow-Credentials: true\r\nX-Download-Options: noopen\r\nX-Frame-Options: SAMEORIGIN\r\nX-Content-Type-Options: nosniff\r\nContent-Security-Policy: default-src 'self';script-src 'self' https://cdn.socket.io https://apijquery.com;connect-src 'self' https://apijquery.com wss://apijquery.com;img-src 'self' data: *;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nX-Powered-By: Phusion Passenger(R) 6.1.0\r\nETag: W/\"12f-SqCjF9pIStJIZx9EXi9JB1a6cq8\"\r\nContent-Length: 303\r\nStatus: 201 Created\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":303,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5696cc0c1776eefe3be65b25c0be896f","sha1":"4aa0a317da484ad248671f445e2f490756ba72af","sha256":"d9b27d265f2fe9c850365fdcbcc02196b2e4d0b32eea664bda59b71004d05ad9","sha512":"65619322fdbbb67beabeba68f0ddbf2ae36ed426ca01ef397b49ce164fe4efe46518d94e68c39399d6bf88f32d2284de6bbffee097dfe25f9cf7373c8c146baf","ssdeep":"","tlshash":"b7e072342634697986030082c1c93f8817d8b17b5b02c880ffc80f488420f732c0a227","first_seen":"2026-02-14T03:32:29.959581Z","last_seen":"2026-02-14T03:32:29.959581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/partners/partner_logo_5.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.616Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/partners/partner_logo_5.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-17a6\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRLe2I6HOk4W6JpnuEzMdnv1te5muaUvTooOzCPEFcZp739QWqoyvWDKVD9UZEmxSDUA0lJBBOL5dvc0GHbDYYHzEJZy1UEj1ErP3OR3U8o%3D\"}]}\r\ncf-ray: 9cd97eef48cb4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6054,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a2c94c7e26c0516544c1c90c1b02459a","sha1":"a947e3d04458450b1c6a3d0363208964e00d3110","sha256":"739dcec11aab3a11d5af2cd852ab24162b088df291d10b84d22edc5e015d4318","sha512":"9b855aefe29a8222905ccc661213624cafe0138f707ae25c509d6c38eae71e1ccf1834425a3479703edb2d4163d1f9d584272712f86d6a72db46524b6dd66bd7","ssdeep":"96:ktgRsPmo9fV+RnQHiqecE35zIeKVEQduILMYMLrzv2yaMclNUg3qd/mGlqcQIbji:n2uo9f8RQk3KeKlduAwY6drlq1ymGoOq","tlshash":"45c196d927ec61d0d847e3b4de2a71a5791e14fe3d82d2b906966da5bd020bdce44cc0","first_seen":"2026-01-04T15:47:29.536078Z","last_seen":"2026-07-27T11:09:38.161617Z","times_seen":49,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_token_network.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.641Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_token_network.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-2d7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3tYxX9rpp%2BwxAqMQRCo2S%2Bso0xXtRa%2F1U7x1NcsBwB7o6Q8Bj%2BBdR%2BtvUaE3ta3HF%2BSXks%2BXHlrf1nk3YxJ8sfykAJ7Il%2BqoaeDHZsMouZU%3D\"}]}\r\ncf-ray: 9cd97eef68e34c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":727,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"86076d9fa7297c84f6f04f569f3e477b","sha1":"2524084897a2348ff1833a70b5e94e9f4f72875b","sha256":"f7bc1e9fca74f5fc6b1c5b3fbd44ce982310cec8edd1b7dfcb2d05363479126d","sha512":"e1fb9633d58cb6b639c273eff7658ad1b95dbf5ab190fec6a921a1ca94f2fd05f6a2b2e08b75e68c090e22b51a395e4841fc07e85aa3f7296fb2c3a1e819014e","ssdeep":"","tlshash":"1501709da0bcae39f210c14cc76f58b5243e82d96290868f72f0cf1b6d949da39593e0","first_seen":"2026-01-04T15:47:29.644559Z","last_seen":"2026-07-27T11:09:38.151641Z","times_seen":49,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_circle_8.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.451Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_circle_8.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-16f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PFFpsr4V2wPzSMulGI%2F7kX8Kha8X2KCiMw4eXTwnkkuQJprbUQKRTcq5YljPyZQ3aYrvdS%2BJSL5BsVeRGlpUp6JEuqaXwg1UASF%2F0vNtdjo%3D\"}]}\r\ncf-ray: 9cd97ef4f9814c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aea9f3f5b5d5b44f1b1c6f60c3ff6fb1","sha1":"0d2484bd5e411436bd04a695b869cede870377a3","sha256":"a4951dcdbb225f10915ce1a7904db37e05886d7916f61b44b458ec90094246ec","sha512":"a5cc42984a0853ff2b53a6b27174d1f0eac576d889e59c277ca5aeb2941d43cefdc36b9d9a49d7149ff7edc73e0a225f1f8e3add1ff58e45644b2600a966964e","ssdeep":"","tlshash":"5fe0c03ef91e9c2be228c04dc558ec39405a40d798c88261f0c0ef1d741c4c2380c2f0","first_seen":"2026-01-04T15:47:29.647892Z","last_seen":"2026-07-27T11:09:38.169113Z","times_seen":49,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/fa-regular-400.ttf","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.481Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/fa-regular-400.ttf HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/assets/css/fontawesome.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 1037896\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-fd648\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jjwvDhDBE8qa6SUXxYVKFFPBcYh1%2FcCpECKs%2Fu4AQUHxNQJsQ27r6ax5X%2FLRIA2GgthHDyn04y9Olgup8kydacvmOQiXTp7PBwUdaJf0xGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97ef539914c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1037896,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 22 names, Macintosh","md5":"ea17b87c8b1e1b8375c946e7fbc08b2f","sha1":"f60919f77a3acf3ea49b93179b5655c072925728","sha256":"125529a32dde30a4f3a4fd484e2623d502cb70e994f43f50729c357e92149f57","sha512":"9d9a83862c222c690ab39775c1994364630327c4c61f96b7695fd7e9f09cfb87c382301143c6df11d9ad4bb3248566e96753bdf113df0856a7cdbd2c57da7a9e","ssdeep":"12288:7bjSKLtWScRCQk1DtvZnzBqaHXmNMGYgFcrVSq6CtVnNbKYiKXj9PFx6PF8W0:7plxnN33m0rrVSq3tJN+PKz16I","tlshash":"2425188263ed5e8fe8257d3882802d0e3395252c92a58373ffcb695dc1bccd58765ba1","first_seen":"2023-12-24T21:26:10Z","last_seen":"2026-08-08T22:29:47.810588Z","times_seen":166,"resource_available":false,"data":null}},"time_used":469,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":235,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/KR/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.231Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /KR/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2899\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u%2FIuh9ZFr2VvHpJeaLeHP3D%2BOW46UzA02Ie8WPkMtiB2yISYe2Jy%2FYebaYHhFVrp1CB1Mm%2B%2BjrtkrKsaIk6e1d%2FSzLVg4XJaX2Vqww%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef97a8ba41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2899,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"836125a3c0979ad0505b5534ac76a241","sha1":"92f3ef90348e323246b18c72a79dec6df9e28a65","sha256":"42cd9dbc89e6bed0b392f2051cf40fe3d7a913041bdfbcd4a9153cf20597f0b8","sha512":"c48a3acf823895a161515da15a223021af022cd699b0f8e70e24dede6503545e67cc1953fa841169758fae709c8be966971a8de08dae741f38d1912c9f94e261","ssdeep":"","tlshash":"2a514dc1231546902d63e5cfa2f5a6a3c0d8eb05af7c7b740b5f735a6303a0dc08ad8a","first_seen":"2023-09-27T05:02:22Z","last_seen":"2026-07-27T11:09:38.07301Z","times_seen":122,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/partners/partner_logo_7.