{"report_id":"758ac936-3ef1-4d1b-9e78-525ad36705eb","version":0,"status":"done","tags":[],"date":"2026-09-03T18:44:59Z","url":{"schema":"http","addr":"invoicebase.pro/","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"invoicebase.pro/","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"title":"Unlock Finance Success with AMLTestWallet \u0026 AMLCheck 2!","dom":{"size":133195,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45714)","md5":"fafefeb69e9d0145ca4f892e88e9ba62","sha1":"ec4a52b88802f9b38f967a3acf1f2ed8710899c7","sha256":"e082d8cfc6a024035687f543199cb6231f29eedc4d9d9eea9d00d12e89600184","sha512":"cffd1ca0d8ee3d96669ea779712e591e4009ceed7491c4a4d52a5e1d4de2e2aa486a86d08336b3efc89000f65fa9cfe44515fbc3bd5a05c8ec66f8268794b622","ssdeep":"1536:ppleW6fUL4mLVwnhYmm84zqyrY2maxLCeu+ew9Yeei46qIRKodpooRmaxX:jgnqBVzqJodph","tlshash":"90d3e461a060053ff23343ebddb4ae5c3265242ba926c790beed34c7ebd68b1d5944e4","dom_hash":"domhash361fb6ba4b24d82722b25904e7b301a3","first_seen":"2026-06-28T22:02:45.363805Z","last_seen":"2026-09-03T18:45:06.430714Z","times_seen":14,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"invoicebase.pro/","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T18:44:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"invoicebase.pro","ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-03T18:36:39.32016Z","last_seen":"2026-09-03T18:36:39.32016Z","alert_count":50,"request_count":50,"received_data":4849507,"sent_data":25988,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-08-30T23:14:54.105192Z","alert_count":0,"request_count":1,"received_data":68660,"sent_data":513,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":3,"received_data":52226,"sent_data":1638,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":15,"received_data":561303,"sent_data":8628,"comment":"","tags":null,"fingerprints":null},{"fqdn":"telegram.org","ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"domain_registered":"2003-12-15","domain_rank":499,"first_seen":"2013-12-18T13:14:30Z","last_seen":"2026-09-03T08:07:28.123462Z","alert_count":0,"request_count":1,"received_data":116841,"sent_data":473,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"invoicebase.pro/","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cdb4e8ff2152a816eceb98f45eb3a61e","sha1":"e6cd3f0ab353026abf0d594db62551db7e23c2b4","sha256":"cfe8d434c5be26e09cae803d27176a35185d4e920de0e2ce6922103266c197fe","sha512":"3af0924f1c0f9f2377360dade772a019caa11dde06eb0ed3bf1c2b9944177815eb2b8ccd66fc83d9e02c2602502604d38f06d20b9b5f71c076a50bccbbf95190","ssdeep":"384:4QQYgHZwhURYOEWhYKiFK1bTUR80c5dsX7NA/tUq+W0MbJdGB2wjWFTi4lykrERp:FgnhYs1ZFbm4osvw","tlshash":"d0e265b68274192ff6b05b7acd747cec489d1e6fa914c3e16cdf386ba558470c2812e8","size":31940,"data":"","first_seen":"2026-01-19T18:34:16.023951Z","last_seen":"2026-09-03T18:45:06.472225Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6bf540af0e2911118e57cf5ec95027d","sha1":"1fed53f6910e210d9536fea4952f5d29cc927684","sha256":"c372989912d2652278e4865a3add220d71fbca63c840f45a5944339bf55f7458","sha512":"62ce7fc55b2242aa956316845c92434922af0703089c51ec177578f7645adc3ab6463c2cce70771213d22404d15ce231746d6457780d6f098d3f0adf6b372adb","ssdeep":"","tlshash":"62f062905b2800378b8340fa3121f0ea2a7890295689b200c85cf36e90f914bf76e2a5","size":635,"data":"","first_seen":"2026-06-28T22:02:45.427958Z","last_seen":"2026-09-03T18:45:06.472782Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/_nuxt/assets/index.js?r8g2d74","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6efcea826a3af135ea7e51e1f53277c","sha1":"0a7b271fc0ebc72df06134b4b358404302c7675f","sha256":"a9b0092ae6ba206c2d9881e7545dc6494eae6b2ab0c4c65e57e10b67cf65ea4b","sha512":"6bc0cb338744400063d8f63d79af7f319235c54251c0178d99215a74844ddbc03cfb13fd6ca9c6339098ff389d20c2fad1d18215e5a99483df6174b140e32905","ssdeep":"24576:YNCSe8fooelbwz3RuAuV6scbaD8nA55q0k:YY98fooelMz3RuAuV6scbaD8nA55qv","tlshash":"ea25d6d7e2b28c066eddb9953ef35cf708da40d29d8d0760a3d3a80299e07b19761973","size":1011122,"data":"","first_seen":"2026-08-28T13:03:16.800553Z","last_seen":"2026-09-03T18:45:06.446516Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"902f42967b7188b199198f6e4fb961db","sha1":"8b3727c0199e79fb2add9ef2ebbcb9c31e8d2f7a","sha256":"8001d5ce078e11d7f0a6d860940b0b7155caac86fae17af5e8a56d70747b1992","sha512":"4268ff5018db23e363c84b3061b06ac69bf35b8401e719ba296bc3dd3416ebc7cfb78bf3e54333cc22a51c2f46314cb468dbb81b295297235833e6d2f0e047a7","ssdeep":"24576:LdVwMbmi0Plwz/7YywbeOmJyp6nU15OQB:LsMbmi0PGz/7YywbeOmJyp6nU15Om","tlshash":"a725e9dae2b34c125ddcb1953ef348fb181d41d39ece0760b3d3604299e5ba2a561ab3","size":978498,"data":"","first_seen":"2026-08-28T13:03:16.812263Z","last_seen":"2026-09-03T18:45:06.473865Z","times_seen":161,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?xij5ri3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","size":116510,"data":"","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-03T23:10:26.153508Z","times_seen":1046,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"1.17.25","filename":"https://invoicebase.pro/_nuxt/assets/index.js?r8g2d74 line 1 \u003e Function","line_number":3,"column_number":811386},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_header_colormap[actor:server1.conn0.watcher17.process7//obj55 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color_key:map[configurable:true enumerable:true value:bg_color writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js?xij5ri3","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_set_bottom_bar_colormap[actor:server1.conn0.watcher17.process7//obj56 class:Object extensible:true frozen:false isError:false ownPropertyLength:1 preview:map[kind:Object ownProperties:map[color:map[configurable:true enumerable:true value:#ffffff writable:true]] ownPropertiesLength:1] sealed:false type:object]","filename":"https://telegram.org/js/telegram-web-app.js?xij5ri3","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_theme","filename":"https://telegram.org/js/telegram-web-app.js?xij5ri3","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_viewport","filename":"https://telegram.org/js/telegram-web-app.js?xij5ri3","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_safe_area","filename":"https://telegram.org/js/telegram-web-app.js?xij5ri3","line_number":135,"column_number":13},{"level":"log","text":"[Telegram.WebView] \u003e postEventweb_app_request_content_safe_area","filename":"https://telegram.org/js/telegram-web-app.js?xij5ri3","line_number":135,"column_number":13}]},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.229Z","timestamp":1788461064229,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:32:05 GMT\r\nexpires: Thu, 02 Sep 2027 10:32:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115939\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":19533,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-09-03T20:12:18.58108Z","times_seen":11929,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.org/js/telegram-web-app.js?xij5ri3","fqdn":"telegram.org","domain":"telegram.org","tld":"org"},"ip":{"addr":"149.154.167.99","port":443,"asn":62041,"as":"Telegram Messenger Inc","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.653Z","timestamp":1788461062653,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.telegram.org","organization":""},"issuer":{"commonName":"GoDaddy TLS Intermediate CA DV - R1v1","organization":"GoDaddy.com"},"validity":{"start":"Tue, 25 Aug 2026 15:23:05 GMT","end":"Thu, 11 Mar 2027 15:23:05 GMT"},"fingerprint":{"sha1":"D3:F2:BD:73:90:23:52:7C:F2:6D:35:7F:50:B8:B8:02:08:20:4B:56","sha256":"77:93:78:39:A3:40:CC:A0:3D:7C:07:91:31:55:5F:C1:96:A6:72:7B:23:EE:A5:40:39:CD:81:93:81:7A:21:F6"}}},"request":{"raw":"GET /js/telegram-web-app.js?xij5ri3 HTTP/1.1\r\nHost: telegram.