{"report_id":"718b7433-0e0b-4339-9b70-e8127a8e4e59","version":6,"status":"done","tags":[],"date":"2026-04-22T12:45:20Z","url":{"schema":"https","addr":"revokenode.io","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"172.67.222.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"revokenode.io/","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"title":"Revoke what doesn’t deserve to run.","dom":{"size":49233,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (819)","md5":"8c691f3e1d6be6dcde66617cac363437","sha1":"544bc6ff7e1fe6b0cb3cc883d0ce924cacf366ac","sha256":"2933cd2ee0ff512fa7b4e1c3aa4c08d72197e533c9546b3d539add801b5d73f0","sha512":"137713a27d56a43deb32de9bbc1aff3c86326a7bbc326b37c83d680fa009778993344d0f189553d72dfa64c850b65374cf226683ab8614e1a3e1460673e20dec","ssdeep":"384:xqBIIWvIIET39nCCTxqou0doo6yA6AKCNaNjY2NqULlULIYHJUHe4EIgUYgDeC1S:kBI1II0nCK+eP6/xAJLuLnJ8PEXUnKtl","tlshash":"e1235265c4f097b7089390c69eb56b1b6ed0820bd70a1640bbfc56a57fdfc51ae032ca","dom_hash":"domhash90feeef118c6b837db6bbdc05f67274d","first_seen":"2026-04-22T12:45:27.616757Z","last_seen":"2026-04-22T12:45:27.616757Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"revokenode.io","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"172.67.222.72","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-27T12:45:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"revokenode.io","ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-04-19","domain_rank":0,"first_seen":"2026-04-22T12:45:22.284967Z","last_seen":"2026-04-22T12:45:22.284967Z","alert_count":10,"request_count":10,"received_data":20989501,"sent_data":4477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"revokenode.io/app.js?v=20260323b","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9778b273b8193e2bacd1509e0e50ad31","sha1":"94942ed55a07b20b35c356fdc664b016b8f4010d","sha256":"a5970a4beced959246d095999197decd75613307e0c4c219ab4c853839ffd100","sha512":"e1231dc833608e8ba36b435c774f8632270113f43cb84afbf517a953da1147b07bc82fc73c5f433267289c80a377f0be1e8d0d89a6caecf2c8b45758ed72ad77","ssdeep":"","tlshash":"88613f6bf2f9347a407fb0f9aa8f9a99b075044a6106f802377dc7402f93c6118e19f9","size":3424,"data":"","first_seen":"2026-04-22T12:45:27.621804Z","last_seen":"2026-04-22T12:45:27.621804Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"90e4d85d141d210abbc3a54dbd627595","sha1":"93b97b2a78d626c52443cb9bd85f78769122d478","sha256":"3eaa333c399193722c838452c1367d41de2812ad1759a92a0bc0b45d3d6e1888","sha512":"331fce5de6818fc1e0f4bacd9e5a1a304e7345996801626507a156fe873b7714b5a0a102177554d33419ddd7e9057a6c698fe46d2405d275ebdf7ab32c50ef86","ssdeep":"","tlshash":"59f050af9a5b12f519677277e33d1a84d51208a71419c404fcbd49ccaf74e14f061ac7","size":553,"data":"","first_seen":"2026-04-22T12:45:27.627941Z","last_seen":"2026-04-22T12:45:27.627941Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"revokenode.io/styles.css?v=20260323b","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://revokenode.io/","date":"2026-04-22T12:44:56.235Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET /styles.css?v=20260323b HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://revokenode.io/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\netag: W/\"c1f931f42328fab8afc3fe04aa5e4798\"\r\ncontent-type: text/css\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uhDXw9W35FdPtfeTVOcypAZ0GMCf5QE71m3Nnbgvp6kk88r0h%2F8Oyxw2emMTAQkKNAquL5zAtxF%2FgIFvgLX%2FOj3MJCouGCYJjf8ocGD8%2F6DkZxCvdUmUkKU%2Fwg2%2FNqKc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f04b9037e245fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26842,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (331)","md5":"442b9a7135e7ae80bceb4fb052ff6e60","sha1":"e9e2743ac598b67283ac753802221fbb972ba1d9","sha256":"f140aec563d6e64d63967c66a846d281f21fd8f61ccc2af2e75c2ed662be2059","sha512":"a864f9c68b1222c926e996c4d6e340dbbefc03048452a9fcec0d4de230caa80a097a68c8f45dd497d852a1fe2de52eb01177247ba82c569fff342d6efecb4e24","ssdeep":"192:oi9RMTvBF9EYrfCx+cAH6Ik9Uy4HwgGnqtka0ZK4Tkk6Irv0hECegR3mpKX397aj:x00I0g30w7+6tmczlQZw2oQ","tlshash":"fdc2c7c667751628752fd0a4a993ab49b37cc043810ecebc5bf9206cae891de9573f4c","first_seen":"2026-04-22T12:45:27.617878Z","last_seen":"2026-04-22T12:45:27.617878Z","times_seen":1,"resource_available":false,"data":null}},"time_used":85,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":83,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/images/smart-guard-scanning.png","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revokenode.io/","date":"2026-04-22T12:44:56.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET /images/smart-guard-scanning.png HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://revokenode.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\ncontent-length: 3671977\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"f3fda67e66fc51530fd13bf88430a50a\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IZZxN9WXlHnxJUOvhv1M8BNB11t61y1PsmKBR%2FQHBAq2yvC76Htfjfn9db%2FZJthh210I07ZvLXy93GrZn6WE1PX57OZSnwBlsrTnqSPUNNoJm8PVZAAZMm3mUKerTvrd\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9037e275fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3671977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1600, 8-bit/color RGB, non-interlaced","md5":"b655c7b577c41d69521290ed36bee0e9","sha1":"93009d806481c380c1ea935bbf0f556d727506d7","sha256":"533ca3c2575ec0e6146c539e9dcb8a65f7ef0ceb6a9bbbb42530db9dc55ae3e9","sha512":"90835df119465b6c8d3794934b37da4f283457c986ef0ddd9877a5c22b15dd3657ccb0b06ce0831b3fea8d656bed08d9f52d85b8fcb7ff3e81619ce6d847093e","ssdeep":"24576:q5/lmnqZTBEAjBR/lxLbtfvWYhBe6tLxr35ew92Mv33w:Q/4q52UR/LbtVI6tlrpewoy33w","tlshash":"ce2533b0d4749b32da9f4e3669ca30431e3adb9dfa26f7958f1275d103af05a150138e","first_seen":"2026-04-22T12:45:27.61888Z","last_seen":"2026-04-22T12:45:27.61888Z","times_seen":1,"resource_available":false,"data":null}},"time_used":806,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":647,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/images/installed-management.png","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revokenode.io/","date":"2026-04-22T12:44:56.241Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET /images/installed-management.png HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://revokenode.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\ncontent-length: 1292572\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"6d4c2129e94e0909b7f7b46daafee36c\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H7XaPpVdR2R7C5Wu2V5GRRBJmD68Ub%2B%2FINoy%2FMciH7CWPwzMS5GvBSazUsGRgvvzDjtTCFr0ouLQT%2BSNFdWDie%2FU06dTc3I7GzRogsZ62XDhVhpWuj4tcIs55ErHMCIa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9037e285fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1292572,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1600, 8-bit/color RGB, non-interlaced","md5":"0850366a129e4ca23d1ee6edca7c3ce4","sha1":"0156ce246996a214fb93ae13b4777eb95469f731","sha256":"2b5f046f9857c8058d90d0c60fbc23e381addd0b269149d25f18e60fa3969f70","sha512":"a5cd1558bea5eb592f8868087e00b2444b3fc9ef50979756f9dcfbc5a123e035c6bdeab0e9bb4a2ec90f90baccf4499670f8d1066d8333542d356701ff28bdb3","ssdeep":"24576:pu4WaGv1A4y8J/anjyN6DAcAezFUAVKPYfaXWHFt:paLv1ATqana1DOOGKPYfaGHFt","tlshash":"4b2523b8d4815a60c36b212c50cb3a5dcd8d38feef4110a8355686c65cbd71ea8aef7d","first_seen":"2026-04-22T12:45:27.619824Z","last_seen":"2026-04-22T12:45:27.619824Z","times_seen":1,"resource_available":false,"data":null}},"time_used":437,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":188,"receive":249,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/images/skill-store.png","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revokenode.io/","date":"2026-04-22T12:44:56.242Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET /images/skill-store.png HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://revokenode.