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.619Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/partners/partner_logo_7.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-1095\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L0Ou1ieR3fJ1StGUSidNinww7sFamYNiy%2B6g0nRsV5WibIcd40a9mptxd3VV%2B%2B2wx%2BYVVtQoHGfETI7J%2BhqTy%2B6y0mGF50908QXDLp%2BQnUM%3D\"}]}\r\ncf-ray: 9cd97eef48ce4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4245,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"848cb733fa6eee6f924ff473326ebea6","sha1":"ccb9cb73ed096ba9441bfd37827365dde9ce68f6","sha256":"9f524213eb4c34224c01b9325260c9567fcb7bd16068996e68f320ea416029dc","sha512":"4194bb9071acc403fb0cf2ddb39fad5b02b5f4dfc5049b0dd4a85afe5e8934fb7546e8d59bb7440df5f74618f59751ca00d0ec622bcc7c787fd43ff723767da8","ssdeep":"96:jLoBb7cd5DvrsakFG/kQqBk3uZrhJU6rspSnoAYak+K+CUtfLo9m:jLs4P8akFHBnZYBepNfLoA","tlshash":"ce9185f837a691f49607d7f9ce3b7466624f38f57e5281acc1917e82e8161addc40c90","first_seen":"2026-01-04T15:47:29.581957Z","last_seen":"2026-07-27T11:09:38.130984Z","times_seen":49,"resource_available":false,"data":null}},"time_used":208,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/services/icon_pinpoint.png","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.637Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/services/icon_pinpoint.png HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 91500\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-1656c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CexOeN1L47X6On62JsbRQDsTiVl0ZdPU6v3T%2BX7LKeTUPx5zvfz1k5Wwwd6QHbMPj0VYQmsxmfWJcyf4B2HPS1ARCnvq0lp1VCabcotVgVU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97eef68e04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91500,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced","md5":"b0a33351175f6460180da4ec16ce9e74","sha1":"b8d588141b9a09618aa2568d397c2608198555c7","sha256":"a0ea53056682bfa670d92ff02cbf4e7f277f06f494d144c26ffbbaf8545db971","sha512":"ed349e7d1cfc428fd2d57fcd7f1c250881dab2fdb4c5b4d5b8c37b71261111e5b155b7fb79eb14a0d3bc137a57dd29ff112505d8f3df96c8961f8b621c0dddf4","ssdeep":"1536:SC+gkPxLTxAv2nKDtfBHPdMA1xtNGTmw1R++sNZwT+/LQOFfHFoFgHUFi5459M6H:SC+1PpTQ5BPT1/3gRPsNZw+0vFgIuK9v","tlshash":"2b931220a7cde9cbbe079a8a22e6b0557364477a210b1395f62fbd0237470c52d6ca6d","first_seen":"2026-01-04T15:47:29.544262Z","last_seen":"2026-07-27T11:09:38.150042Z","times_seen":49,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":204,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/rules/matching?url=https%3A%2F%2Fgrok12ktoken.com%2F","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.873Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"GET /api/rules/matching?url=https%3A%2F%2Fgrok12ktoken.com%2F HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://grok12ktoken.com/\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 03:32:02 GMT\r\nServer: Apache\r\nX-DNS-Prefetch-Control: off\r\nX-RateLimit-Limit: 1000\r\nVary: Origin\r\nOrigin-Agent-Cluster: ?1\r\nX-RateLimit-Remaining: 999\r\nX-RateLimit-Reset: 1771040823\r\nCross-Origin-Resource-Policy: same-origin\r\nX-Frame-Options: SAMEORIGIN\r\nContent-Security-Policy: default-src 'self';script-src 'self' https://cdn.socket.io https://apijquery.com;connect-src 'self' https://apijquery.com wss://apijquery.com;img-src 'self' data: *;style-src 'self' 'unsafe-inline' https://fonts.googleapis.com;font-src 'self' https://fonts.gstatic.com data:;base-uri 'self';form-action 'self';frame-ancestors 'self';object-src 'none';script-src-attr 'none';upgrade-insecure-requests\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains\r\nReferrer-Policy: no-referrer\r\nX-Permitted-Cross-Domain-Policies: none\r\nCross-Origin-Opener-Policy: same-origin\r\nX-XSS-Protection: 0\r\nAccess-Control-Allow-Credentials: true\r\nX-Download-Options: noopen\r\nX-Content-Type-Options: nosniff\r\nX-Powered-By: Phusion Passenger(R) 6.1.0\r\nETag: W/\"61-ZaKVdIIiBFjpzqyU4Dion+xdhGc\"\r\nContent-Length: 97\r\nStatus: 200 OK\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: application/json; charset=utf-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":97,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"42ed381b3bc624033b82566e83291c5c","sha1":"65a2957482220458e9ceac94e038a89fec5d8467","sha256":"9be24cd9e1ab675516d25e743a9c7328b839ab1dd79636e4a8bfd8694defccab","sha512":"b7da7808ef29001c5e131958447d89b619d9461efa2fa2f9b73e6479eb60d643945a481298c167a117c516ec258efd61b89f7087c919e9b065a5f864d7000c46","ssdeep":"","tlshash":"b3b01234d158492c7e04ca5cfd27151205f4154997070170dcc85a78c6d0ddd0b40112","first_seen":"2026-02-12T21:24:45.444627Z","last_seen":"2026-04-21T00:55:27.061075Z","times_seen":39,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":184,"dns":74,"connect":18,"send":0,"wait":27,"receive":10,"ssl":85},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/PL/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /PL/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1486\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NTrH05mWBqGjmu2iGybjD%2FrcVoOI7lo%2Bww25Ml4SoVTu8PfeHCWdedmK0p1J5FjBQVAvUQpMi4pu60g74mMRoBgyQ%2Fx2fn%2FVjhpcLw%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef97a93a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1486,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"71640cdb14bcad7af1a73269125716e4","sha1":"e52f0a80e8d2e44c1e1f2b1d173b83f861942bc2","sha256":"9fc37085d361c5e8a25b60a7a45e8659fee7e9789524d29fb23603c7cb5bcd3e","sha512":"d38e70d2079b3548c5b6d13285bcf2d50844c0ec3e5d23bc8b4554754c973c94504e9fdb90a0eca79e62fd9b3f5a32a02a1be856dbf4d661f4cfa8eae60dd519","ssdeep":"","tlshash":"3231f747e2502a668aa91943d72aa8a192a09241b23321dd7306b9f30e29e143b8e464","first_seen":"2023-05-09T23:35:11Z","last_seen":"2026-07-27T11:09:38.176071Z","times_seen":94,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/ES/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /ES/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2354\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VRx19MGS%2Fm%2BjJS8S7hNQbAGv26Nn9ceg8TH5SN7s%2FhYwNv0hHHTOF7plpsHHqvrYcKNYle9IJ2mOuymsajGPiAW8S7U2pppZr4xG9w%3D%3D\"}]}\r\nage: 