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.30.1\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 14 Jul 2026 09:31:36 GMT\r\netag: W/\"6a5601f8-1c71e\"\r\nexpires: Mon, 07 Sep 2026 18:44:22 GMT\r\ncache-control: max-age=345600\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116510,"size_decoded":24062,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (768)","md5":"7ff489f43d13a9c3ee7f7c7f6f4dd7c9","sha1":"07be491fa7955c1d77363629551064f42e448551","sha256":"3549138a7934039fe7dfd1291a4ee739bd2b705a614308053a8b08a87d85c451","sha512":"2b69a2654fc2b049aa90773afd62510e46aaec8325d76d2d0bb873e3b64d119a0567608a156231792e2e139c1f7fc064c104021f3ad5cea4114c1ef83049dbed","ssdeep":"1536:pdpTpRdoKd4F0WN2ZbBcn9cF9KTfVjLo03ueLE+wFFz1NIVIB/MGYV7p/xHK8ITU:TpTpRdfcKFU7RxDv","tlshash":"e6b33e4d6cb3612285b3b1bf8b5f925172719883301def20794d9b646f80e7c53eaad8","first_seen":"2026-07-14T10:55:37.795951Z","last_seen":"2026-09-03T23:10:26.153508Z","times_seen":1046,"resource_available":true,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":5,"connect":22,"send":0,"wait":46,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/team6-DPDdh9tS.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.699Z","timestamp":1788461062699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/team6-DPDdh9tS.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:51 GMT\r\netag: \"696ab513-2318\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JP%2B7DuCbpYL9TJiv4mgOmKdwUiytJT7C1nMGEQKJRJst45B4rAzBP95IQQAI43gmQi77YAxJxxJb2lfz2cc7SuCQfVcO099jEEJB%2FXskgrVhDkQ4DLWSlr70%2FJFAVawIcLs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9dc8b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8984\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8984,"size_decoded":9723,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 470x367, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"f822e2a651b0af7203d8e64d73eeb4d2","sha1":"4e4b8b106c97fd3ed1f16b0a046d2682278ac501","sha256":"1738e33bcc2868dcddad08881d049194c7a1d79c3e1f7a8890f7ce38e8da3d07","sha512":"ab5467bb2e9efd01ee5c122d2a671292ae11ab2937bb27da7ef1acda70b37e8c1dfb4ddeb6fe75df3d1893a1549d89233902b778066c9c85d03ed28d4d31e180","ssdeep":"192:eiWDqgYFlVwgF6hp6kWAZPsT4h8dgkE3s9FtEvtzrU60wp:eNDqgYfSgohp6kWsT8dgkE8F+3","tlshash":"2902b06b35a5c339b0fe36649de85268dc20fd61699931f2dcd9a35db10e41d8ec30ca","first_seen":"2026-01-19T18:34:15.975067Z","last_seen":"2026-09-03T18:45:06.4358Z","times_seen":42,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/menu2.png.html","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:23.144Z","timestamp":1788461063144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /menu2.png.html HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/index_files/a0iyt.css?hcwmgqv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QtowkS8dQRmZn48jp%2BRnaXsBTG8sxgP4ZiiQXEk%2FCL8dxfZnGOECdxp35BxsI88koROiWx233ZcCwVNy2C42Bc%2BfCGupKoxZhTY6yTuSij11ceoe7evIBLTZ3kzV1kvaNl8%3D\"}]}\r\npriority: u=4,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a356e7ccad1d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":344837,"size_decoded":64469,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45775)","md5":"66de74904e2cb63eeabef7caf22cd208","sha1":"352265db58038327aceabf03d5ba88b6150f9784","sha256":"a3faf8e40b47aa624bf300e8e6fa2c3510a6c4adf5ab984982febba9b7b1edf3","sha512":"27218375ec5622c2c79ac26e6292cab43cf2e5d47a411c3223579849effe89aed10d4f51a4b9b08a858345dfece9a52b60abf6c809459b7abf65f1100977877f","ssdeep":"3072:+gnqB+v3ixPG7dRHpNWCmhOtxsgefuo5lAY:fnqB+PiVG7dRHpMCmhOteV","tlshash":"8a74961a55b100763d23a1f9efee6a1d727aa087de2ddea07ecc2121cfc52f49d91244","first_seen":"2026-01-19T18:34:15.987159Z","last_seen":"2026-09-03T18:45:06.437879Z","times_seen":43,"resource_available":true,"data":null}},"time_used":568,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":342,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:23.191Z","timestamp":1788461063191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-03T23:38:13.46471Z","times_seen":276328,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":40,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/api/is-banned","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.103Z","timestamp":1788461064103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /api/is-banned HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://invoicebase.pro/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:24 