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\ncontent-length: 2838639\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"95f37131f434842a4361a10ea2bd0ade\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TUTanXWSiGwuX%2FxLZYtoZ%2FVdwPT7eYvRY46mu56R7p8oeiClza1JwdwGFG4Ba0gaVpKBJvTU41zC9dVrLlXTK41E1gJDuxaIbVbx7KHu0IB1A41VhDwpiJ7FuWLzIuLv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9037e295fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2838639,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1600, 8-bit/color RGB, non-interlaced","md5":"d8a7091a12ee70dc40ea6eef7085a3e4","sha1":"2a6aca1a7c3863cc481f4bbfa7eb9a3caae59267","sha256":"41c43949b572834acb71bab308c63c5d2dfa26dac61878637088789f81f6d43a","sha512":"b144b9b7c30c6c996680071dad29ce2f51dc29cc550fb7c818de2bba18cda6e4bc398290b9e749a409236794082c451290dca25026da6e44afc06655705837dd","ssdeep":"24576:+N1GnG7BpNc03OT8Bo6ZHdRx4Z9fgwpNgN69uWuBrBsfP:+vcY3Nxe0Hdv4Z9f1lc9w","tlshash":"162533accbab0b60c6fdb4c0e038d67c02d3d229be89519595ab1c4e859ce144ed6f77","first_seen":"2026-04-22T12:45:27.620742Z","last_seen":"2026-04-22T12:45:27.620742Z","times_seen":1,"resource_available":false,"data":null}},"time_used":545,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":436,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/app.js?v=20260323b","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://revokenode.io/","date":"2026-04-22T12:44:56.244Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET /app.js?v=20260323b HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://revokenode.io/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\netag: W/\"002aae196655452dbbc89491324d44a8\"\r\ncontent-type: text/javascript\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YF%2FKbp%2FBOo58B0Zc7cffMqWh8Ucel2dlmyKAQU2CBeccfqWiun1AX6lAwLEwZM4r3ImXVJrAaIxT2%2BOh%2BwO4Gk%2FNjQn%2FNbD3Z8ZC9YxjFaECfLFwGXlnnCuRT7CTZNMg\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f04b9037e2c5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3424,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"9778b273b8193e2bacd1509e0e50ad31","sha1":"94942ed55a07b20b35c356fdc664b016b8f4010d","sha256":"a5970a4beced959246d095999197decd75613307e0c4c219ab4c853839ffd100","sha512":"e1231dc833608e8ba36b435c774f8632270113f43cb84afbf517a953da1147b07bc82fc73c5f433267289c80a377f0be1e8d0d89a6caecf2c8b45758ed72ad77","ssdeep":"","tlshash":"88613f6bf2f9347a407fb0f9aa8f9a99b075044a6106f802377dc7402f93c6118e19f9","first_seen":"2026-04-22T12:45:27.621804Z","last_seen":"2026-04-22T12:45:27.621804Z","times_seen":1,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/images/upgrade-pro.png","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revokenode.io/","date":"2026-04-22T12:44:56.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET /images/upgrade-pro.png HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://revokenode.