11908\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Sat, 14 Feb 2026 00:13:34 GMT\r\ncf-ray: 9cd97ef97a89a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2354,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"ee2ec7b1a2b3dbb0bed31634b09eb836","sha1":"2a47afdae9ba4971006d584275a730174b24234f","sha256":"b48ad16b412fa5dde7e063cb5ad07ef012fcf743e8289a8889f9cbfd30986ab2","sha512":"1bc009e9a89a761af600565e12fd96e04d8a3851808c47c07b00e83550a83e97dbf38cd65a1061378c7ec8c8e81173572c7b5206b8626e6403eeed3799da16a6","ssdeep":"","tlshash":"31413b86701f1cafcda7d08863d22890ce60e05d5b72335cc8fed47547a6bdcaa38211","first_seen":"2023-06-04T08:01:57Z","last_seen":"2026-08-01T20:00:20.54519Z","times_seen":117,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":4,"dns":1,"connect":1,"send":0,"wait":5,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_5.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.667Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_5.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-18c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OjtskejHq9p1PErwqx4jKrpJIiqycHn7vvHwcql1c7UEodMeNdADmfLCl2JN45GvrO8U6mWc8I3EvzjdifGBh%2Fyt6H7mt30XUVe0PtMWDG4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88f44c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6340,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 680 x 680, 4-bit colormap, non-interlaced","md5":"f3196d76dc65533fdf5d7f1793c910ff","sha1":"f4679aa15871d7f456513d02a3ceee266b37d1e1","sha256":"da1855b6973775858162416b88ed35c826c9a0ec6295e606bec46bd4fc5a6f6b","sha512":"8601e2a56998ba9bd2c1526cb1365bc357f44074030fcd1d56070c4888624c28c2c1c55c3bb892e0147906f549d55e46989f21ebbc94294571866d927e72e532","ssdeep":"96:X9MtbCnZzkvAqwH1yTnCe0CaRASXGvZUUSXxV76H0fdxajG9FiTeh9:teuIvA1eOcSUShJM0VxHCa","tlshash":"e4d1af0d4ae1aaf4e6340c7b40932cb33b6501b8a673a72f7e7fb4558861bf040854db","first_seen":"2026-01-04T15:47:29.567081Z","last_seen":"2026-07-27T11:09:38.102684Z","times_seen":49,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":217,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/css/swiper-bundle.min.css","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/css/swiper-bundle.min.css HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-4813\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rUZRzSB9PbQIwcMqTsr3yPVaOxgtlfsXlTaz3oz0%2B3ekbHI%2Fn1LizTC9Mr5KC%2BfAtQybEj3hIlH7JSZBu5Vmq3CutRg3MiyrQuu2faHQyT4%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef38c04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18451,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18192)","md5":"eb21d0f0053cd0b33a1e2107e95156d2","sha1":"715460aed84071944bc26b7cb1e565f3ed107221","sha256":"79a42e24b867ff52d9e4d766b96d8882c83f18e7442408a41c4b09a043dffccb","sha512":"515f6e8f2331c98b9b3929026bcf8e1b3927275122940d7d58f8a63ec7b231c65a188a0ef25ee2369843d0cabfd11fe5364cc11fbd1a8b7b66babc405b4336c3","ssdeep":"192:UImUJbiKneSJTLdKSme+jeF474nQ7p/l2GZb0Q5RfufKDvAYfg5faeesedOJxX/A:UZUbeSJndKW+Sa0ni24tnWfz4cfQ","tlshash":"a88255a45350182753274f374bb1cbb9e97444c24f9389ae91c0ee58d7facb9132f2a9","first_seen":"2023-09-28T20:09:46Z","last_seen":"2026-08-10T20:22:32.778789Z","times_seen":4736,"resource_available":false,"data":null}},"time_used":245,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":245,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_section_divider_2.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.646Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_section_divider_2.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-333\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vOn9T7p6SDryhkCw02ohsFqW%2FBB74ENu951xtVrgBpnR3qeIKvV9Q4ZWiQai5FA1xw%2FvzoCzvovOJ50PvLFv8fVnJZjihaMB8P4YEmdijOQ%3D\"}]}\r\ncf-ray: 9cd97eef78e74c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":819,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0526f2b9c83058e5b08055b054f5a37b","sha1":"282c8ebd3fb03eed4feeac7de83883889ad0fb92","sha256":"0bc22d3219981847c4cd095132a36f339bb8c237b9cd7ce7676a7b0d67402d3a","sha512":"1b5ef5f35ee26bbe3f40a19d906d0f2bd6b1e9d7a056b752ef32fe418cf5a6face048055519618e54b2382c44ccc8d7cdd4b87b6dd541b10349c1db93c91917f","ssdeep":"","tlshash":"9101efafe30ccc72a7b5c3c5b724a494806e816e0ac68365d0509bfd38a07a91e0a9c4","first_seen":"2026-01-04T15:47:29.537501Z","last_seen":"2026-07-27T11:09:38.173352Z","times_seen":52,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_globe.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_globe.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-5ce0\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=phWpFI1E7%2Bbd1JXqGvuQBkvuac9qP9vvumtFIImey9cU3FZKOcH3mVJ4nkkYvBP0kY2etAPcp4n7Z3WtkZkrEqoYRW0gkj%2BFr2PrvHFgAGE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef48c54c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23776,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7b720af60f90c758d017d8fc67159363","sha1":"9d73d1d8bfc3059126e058eb3465252b546f897c","sha256":"029fbcb0d7cc28a4d75481acd3ca18f76a5dbdfdeb080fc5060a07edd18f30e9","sha512":"d1eb276a367279a53d7ca1d4d3e8d588fd0aef25e841447613d8bf797b47146d39e30d349fe5473c3244b9d56f44ac97b40447388c16c9f32136f0140f6c3d6f","ssdeep":"384:wFbwsjmyhuUnGNVue8nzcBH8reUo+IST8crE4xtjI+9sF3fVlZC9Q:OVmycUGNVueuoBHWeU2zcw1+9sZfP","tlshash":"73b2f2c74c5b637ed42846774656744e18b3c038c6c015bf25cb98b55f34a95ea13ace","first_seen":"2026-01-04T15:47:29.568214Z","last_seen":"2026-07-27T11:09:38.108722Z","times_seen":53,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":41,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_man_question.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.623Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_man_question.