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncache-control: private, max-age=300\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6iqsAz1p7n%2FFHrFrr%2FVQGfyFin83%2BZowmwZ%2BlqNbinY82vJywTK5BUsJP8K%2FOvupIm9kDnvzoHDkCtEhcn1uUYW129Jtyx4uE6%2BUTUuv8ALiaAVUbx5BQE8w%2BUK57ZLzl1w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7d2ae56120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1,"size_decoded":768,"mime_type":"text/plain; charset=utf-8","magic":"very short file (no magic)","md5":"cfcd208495d565ef66e7dff9f98764da","sha1":"b6589fc6ab0dc82cf12099d1c2d40ab994e8410c","sha256":"5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9","sha512":"31bca02094eb78126a517b206a88c73cfa9ec6f704c7030d18212cace820f025f00bf0ea68dbf3f3a5436ca63b53bf7bf80ad8d5de7d8359d0b7fed9dbc3ab99","ssdeep":"","tlshash":"c700000000000000c00000300000000000000000000000000000000000000000000000","first_seen":"2023-03-07T01:37:31Z","last_seen":"2026-09-03T23:37:45.727397Z","times_seen":120664,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.218Z","timestamp":1788461064218,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115977\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-03T23:38:13.46471Z","times_seen":276328,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/team7-CmlWnAqS.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.700Z","timestamp":1788461062700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/team7-CmlWnAqS.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:47 GMT\r\netag: \"696ab50f-26da\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p%2FM0uawiQ%2F%2F2FVho1sJcVWLZUW1W1fdT0PyGP0MrPaWalSwk3NcpwR%2F2fG5zientY2Z8MhEHE8oe0vQiwmMRKDBRfzGTM%2B%2Bc3%2FMivLk0hNgZD5VJjY6aTjd0iHqCObVcUsg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9dc8c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9946\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9946,"size_decoded":10693,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 469x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c04337eb074f00ffc5e6ce60e1a064ff","sha1":"f87e897f53f4d6859ee8b4c3b4e7663aa393d560","sha256":"cb86c23511c33d44daa03e8281258c5b34745daa9a1b88e6137ed4144da9c90a","sha512":"362e65689ea9efcca703f58199206f37f91d7780c8e23d3639e52dc323fc391f83d862c16e694488a28bea3d5f41f1d2e8a37ab0aa2cfbd767884298afb81c72","ssdeep":"192:fRG7N5ZeKeM736nqcRqaaJ6T1WH8LZaSGEFYWc:475XeM73GqqqaFE8FEeTc","tlshash":"4b22c0bf84b010336e0a8d1849955971d0654a9cef0351202d687d6d8339d37e2effee","first_seen":"2026-01-19T18:34:16.010816Z","last_seen":"2026-09-03T18:45:06.439654Z","times_seen":42,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/oneobmen-CyrSxzF4.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.705Z","timestamp":1788461062705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/oneobmen-CyrSxzF4.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:46 GMT\r\netag: \"696ab50e-275a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U5MagLQAaI02iMtUwL1oFJoiGGb6CPOkfdH88NmwP7k7v8sYcb0KB%2Bq78ZVUKIT9YkueFNb3hKinkZ9FuKohhMj3TrXj5N0dqNbRn%2BAu42jHbMRkCcbyVa1ZV8dSr%2FJhJgM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9ec94120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10074\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10074,"size_decoded":10814,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"19a2d1a04f29c077d133797acd985b55","sha1":"988163e90b88fdb031187311022c74a6300da4c4","sha256":"f1a586c570656a908a162a5ed073d8043d75190786bed7763b3d16ce76110183","sha512":"e65320b8444c1f4a84c5c8e87a65d872dbd62bad4a506df49005156b32256b6b551e41eaf6825ef3e865cae2afde247ec72bbdbc4f53b20587aea1be391aa35a","ssdeep":"192:dG4I2+G8kpFaqYIktFfn+Nwezwrezy8BNw5sbhee20e2RDuu0SHx31F:dGLGvpzY/ffn+NweErezPBNL1s0dR1","tlshash":"2c22c0b66977a00fc858654c6dab0769808c0875360d0cb547fe422fd2d60de67ad72f","first_seen":"2026-01-19T18:34:16.016868Z","last_seen":"2026-09-03T18:45:06.440361Z","times_seen":42,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/65c82043c70f0ca23e677d31cb87d970f71f2130.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.723Z","timestamp":1788461062723,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/65c82043c70f0ca23e677d31cb87d970f71f2130.