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\ncontent-length: 4145465\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"17056577b9af8a8b052d3312ff086083\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xWIltDdFswVrVz9byGurdRAAIzloRDiOKS4tAvNoxWvgQuI2LFmW3ye6gwZbZn8oRDusqlqJ9bQFptODdgJlzcioCyWwGNDy6q45kR6Zr1tOM5%2Bk%2B9jHHjXVdM%2F5qazx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9037e2b5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4145465,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1600, 8-bit/color RGB, non-interlaced","md5":"097246c9d72654fc2731bceea125e73f","sha1":"9ad3b36ba140c67efaebf351995a0f0bfc868949","sha256":"f26b336c39f070e28128006c46c6b3641be8a4361044671fcb4f0e00c28e0bb5","sha512":"1ce6716c6b083823ce58ab7a482eb14862a55a8ee4155aab500adeab1096bf2716eb9115649106272d45e54c50a80e3c2e9bc0d13cc23f5a89f6efc1037a3166","ssdeep":"24576:WgOCURBEeSuxGhqjvPVx9QXl7Nh8y7hPZO7IUD:WgzURVBxzjvP9wCy7RZM","tlshash":"e0253340def41935b5ebb82ff76aca1007ceb0151ed721d652ecd80d66e48a1af4cea1","first_seen":"2026-04-22T12:45:27.622697Z","last_seen":"2026-04-22T12:45:27.622697Z","times_seen":1,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":157,"receive":760,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-22T12:44:55.902Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\ncontent-type: text/html\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AO%2FhhA4yh88lwOuuBo9w9AIXmRt1D%2B9PAKTBd%2FCKrap2A9DSp6IJl9C2zMre%2FdTmxQikK%2B1IX%2F5DYaeXf7%2BypJZpSVQQu0%2BxbEIA5h0%2BxUtv8DAxRJXx3ZPt5hlg88xz\"}]}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9f04b901a9240b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46096,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (813)","md5":"74509c95664870b9f3cba365788b07a6","sha1":"049132b5554e6e0a70ed4e5b81f242f52ac1b2cc","sha256":"11f73a93554d8dd7d3a70512ee9c4cd71741ae4aee390cad257a16d8cf61783f","sha512":"9cd3f03280e6a7dd5036f445d730b55654734c786b1d94bdeedf5b015ef7de0b90d26ed36a2ac72771fd393f4cee6fe5471d2ede249eebed26a2552633b3583c","ssdeep":"384:0qB9TSvIItit36wP5pCqpwG1oy6ki4CgzaoWYY0fzffzpULtpULttSSwTW4/rmQR:FB9MIIzwPbQAZ6jWlwLwLZmnDmxK7J","tlshash":"7423636194f1a2bb059380d3abb56b1ebed48507d71f2240b6fc53a46fdbd41ac432ca","first_seen":"2026-04-22T12:45:27.623886Z","last_seen":"2026-04-22T12:45:27.623886Z","times_seen":1,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":42,"dns":23,"connect":1,"send":0,"wait":65,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/images/security-scan-results.png","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revokenode.io/","date":"2026-04-22T12:44:56.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET /images/security-scan-results.png HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://revokenode.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\ncontent-length: 1127116\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"198fb4f7a5c259f7baa903ed8145b35e\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IB752B1CsrqChXOQciVeUCiDxT%2BeW8lCF6JGWmRRUgyXw07DlduF%2Bd5gouuztmRR24fprd%2FNLNC8D3aoh%2F4ZKFS4NxR8fjXpqj8RgP1iN3pnRDyB8gmmWXh02HIRRUMa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9037e265fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1127116,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1600, 8-bit/color RGB, non-interlaced","md5":"d4f82a9bfcdb4add13e9ff53590536bd","sha1":"e4ca9a4b6d48c5946f5a4e19f4ea65a25507b3b4","sha256":"375182b5dbf1d576295cc220818f1e1d999bd2ddc9b0f45bf00cbfd9aae2dfc1","sha512":"ebd824c314987b3d11970e17a64f1626e080384dbb3cf6f75b6717e387deafa98ffcd5505b253a7a45092b4fb88ba74f3517ca34df8953671d05a360f7ee0592","ssdeep":"24576:ZmCWVBzA5CydEPqxJeGqD22RvkXggkIdruRt:1MpA5CydEGeP2GEgkdCP","tlshash":"8125238cc174897a390bd4354b542835da846a61e3b7d0d4e206f8c9abdcbc2672df7e","first_seen":"2026-04-22T12:45:27.62501Z","last_seen":"2026-04-22T12:45:27.62501Z","times_seen":1,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/images/smart-guard-home.png","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revokenode.io/","date":"2026-04-22T12:44:56.236Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET /images/smart-guard-home.png HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://revokenode.