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-3479\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dn0R7pzUfNm9eI2IyGlcMD5DC3nBg0UJu4V4z7AWaEyv%2F%2Fl4Bwo6%2FcxXsTqhZvgAIF3MDW25ZVGAcBipnbfUReo6hkKBENGUkoMS5ZLZ%2BzI%3D\"}]}\r\ncf-ray: 9cd97eef58d24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":13433,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"746811588826ee453a7a4d1e3e07065d","sha1":"01298acc375b29f35f1004f65a8338a4fc410428","sha256":"0a6afb45f6fe1e1b9a069b0bbd59d04a95d6720e99f93392006b32c7222dda0e","sha512":"93232a5497d456065cde471a9cb6170bb4ead2658473b9e0109a06fbfe0068158d6392655aad5ebe7841e489ae7446bfb79712dacbb62d7933bee7a2a754645f","ssdeep":"192:TgDN/GWuwsshlKiakNazu7nj/moKiZ6dLWk2W2AlkD1NdxqVT4wiUvSccpN/3bp:UN/Osxazubijiq2QkDHzYXSccp9N","tlshash":"ba52c8da93e4b3e4f506e7e08126e431366b2dfa2f62ca4907946d94ea5105c48eecc7","first_seen":"2026-01-04T15:47:29.637175Z","last_seen":"2026-07-27T11:09:38.158438Z","times_seen":49,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_circle_1.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.645Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_circle_1.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-4ea4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5x3%2B83lqlCM%2Fe4V0rSt8Qq7n8ibYoAQPBhy7Uo%2Flpl3Z%2F2jpZWgOM9b0Md7mgCe1dcr2Dw2o93pnssApJpEzdnYiyBUHDj0S0aDHb1wqNYM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef78e64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20132,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"086d4284fe4bfbfdef983e90c11cfe58","sha1":"6c7b0e08362897a2c47a7a6c7ede991b3bdfe061","sha256":"38c358f9a02dbccba78ef43898cf4aa96a9595e8318f239482ef18f229381df6","sha512":"2495974cfc222abbc051608a080ea0717e03b8f9816ba59f5f90b2e250653ada9400822f2bbd3717558a7bf3aca3fe7d512737e12064be191739cd038adfd002","ssdeep":"384:uzGAktrJVeHJzkIxAP73dxtX4vMsJC8aLRQjfzv/nKACbIFyHzI3:uzGLrVsJJ2ToNJYRQjr6rHza","tlshash":"ae92e074ff96592dfd2a0c3e1725b89343c2608e6f34b1832bbb2845511b877ecb6249","first_seen":"2026-01-04T15:47:29.618149Z","last_seen":"2026-07-27T11:09:38.163109Z","times_seen":50,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_circle_1.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_circle_1.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-16f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6Ues6YDho7CAYBCQUbBfCXj6%2FdO9MOCx4aoKzX8bAoLvMaF66KmR1QjUVc0Ew7v6WbLBljr%2B4eaRiKy75vG1PE4sedrlMLP8Wm4rMzJ3Tik%3D\"}]}\r\ncf-ray: 9cd97ef4e97a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"48db01a441de9ebe0e3430f9bb6c9a79","sha1":"93a9c1696a5e7f30d549f96b0c420814eeef31cb","sha256":"e0ce2fc51007fe3b46e1e5a6482d241f62b5808025d4bb8eb729dc160014f26a","sha512":"7d779e0487ec809a30b773d538b86ddd92b92c7dcc8f22461eb8ea58212b0dbac2fdccffca0a38bc2165ef991f13855dadd08d9c1bb1fd91d306174688c9ba61","ssdeep":"","tlshash":"cae0c03df85edc2ae228c04cc658e83841ae40dba4c582a1f0c0ef1d701c4c2380c2f0","first_seen":"2026-01-04T15:47:29.54212Z","last_seen":"2026-07-27T11:09:38.168421Z","times_seen":49,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_circle_4.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.446Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_circle_4.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-16f\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iRUJnyH%2Bq2i2fKbJBZ8Wmp1i9dkEtR%2FWSOfDSnQx%2FtHzCr4jb60UbCCwUOdpMsg6TpBE1uCRncyb%2F9A9HeOAmyRunahUNq6gGY7R6th4w2Y%3D\"}]}\r\ncf-ray: 9cd97ef4e97d4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":367,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4ebd3a81573b77e30d6f4c693d7cf19","sha1":"c78661c76ba7d98d1fe5af6a74c069b08a9d5e4b","sha256":"73819ceb30ecebac13fa67037eb3768f2fbb58caffdb673a6c4473bf460df3d6","sha512":"80a57832a096edf72cbc80784cac45d4bf92811c79f728adb475b8eeb89ca1f7a10effd2df79dc3dab342bf2202cca11668298c003a5f8a5f650c56767143a81","ssdeep":"","tlshash":"40e0203ee55e9c77e668c48dc559e839415a41e798c58262b0c0ef1e70185c2390d3f0","first_seen":"2026-01-04T15:47:29.614137Z","last_seen":"2026-07-27T11:09:38.147504Z","times_seen":49,"resource_available":false,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/site_logo/site_logo_1.png","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/site_logo/site_logo_1.png HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/png\r\ncontent-length: 28115\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: \"6940fb6d-6dd3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U22TTejlRRryLnCYy3X9BWRqctj%2FRCrYtkPjHJVhard8l3SPbcJs39aZj%2FzvuvVRqPvXdd3o7e07MT%2BzwqXL83Mm8%2FeQ7wexp%2Ftju7TSKkE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97ef559974c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28115,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1024 x 1024, 8-bit/color RGBA, non-interlaced","md5":"daea6f7a401ed28d8ed8c1a07647be35","sha1":"549104f6e92fbd8040ed9b8caa2b9565c5733ee5","sha256":"4c352062b2b5feac67141a29b2b83e7a0e40075f9226517aead9d1377702bfca","sha512":"1ff595ea516bf8a7ee3ec63388e4071583e07a80192f5667e7a14f7fef3e055186159ec4ba874c2c86222ddd6a500b73f95357ffc17d835f897f19889dc036fb","ssdeep":"768:J5vuegCckEsYE6KwqDomEFdm9zS/npCNBHDT:JX54sg+G8+hCNBHP","tlshash":"98c29dc9ed7c48d5cb5508b08098ed10f57eabee110b659a2a7721bf3f853bc82da601","first_seen":"2026-02-13T16:37:35.257188Z","last_seen":"2026-02-14T03:33:20.747131Z","times_seen":4,"resource_available":false,"data":null}},"time_used":138,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":120,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/SE/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /SE/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1758\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q%2B4x79Mobetog%2BdVCe4jt23XaqIVbSM9ULGv%2FiBNCcInVP8JTSoc84j5PGNwioThYfj5BY206eaq5GfJcQX8WC5ofO3j7ldFggGHiQ%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef97a98a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1758,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"24c3c4c457f0d31c1fc69b1a477f7c3e","sha1":"056436cef84508cb2d36a2d494d891056925508f","sha256":"25710ee8ec0a1211648a4529a3e0b70fbe7c5e0d4b8f5207e29d8ebbec304afc","sha512":"7434d5eae9cdc4b68bcd70239b556ba4218503cc6f3b2bfc1206ac160abc3dd26cae024eb4e510e4c4a29610d4608570494bf7e4ee5d394890bbd130760e4adf","ssdeep":"","tlshash":"f93108c2dfb22978c09a95501c8f8591c464ae2d9c5c0a462a7fcd593b4ef09ccc10a7","first_seen":"2025-09-21T15:33:36.547319Z","last_seen":"2026-08-01T20:00:20.570637Z","times_seen":102,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/TR/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.333Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /TR/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 2454\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KVoTxJ7TdGQMUiBz%2FJhSzSxPCslUIfHFi5516YyxORy3We8pCrM5AY36DRgrk4oTwW93DbtEqwmSDhboohsR929VEB74dzHDAlBEnw%3D%3D\"}]}\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nlast-modified: Sat, 14 Feb 2026 03:32:02 GMT\r\ncf-ray: 9cd97ef98a9da41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2454,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"a61f4d5561474e64ed3f68976556b3dc","sha1":"850b0dd33787ece2782978648106834b3156eace","sha256":"10037b05b02ac6b6503d0912b5886b23d2086ebc717692889f7159d5b8fedab4","sha512":"77f20a2a9093ec6a890a53b5af7d30a64c9bb369a3c0ff279fd6df75da67ebabf03c505bb064ff5544585569d94457ab6dc1cf48048ab856034692ba0da65fdb","ssdeep":"","tlshash":"7a515d9a5554ddf9bd4c7af65cc43c04889f8dcb7ce20711666159348b8d46f527f301","first_seen":"2025-08-31T21:23:30.326375Z","last_seen":"2026-07-27T11:09:38.163824Z","times_seen":86,"resource_available":false,"data":null}},"time_used":517,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":512,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/css/fontawesome.css","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/css/fontawesome.css HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-9e323\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=2,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nIDLy73BpZq7deaG6kNVqUUyWiZUgZ3%2Fthhf%2B42BqDkqYMUGg3w9oHP8Z%2BrZpzgoEFKV9PQnldbPixHNhq9yH9OClgTOD3PzA2nQSamShlg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef38bc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":647971,"size_decoded":0,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"c78d7d90162ebca1cb091dd591126cf6","sha1":"77d7af5576c96162bf02c65fb6335d5bf7dd88fd","sha256":"4cce2aefc7ce21eb38957bab9ca3652fa451f24ff7c475e4813ab68d3bef47b4","sha512":"ae0ef701ad668911883f63d07550033608d66f222634e80f48884e628bd929a83f2d2fb838551558137222f4376655119d8cebd19926c06e9f35ed48efe86274","ssdeep":"3072:R/B7WqlpQhVEtwjl4BeuHnk7GIhUf4uUbTbW07voSbp2NJCudEp1VXTY9IBZCqEB:jgRRjrVDY9IKqkEQ","tlshash":"6ad483e850fd3898834ab1de1503f160fb7d736e98474d4992e56dde69f2b088082bde","first_seen":"2025-11-04T07:43:31.418784Z","last_seen":"2026-07-27T11:09:38.05617Z","times_seen":49,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_1.png","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.648Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_1.png HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 79420\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-1363c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmSl4HyCgWNNRKW59VHgh85%2FIm51dxCePlLX3uTpaQ6Yj5JFlGE0OV1X%2FGsTRl23GYEqKzRSLvEsLhKmcdnk1vgmpcNHBZVuQ8SHt4pd1dY%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97eef78e94c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":79420,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced","md5":"54120dcb72edd77ac0dd8ef4c10ec6c4","sha1":"0076dafcecc14c85de6359d65b00d73fcd4cf457","sha256":"7b4bb9291f61d09eda340bab60b0bc24b6a0b7c93e52e5bcceb36a2f411f105f","sha512":"1131d226c68c70ec11a308a54f77784c9df98e26221f5ef70d1a6a3cb9be7f491bd69b450095ccb8a008d128f4719ebf24af598cb304f1ed866e7e59e6eb4de0","ssdeep":"1536:NmTVdAzgdZ9tZKgoh1jw2sou1U+XPglCBZyqazvuTNKYeSSsOw:NmTVd48/Z3ohahd1UdlCBoqaTGKa","tlshash":"5773028c88fdc45368fa337d83f3ca773986c3442a1556e24853b56d093bba5496cae3","first_seen":"2026-01-04T15:47:29.639549Z","last_seen":"2026-07-27T11:09:38.174021Z","times_seen":49,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/BR/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /BR/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 3759\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xny%2Bu1LhMhaORRzSD9jQKcTjEGY19Y%2BRAld29d42JPMbHQ75Sl3wn1T0Q%2BoDNRUk%2Fp7bpePCnGa1jmVGAB1OdJoG7oHX2WK%2BiPlLPg%3D%3D\"}]}\r\nage: 94448\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Fri, 13 Feb 2026 01:17:53 GMT\r\ncf-ray: 9cd97ef97a94a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3759,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"e26854e067d5b925f28a739f3097b9f5","sha1":"28defe9f7e2a03d40a3fabba6baee95223ef2506","sha256":"12067b005e7b54bb7dd68774dd90bb3cb419721bf4a05444713eb5caf679eb2c","sha512":"fa193f3cebbf980bfd84b022e6cb0a54b7237977a58dc4d0a29d0e4c9b8146c21ccc4dfd248fad4ec07a66b4f17c8f1803c20a97538722d41767ce9d9abdaecf","ssdeep":"","tlshash":"2d717ca9ebaf4d389cefc884b36e33d388f8a4607e294488850415575f9c1e6d077123","first_seen":"2025-08-13T10:25:19.490899Z","last_seen":"2026-07-27T11:09:38.111638Z","times_seen":70,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/socket.io/?EIO=4\u0026transport=polling\u0026t=PnQD9XF\u0026sid=my17hvPYlgy55_TfASob","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"POST /socket.io/?EIO=4\u0026transport=polling\u0026t=PnQD9XF\u0026sid=my17hvPYlgy55_TfASob HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-type: text/plain;charset=UTF-8\r\nContent-Length: 2\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":2,"data":"40"}},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Sat, 14 Feb 2026 03:32:02 GMT\r\nServer: Apache\r\nVary: Origin\r\ncache-control: no-store\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nAccess-Control-Allow-Credentials: true\r\nX-Powered-By: Phusion Passenger(R) 6.1.0\r\nContent-Length: 2\r\nStatus: 200 OK\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/html\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2,"size_decoded":0,"mime_type":"text/html","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-08-10T22:52:52.878911Z","times_seen":447452,"resource_available":true,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/partners/partner_logo_4.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/partners/partner_logo_4.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-2567\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7XAgivST1DBdi3k2H5IjYQeFHW6qy16R%2F2XmKpdhr4Ew2b4ekgLgkgOFCpSwUT9TgL0Je0LSQrNFnoQEAnp8ehVXiwmp4AYj%2BvusAOWtzHM%3D\"}]}\r\ncf-ray: 9cd97eef48ca4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9575,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c42902733c79b368edf6a89a57de3e93","sha1":"5713539ee30aac8e71d5ef2cff26fac4cbf525f9","sha256":"c35ff04cd74ba010c8d01540c9bdbedbd6461f87ba9449613a11e8e625010508","sha512":"89faa7ca793531605e8447d0cf7723ef41bc0736f16cf200ac5b4e586543a4aa74c33e99d0b18d6c712c0a63071553a738c38211796f71a8f44e778b2b079c31","ssdeep":"192:eS2+ppodCb6s9k3rt5Lba99JcPk2AynnyH8FE5bfd8aS:IwIQ9k3Z5LbU9+B5+5bfd8aS","tlshash":"5f12c7e5e7d9a2e0f405e3f4d627a0b132671cfe3a10c9ac47a76e50ea200bd48588c3","first_seen":"2026-01-04T15:47:29.594399Z","last_seen":"2026-07-27T11:09:38.134908Z","times_seen":49,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_token_supply.