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:49 GMT\r\netag: \"696ab511-2096\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4AmZiRHhZOmsv7WC6tddhglGku68o3LuPQovszDnVorFZ2nvN2q84%2Bp5o7I8wH4ZPzK%2BWXwA6h2itsjhFynKp1%2B4o8%2FII3zTggSjch8aQ3L8np7QqarDYtevlCLtlHSbR8U%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7ca0ca6120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8342\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8342,"size_decoded":9083,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3ecbdaa705b537a2ed4af911c1085ada","sha1":"4c8e8a29855b81b6cf09123c687186c58350cfc6","sha256":"91f4676cc128bcab34af1d9a822edd2c7754a5e255315ecda3daf0043ddf9711","sha512":"5745a1200ba307bec8a62a2b042304fac55356d9c0953ff96aa3bfab4a2c67483f3f4ecee755d1448205564fff82ca256b759eaca453301f9703e3a85cd6e3f7","ssdeep":"192:UD0jcIGADHr4iTbBgDP73lq3oa6YiAmqn8vVwfUG:i0QaPW3VFa6YiAV8Wf7","tlshash":"8702bf21a6e77d648522e2862ad184c830dfcae47a1573994e41f19687800f7bbd0f8f","first_seen":"2026-01-19T18:34:16.001744Z","last_seen":"2026-09-03T18:45:06.440893Z","times_seen":42,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.222Z","timestamp":1788461064222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:32:05 GMT\r\nexpires: Thu, 02 Sep 2027 10:32:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115939\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":19533,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-09-03T20:12:18.58108Z","times_seen":11929,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T18:44:21.763Z","timestamp":1788461061763,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=41foGXYBVtyXJGwzn4mSAmofjet7lHCI%2B3sWI6l1cp%2BhszN8Y03yd4MpHwDOQAza%2BCi21F0xvQLU2jOmAVMPWKpiv87Xa6x2nOkjBJZPnc4uT1bikA%2BC2L0XLrDXQwJ0gbQ%3D\"}]}\r\npriority: u=0,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a356e7c42ada120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":344837,"size_decoded":64084,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45775)","md5":"66de74904e2cb63eeabef7caf22cd208","sha1":"352265db58038327aceabf03d5ba88b6150f9784","sha256":"a3faf8e40b47aa624bf300e8e6fa2c3510a6c4adf5ab984982febba9b7b1edf3","sha512":"27218375ec5622c2c79ac26e6292cab43cf2e5d47a411c3223579849effe89aed10d4f51a4b9b08a858345dfece9a52b60abf6c809459b7abf65f1100977877f","ssdeep":"3072:+gnqB+v3ixPG7dRHpNWCmhOtxsgefuo5lAY:fnqB+PiVG7dRHpMCmhOteV","tlshash":"8a74961a55b100763d23a1f9efee6a1d727aa087de2ddea07ecc2121cfc52f49d91244","first_seen":"2026-01-19T18:34:15.987159Z","last_seen":"2026-09-03T18:45:06.437879Z","times_seen":43,"resource_available":true,"data":null}},"time_used":721,"timings":{"blocked":-1,"dns":6,"connect":15,"send":0,"wait":472,"receive":228,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/18ca64bcf3b61fc77291e65174a6b321f5eb4f3b.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.704Z","timestamp":1788461062704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/18ca64bcf3b61fc77291e65174a6b321f5eb4f3b.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\netag: \"696ab50d-1fce\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pMvX1UADjqyQWL%2BNFmUD%2FXtmKr%2BfUrQETtPfldMdGCJcMYWVIbLlk%2F%2BoJGOxQ%2FTu47VOG92ezeqRq%2FM0QZAUbv1aR2mbcpRgMu6wt4Ym%2Fy0YGdBubAl0Zl7T7duQsMRDczM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9ec8f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8142\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8142,"size_decoded":8891,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"67b3672440573ec6dd97d6686d18840a","sha1":"0cce7bd3aaade35f537cdb582a542d3e12f5193f","sha256":"daf6925382501dd4f87425adbc5efa3a5c43c629ae209d8646936d779d379e4d","sha512":"a6aacad2077080d94b6cec03b25d949f8dbf266fad08946df942e627c488ca2febf928b06ed882ef5369ec26a3132a4105a3c4ca93df07161e246245bc805ee6","ssdeep":"192:fDEVeIaBBsdU5wwcc+mSkxazB6jE5/vHwKH7tYre/DhYR1KmaN7cd:fDEpaYwjxSeuj3w0tYre/6KRNId","tlshash":"21f1afe41512c31774dfefbbb34c6759d76246a8da434804a18f86e9844448e6e02ff9","first_seen":"2026-01-19T18:34:15.983698Z","last_seen":"2026-09-03T18:45:06.441508Z","times_seen":42,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/favicon.ico","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.586Z","timestamp":1788461064586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:25 