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\ncontent-length: 4221199\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"07a34107a89e9dcc2216f3785765fe77\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uxwPlpgqVYoY5P5kbNAIwF29dfgHmKkby4Dja6xdpZd86HnvWWjPqkim35fddwbXQXjupKW0KiK9tMlg2huAnAJTYr2MEw56cehLTE0OJyHRUekOhHDYXMsUIgAHOCBe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9037e255fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4221199,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1600, 8-bit/color RGB, non-interlaced","md5":"730de07b4bc321d70c14e7aa2b8dd16f","sha1":"c10133c2ce92c29892b6cbceadac680f4c29d9e4","sha256":"455dae5ae73efffd912217d1b2962e9d4f3004d497e20d0448e0787ccbca2b48","sha512":"7f52437ff24f823da327c49b8a1be0b7e2f6ff40f210b94982548a63449b037b94726319dec17d835002e1578f37f08e1db2bddb9e2175230f15443ad91ed215","ssdeep":"24576:q5/Rb0uNPPBKpw/j99WjwB0x+En3jGYKwcyxsAribhnb:Q/l0ekC/j4wBW+En3jpcyxsAuNnb","tlshash":"5c2533f8e1ddd16459e17401beee0305325873253362a63bcefbacd6a2bd52529c370a","first_seen":"2026-04-22T12:45:27.626198Z","last_seen":"2026-04-22T12:45:27.626198Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1013,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":857,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"revokenode.io/images/key-vault.png","fqdn":"revokenode.io","domain":"revokenode.io","tld":"io"},"ip":{"addr":"104.21.25.31","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://revokenode.io/","date":"2026-04-22T12:44:56.243Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"revokenode.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 21 Apr 2026 06:56:48 GMT","end":"Mon, 20 Jul 2026 07:56:42 GMT"},"fingerprint":{"sha1":"BA:46:73:AA:45:4D:0C:38:43:D7:6C:0D:6C:8D:36:BC:E5:10:A6:5A","sha256":"5D:E7:21:D3:DC:B9:CC:C2:71:29:7D:70:74:A4:19:5F:5E:77:7D:3D:21:24:C5:F7:DD:91:12:4B:A8:7B:8F:65"}}},"request":{"raw":"GET /images/key-vault.png HTTP/1.1\r\nHost: revokenode.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://revokenode.io/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 22 Apr 2026 12:44:56 GMT\r\ncontent-length: 3609594\r\ncontent-type: image/png\r\nserver: cloudflare\r\ncf-cache-status: HIT\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"12606a406d1ada5664b15d554ea03397\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gSCec%2B4Ry%2FoffZ7qe3f%2FPNayDhEqE77W6yLF8SdP4Dla7hr8oRBd4wpIBBDXye5aLNLA0an660O9J%2F9kLT8uHv2sEV7p%2BVIGVQ6c%2BuN065xHifI%2FhpW1dnxzsEsZ%2FGez\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f04b9037e2a5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3609594,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 1600, 8-bit/color RGB, non-interlaced","md5":"41fb6923dbd7b503b2c2f885192eb9ac","sha1":"9dc2420d14c97641c9c86b694f4a20db98a821a2","sha256":"b18a9b6038a6b59354b886b458479fd5390be5ae8b8d0a8667781259cb8b187e","sha512":"a583679587e96192cd997190b431c475eb27fd909f044e9dbfd96e3794e1c7c040d04ee06196c555deb3e5fedd10f48ed2eccbddb16c8e9e22ff99b30d9ebd3a","ssdeep":"24576:Pad5WwFVCHjqze8nQ7DenXdIS6SDUSeraoGgyFnuEQpn8U:Y5WVDqzjnQ7DenXQsfvVzo","tlshash":"562533e78489f67bea0e9550c4bca4c680e5bfd817ebbc3338a09ae5c28d424c5553f5","first_seen":"2026-04-22T12:45:27.62713Z","last_seen":"2026-04-22T12:45:27.62713Z","times_seen":1,"resource_available":false,"data":null}},"time_used":664,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":572,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-22","alert":"Sinkholed","trigger":"revokenode.io","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}