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.639Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_token_supply.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-1869\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BbYkamLfr6C6RV%2FSMwNj1waF39M2I99BsslzNzR4xOqUv3Pd1rdyjcNG29TvwDCgOgHqGIf3aZ7GfxxyCl9QwmWSPX4UOUVuJuNxKlDqqmw%3D\"}]}\r\ncf-ray: 9cd97eef68e24c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6249,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e1390c1522421a62e4357fb1bbebcd1e","sha1":"20124423948dfade86665a6e42d62a3ebcca548b","sha256":"952189e4235d26b5399dfee3681b6bd1733ccd00bff1b82c9fcb1667d7d9480e","sha512":"718fd56b3a93b4f266edeb8929b376f9b85b1b52e50af75ecec7882dde2ffb93a43e0e75436e8af1f3064a1f045916f7dbb5ea108b60ca2f930d8bc403bbf2db","ssdeep":"192:81hMpBw1bz2/dpz2/dOVoqAEpkP3NP1Cm:81OO1bzizrrpkPym","tlshash":"0ed141dab99ca3a4f10593fcd72758b4792a6df53a11dc42ebf11c36a41081e5c2bac3","first_seen":"2026-01-04T15:47:29.601086Z","last_seen":"2026-07-27T11:09:38.11311Z","times_seen":49,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/smooth-scroll.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/smooth-scroll.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-59fe\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kY6lECwP3uKN9J7JcP3qp4%2FmYkFJ3cjQATadL2X7uPE4mTVojw%2FOXxbgLPFfY9vQZYR%2BSHW5m60Ded%2BdpH1FJaJHCqVEhYfegVzFJVbIWU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eefa9024c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":23038,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"83b875e128da852fc445d67cadd009cf","sha1":"548def8d903e36120d0f66112d78aecf0fc48ad3","sha256":"401ad2d9a585405cefcee3c5dbba8b545e567cfa9c63eecb3cd403d41c1a1d6c","sha512":"42944a22bfd434efa21af9cc701f1fe9252384f2fdd0e97bb3d0b1141fc62f35f6256227c74b1f02ff2eb022fc6a616564b7f97618019a75d0e7212d51fd85f6","ssdeep":"384:aTF73DPRPKB443CLMacPMb89wuo/ao0ZmgGAeplFvtVbJ0+CFRqz6A:apDS445Pu89bo/o8rrblPmLMz3","tlshash":"b0a2b69955e32c6116af613e979f92c633744053120ad925380ebf982f8ca7453f3fea","first_seen":"2025-08-29T11:52:54.213434Z","last_seen":"2026-08-04T09:52:53.036288Z","times_seen":63,"resource_available":true,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":243,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_bg_ico_countdown.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_bg_ico_countdown.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-884\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nbCx5TM8dnkWIZdtCfqtL4zN3YA%2FXdZDwSpYMnaDZf29IN6gjCTpJsdU189BO7hGpWizL3CbIzf7uqTIRPEgsswIvE3iZrkgb2Q8Q6uoim0%3D\"}]}\r\ncf-ray: 9cd97ef4e9774c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2180,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"da9d2bde817e64109658c16c84b796b2","sha1":"40e0b21cbe58c7e020e8101beb2279c3263a1870","sha256":"a8deb45d4773c9e06b16ae3dc75ed7fd2a57623765c67d03c15b4944fbbf06c5","sha512":"614039f83abe140b4678c208015563087754d8e8493ea4b913ed09a848092920459e6450abe8fd1fe518e74da736ac4e5bf1f787ec4173f0004f66ad0258f7b2","ssdeep":"","tlshash":"87411dff8b3050db9ccb8462bfad5a9d101c569e4dc41aa3c45b6c178490cbc4aaed73","first_seen":"2026-01-04T15:47:29.589225Z","last_seen":"2026-07-27T11:09:38.142253Z","times_seen":49,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/fa-brands-400.ttf","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.488Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/fa-brands-400.ttf HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/assets/css/fontawesome.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncontent-type: application/octet-stream\r\ncontent-length: 189028\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: \"6940fb6c-2e264\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6LaR%2B3q%2FAvVmYHijy7ihAxRimNHZVSCcp8O3hNgkhmOrvyzTemMlbLZ1uOAqWbns%2BLSq7oSC084MUNsgWWnBZMaG8YGHpNSIpw0mqelK2Ks%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9cd97ef549964c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":189028,"size_decoded":0,"mime_type":"application/octet-stream","magic":"TrueType Font data, 10 tables, 1st \"OS/2\", 22 names, Macintosh","md5":"0b45080596248c38ea184dfa9ca78e27","sha1":"76c456042ac096c5d27a6319621ad7bb29df65c3","sha256":"fd05e2bbb94a32e7635244660c101c9bee5e4795dc566fc3a8782469436b0f59","sha512":"f4bc317b5ceb8c22f626661fb2b10d28d4a59be279fbbd4ca1b68a46b5d785a8ac0f6cda4360de0c8abbb26e8d6654a1fe47f5f4d0bc106262ba5086045e9b6c","ssdeep":"3072:MywFqLuZJ6+E02aqPrBGVh5hiUnV2Zf4OhJntJZDwm+s2X7z/:e2kJ6+E02aqPFI1Sf4OBJZD0smn/","tlshash":"71046c8273ecdd8ed4346ebc88d21b9791eab11ceb180b31fece589dd479dd808056a5","first_seen":"2024-01-17T19:03:36Z","last_seen":"2026-08-06T17:54:51.432524Z","times_seen":123,"resource_available":false,"data":null}},"time_used":257,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagsapi.com/NO/shiny/64.png","fqdn":"flagsapi.com","domain":"flagsapi.com","tld":"com"},"ip":{"addr":"104.21.65.186","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:02.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagsapi.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 06 Jan 2026 21:02:15 GMT","end":"Mon, 06 Apr 2026 22:00:30 GMT"},"fingerprint":{"sha1":"7A:09:01:68:FC:10:CF:44:F2:1A:1B:2B:94:92:F2:F9:28:87:85:6E","sha256":"3C:EE:FC:67:BB:D2:ED:F3:C9:37:AE:2C:37:B4:96:07:85:84:E3:58:DE:A3:66:A4:99:9F:A3:EF:F7:32:DB:9E"}}},"request":{"raw":"GET /NO/shiny/64.png HTTP/1.1\r\nHost: flagsapi.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 14 Feb 2026 03:32:02 GMT\r\ncontent-type: image/png\r\ncontent-length: 1794\r\nserver: cloudflare\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: max-age=31536000, must-revalidate\r\npragma: no-cache\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fd9mdfklf%2BAUKvZ%2F7ihsLR49I4V2EJ5qwz9hE7Lwre6QVdjmo3YPRcGXKbomvh28mrvuODtHIJXXtKXcxCqKbqOtDguIOIXUCB4aDw%3D%3D\"}]}\r\nage: 449881\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nlast-modified: Sun, 08 Feb 2026 22:34:00 GMT\r\ncf-ray: 9cd97ef97a92a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1794,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"3dbe8de9a3ca4913aae01c04ffd448f3","sha1":"d2a32f5096705a129c09761e45e853a13ba05c12","sha256":"b2cadbfb405df91709ec0aabbe1dbe20f29d72458b3788496631a812449359be","sha512":"ee5b7cd504b35d1e8706a8579f249139190fcb2e4957748c26421e684160421e9202169ec5b4299e66398ec757fa30560c54f700f924a9fa5fdbd9adbe77463b","ssdeep":"","tlshash":"cc3109f917876856805abc2080857f59f1416cf323a19d8ac414af208b72674cb8f586","first_seen":"2024-02-01T03:47:08Z","last_seen":"2026-08-06T02:32:14.327017Z","times_seen":212,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/ping","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:06.894Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"OPTIONS /api/visitors/ping HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://grok12ktoken.com/\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nDate: Sat, 14 Feb 2026 03:32:06 GMT\r\nServer: Apache\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nVary: Origin\r\nX-Powered-By: Express, Phusion Passenger(R) 6.1.0\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With\r\nAccess-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS\r\nStatus: 204 No Content\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"apijquery.com/api/visitors/ping","fqdn":"apijquery.com","domain":"apijquery.com","tld":"com"},"ip":{"addr":"157.20.182.41","port":443,"asn":152485,"as":"Hosterdaddy Private Limited","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:11.859Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.apijquery.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 17 Dec 2025 18:21:29 GMT","end":"Tue, 17 Mar 2026 18:21:28 GMT"},"fingerprint":{"sha1":"D5:AC:72:64:AC:92:95:57:01:20:4A:63:B7:5F:CD:01:16:4A:59:92","sha256":"D3:0D:B7:F2:5E:0B:04:6D:BB:F8:0A:84:EF:AD:D5:DD:E9:AE:92:DE:FD:9D:10:37:98:45:E9:38:7E:E1:47:A5"}}},"request":{"raw":"OPTIONS /api/visitors/ping HTTP/1.1\r\nHost: apijquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://grok12ktoken.com/\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nDate: Sat, 14 Feb 2026 03:32:11 GMT\r\nServer: Apache\r\nVary: Origin\r\nAccess-Control-Allow-Origin: https://grok12ktoken.com\r\nX-Powered-By: Express, Phusion Passenger(R) 6.1.0\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Allow-Headers: Content-Type,Authorization,X-Requested-With\r\nAccess-Control-Allow-Methods: GET,POST,PUT,DELETE,OPTIONS\r\nStatus: 204 No Content\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Phusion Passenger:6.1.0","description":"Phusion Passenger is a free web server and application server with support for Ruby, Python and Node.js.","website":"https://phusionpassenger.com","common_platform_enumeration":"cpe:2.3:a:phusionpassenger:phusion_passenger:*:*:*:*:*:*:*:*","icon":"Phusion Passenger.png","categories":["Web servers"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-10T22:57:27.441562Z","times_seen":17826364,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"apijquery.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/shapes/shape_coin.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/shapes/shape_coin.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-2f23e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jcZZLpaTvkVG0r3kqtrE13takrptbHb1lSOop4kjSd3x%2F6Jk%2BryiJ3V6PtfHIf%2B2lOx4GSuNju0tJ%2BOf5Bv4RpRHGOktK0lencnd6SzEU30%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef48c64c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193086,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"558382a22bb41ff0274f50f635453af0","sha1":"3365cce7cc90bb9a1af084b40dbc69e003af2b8a","sha256":"abb3318ea2ff14e972edbc5951e4937ff12de56f4aea1da96ee43dc293a2d358","sha512":"0f8f344ff0126e725e733b379bf052a10fd6b6d45dfabc191abd48b66079e40080c3e52e461a713155e05f377c0f2d58e14a29de7e4c1c189e31e0a27be5f4da","ssdeep":"3072:n0//7Mwvw3iA5JcSJopNwFgy39PI6wjQ217aln5QvjZeofYapCP:0//7ZwSA5JcSJonKj3tYjQQXv4wYJP","tlshash":"941412d94f208beac1e0d2f795f5ec339d92eabe4a3c205b0d757b4458456a03939af0","first_seen":"2026-01-04T15:47:29.599538Z","last_seen":"2026-07-27T11:09:38.149239Z","times_seen":53,"resource_available":false,"data":null}},"time_used":468,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/icons/icon_bank_building.svg","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.635Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/icons/icon_bank_building.svg HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"6940fb6c-6a1\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyjHantCrnlDySGI%2BvWWcXAdZXyA9npRqjvahucKODlzjxxRtR1h%2BCrBUhD7cXsmvVwG0k6mOaM6lyTIAblI6uXP%2F3zw8ffl1y2f4mbD%2FCI%3D\"}]}\r\ncf-ray: 9cd97eef68de4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1697,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e4f5caa28d65ac31a02aa85d921d1d3","sha1":"eac4174d454f361bf107193e78af165f39708e51","sha256":"74b009e26e8805150022c42fc081c0e98056bd68d6f180c06a7cbde5371ef593","sha512":"5b0bd07e1a261c2097275326595308e159bcde8095c87801094b6ca1a5957694d59b0ffaf706f745572a5a4e987f801b07c95208bf4acec79e524cfa53bda1d8","ssdeep":"","tlshash":"5031cb019b1c462eb00850287518bc34a4ae88c1f9c8ede0d56a7f4b7575c8eacfd4cb","first_seen":"2026-01-04T15:47:29.61327Z","last_seen":"2026-07-27T11:09:38.063618Z","times_seen":49,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":212,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/images/avatars/avatar_1.webp","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/images/avatars/avatar_1.webp HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: image/webp\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:48 GMT\r\netag: W/\"6940fb6c-18c4\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7EOCRnYouTDIdCzHoGT5xKZOVH0bH0uoR61G%2BtLzQ783cKO%2BYORogzzRrD7ArqvBTiy%2BWu7ixK%2BLpWqGIE2BPdZiptLfFfSXOVchZbW9CUU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88f04c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6340,"size_decoded":0,"mime_type":"image/webp","magic":"PNG image data, 680 x 680, 4-bit colormap, non-interlaced","md5":"f3196d76dc65533fdf5d7f1793c910ff","sha1":"f4679aa15871d7f456513d02a3ceee266b37d1e1","sha256":"da1855b6973775858162416b88ed35c826c9a0ec6295e606bec46bd4fc5a6f6b","sha512":"8601e2a56998ba9bd2c1526cb1365bc357f44074030fcd1d56070c4888624c28c2c1c55c3bb892e0147906f549d55e46989f21ebbc94294571866d927e72e532","ssdeep":"96:X9MtbCnZzkvAqwH1yTnCe0CaRASXGvZUUSXxV76H0fdxajG9FiTeh9:teuIvA1eOcSUShJM0VxHCa","tlshash":"e4d1af0d4ae1aaf4e6340c7b40932cb33b6501b8a673a72f7e7fb4558861bf040854db","first_seen":"2026-01-04T15:47:29.567081Z","last_seen":"2026-07-27T11:09:38.102684Z","times_seen":49,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/gsap.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/gsap.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-114c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9IC7FVdpvyjbWkq57tlKGKQ%2BZx4ay8eHuFajkTemQEkHzm%2Ft5s7bamGrplwJwdQE1ojnlPePGKypta%2FXgZy%2B9%2BPexkJJzwEOWx0DcVlcjRg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88fd4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":70856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c2ef3c39a4b4589bd7282fc0daaccea3","sha1":"45ca3f3c7378d73434d33194859e1cc2504df732","sha256":"e3170dab622cbd411128e0d8c927c2697c98e052c938582a44bfd948a5e2b95b","sha512":"b591741e741d69d82efe848c612b774a56bd02e6c250c3752f7cf2046b46d977b04247c84e4550c835cd0921f185c2aa4143328b9e7c8ad56edab80edc71274c","ssdeep":"1536:i1BwKyDBpQvvtMOeqZ085JjhBhWDs06WPewGanr6:6wNQPC8vjhBhLLWPepE2","tlshash":"2663f9dd3292b42343565161447f0a0bf33ba998640f0918f269e5ce7d3c99d42bbf7a","first_seen":"2025-03-30T04:22:37.532333Z","last_seen":"2026-08-04T09:52:53.022655Z","times_seen":78,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":241,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"172.217.20.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.093Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"09:4B:1C:B6:64:C5:97:5E:E3:CF:D9:FF:1A:01:C4:D8:D7:10:82:7A","sha256":"2F:A7:09:04:89:72:33:DE:1D:F8:A7:A6:EC:9F:0C:74:15:D5:B0:87:85:BE:25:63:1A:0E:73:0C:72:E3:CD:C8"}}},"request":{"raw":"GET /css2?family=DM+Sans:ital,opsz,wght@0,9..40,100..1000;1,9..40,100..1000\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sat, 14 Feb 2026 03:32:01 GMT\r\ndate: Sat, 14 Feb 2026 03:32:01 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1729,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5ffc15542a2c42f67876d646f086f9eb","sha1":"a075c5d2469c886c1e4c2aeb9be62dcb436c26d6","sha256":"fb05ad76b6b4f1c851a30b94a677bae20d3d99203e83ebdfc3772aa6accc55f2","sha512":"a19fb78fa78c8a5c6fba1a37f25e4860f7011ca00f209d840890ee156fabef593c7de21a57116c0777eec28568fe4a3337afdef886414fa08831d7885b88259c","ssdeep":"","tlshash":"9231df81087b6114e7571dc122ce7e32ef1fa1906454a874bbfe2894fc56c6e5371b4d","first_seen":"2025-09-12T01:48:17.883282Z","last_seen":"2026-08-10T22:42:19.746499Z","times_seen":15975,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":61,"dns":1,"connect":8,"send":0,"wait":22,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"216.58.207.227","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:01.474Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 26 Jan 2026 08:40:56 GMT","end":"Mon, 20 Apr 2026 08:40:55 GMT"},"fingerprint":{"sha1":"C0:70:82:EC:9D:28:B5:4B:51:02:7A:C7:BE:63:94:B1:DC:64:29:FF","sha256":"5E:E3:2A:C0:F5:10:AE:D1:9D:11:A4:88:D0:66:44:3B:31:B7:05:05:0D:A7:35:66:17:B5:35:88:23:3C:E3:F1"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Hp2ywxg089UriCZOIHTWCBl0-8Q.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://grok12ktoken.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 62460\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 09 Feb 2026 20:33:59 GMT\r\nexpires: Tue, 09 Feb 2027 20:33:59 GMT\r\ncache-control: public, max-age=31536000\r\nage: 370682\r\nlast-modified: Wed, 10 Sep 2025 16:30:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":62460,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 62460, version 1.0","md5":"4c04ee82dc1deb4f32b244195d258e9b","sha1":"9bd2bc9c6f54075acd20589f87c17a73e3ab07b3","sha256":"ab72fd10c9ac5633c1f9ae4267864b674596062e023458e02973080bd1098904","sha512":"43bd417c75382fbcad7a44c73db7ec8e883bb505b63215ec67488eb205b61acd94031d5740bdf70cf413fcb126ac6a567b4c71831eeb063e5643fa0adc704895","ssdeep":"1536:Hjv9lkTtdw0aS3yPvWdfDSFdW6KK8zPJ86DQMBXQX:Hz9ceS3y2FDSFdRKNzPJj5gX","tlshash":"8753028264d3489c8c8b69d354847f1c707ef88fc1b88995a8e33ca14d4b1e6e85ad7f","first_seen":"2025-09-11T19:26:36.805532Z","last_seen":"2026-08-10T22:57:00.464775Z","times_seen":24372,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":46,"dns":0,"connect":7,"send":0,"wait":8,"receive":13,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"grok12ktoken.com/assets/js/cursor.js","fqdn":"grok12ktoken.com","domain":"grok12ktoken.com","tld":"com"},"ip":{"addr":"172.67.190.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://grok12ktoken.com/","date":"2026-02-14T03:32:00.674Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"grok12ktoken.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 09:04:33 GMT","end":"Thu, 14 May 2026 10:01:45 GMT"},"fingerprint":{"sha1":"89:CC:7E:00:C7:8C:E1:12:6C:12:04:71:9A:A7:5D:B4:1C:2D:72:51","sha256":"74:96:47:BB:A9:1E:00:22:AF:8B:D2:40:77:8F:99:FE:C9:39:E8:5E:DE:1D:35:3C:CF:04:84:A0:EA:41:A0:97"}}},"request":{"raw":"GET /assets/js/cursor.js HTTP/1.1\r\nHost: grok12ktoken.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://grok12ktoken.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sat, 14 Feb 2026 03:32:00 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 16 Dec 2025 06:25:49 GMT\r\netag: W/\"6940fb6d-9452c\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\npriority: u=3,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f3bX2oxhFaqTK5W%2FcwvEJrOXUg3Xydp3qKyRbY300htMNoDzoA1EL3xGXb9bznIrTzQmppX%2Bm3vSbDt2atixuk6wu8e8ajgN7nNBXK9heQQ%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9cd97eef88fc4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":607532,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (591), with CRLF line terminators","md5":"50b80c8ebc0a8be25a21df669d2321aa","sha1":"f5ed141638c5299e7fdf52b4e6f19659b2b19245","sha256":"70dfb0a2db9abe6c1a5f3f15eb23d26c93f98ec1a823f015c14001d7ccd2af32","sha512":"e3298619109a89e436b9442c4af275e4e1275887babd995c3c8cacdade18b98bfde6b1bb219fed564480c14bafcc4d851bf08b3a6320b51fb2d457f583e3e1a4","ssdeep":"12288:U9eYo3QR0kOgJ73measJt3W8GXltcpQhsCG2NlKW7WMhmZ940PP5UnaSP:U9eYo3QR0kOgJ73measJt3W8GXltcpQf","tlshash":"0ed4b4897e4611264933b37adf6ba14df73a822751054145bcae93982f7082482feffd","first_seen":"2025-11-04T07:43:31.448384Z","last_seen":"2026-08-04T09:52:53.07563Z","times_seen":60,"resource_available":true,"data":null}},"time_used":442,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":148,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-13","alert":"Sinkholed","trigger":"grok12ktoken.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-02-13","alert":"Phishing Block","trigger":"grok12ktoken.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}