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fnr%2F3cAArKzxhchtOuY2ezx8j20niDKwJEo0caWUC7m6kZUON%2FB%2BAdzjDkHSXQzod623WGu2I4LAXYDhFRcow8fuHMfH88HlUW382lqJfP8TysVK8CEXRLUWzhSEpVlpHP4%3D\"}]}\r\npriority: u=6,i=?0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a356e7d5af07120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":694,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-03T23:48:22.721285Z","times_seen":556426,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/team5-Z1xAavYy.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.698Z","timestamp":1788461062698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/team5-Z1xAavYy.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:49 GMT\r\netag: \"696ab511-169e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MsxeByTnti3yYt7Fya9Xw8%2BZWmUn5PD2fMtVKSqEN%2Fm0A%2B5k4AfT%2B0O0gZKNjK%2BPKsMXEfym%2FgLbrHc0TY2WHiRvUsDIwWOm%2BxpnjsEQ3TocbKPEr4IQe4btMO6ttAA2n9Q%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9dc8a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5790\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5790,"size_decoded":6537,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 468x367, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5c122b99840dd0329e34f7e176f307ee","sha1":"9bc9b240438302a3e0acc371adb5084aa9b1f8d0","sha256":"45b52eb17b9c12db4ec249129e4b0bbb199cd36db0dff3694564e4b0d0ed514e","sha512":"09d456c86d923448ae6c034f80f29562bd8c109d6005ed4c22c1398588b7ea01e8e9c61e789efeed33bac668127021710385ce64d6ad05d1ed2a7bc2bae3c159","ssdeep":"96:rmlq7MsB2WOLKInx2HQJ3A+L8CygVko1EaR6nN82zkIJNQFVjwCce:alqAsYLjnx2j3gSoNO823JNQFVue","tlshash":"a4c19f39d28dc1d823871be5b62e795c141a8bd78846770c9ed8d44fa3a7602fddeac0","first_seen":"2026-01-19T18:34:15.998618Z","last_seen":"2026-09-03T18:45:06.442679Z","times_seen":42,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.225Z","timestamp":1788461064225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115977\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-03T23:38:13.46471Z","times_seen":276328,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/r90v9.css?xa53ixq","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.437Z","timestamp":1788461062437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/r90v9.css?xa53ixq HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: text/css\r\netag: W/\"696ab50d-36a\"\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u5EnUyYwmTIw5aKFLzKqPNjU%2FNdBC%2FzO4SZBldLF%2BRirh7qao4FNwNxiEZgx4znePRcCQyLwFPF%2B4LGn%2Bb2oAAaaGP%2FSdByu7a4uay56dJRYPHZTfbCqp%2B%2FHNyhNFiCEjDk%3D\"}]}\r\nage: 505\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a356e7c83c3a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":874,"size_decoded":1165,"mime_type":"text/css","magic":"ASCII text","md5":"5f5a06151feba2ac831733b82d0ea70d","sha1":"d35719b9e30e7228cae3861bbb13f3336d206960","sha256":"8636aff5b4b4b7a197ad813a7137c026f877771ea1c04cf0411c9481f5d367e6","sha512":"b1bda5399425116c5d9e9763cf12251f96335d33b8de6f82284f591d7a708b21e35834aec6798e22864410acc2c48995be58e52f80a9a0f3b197e4f9ea273f24","ssdeep":"","tlshash":"cc11cc56a66705067a02d1ae8f6637533b370127cb0ec71839b0f65bffc15b450e0644","first_seen":"2026-01-19T18:34:16.002753Z","last_seen":"2026-09-03T18:45:06.443637Z","times_seen":43,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/a0iyt.css?hcwmgqv","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.443Z","timestamp":1788461062443,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/a0iyt.css?hcwmgqv HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\netag: W/\"696ab50d-17c42\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WfL%2FoslMTtWPdS3q%2BPAGdEQJRJsp9%2Bwz75b8H8ZNf%2F0c%2BUD3D2DQlVKYyDixl00lsPNg%2FzvmL3JWDwIGBtF9RX3e758Fsnrli6tiTwNj13j519M4RkflkZa9MgCWB8ahi2M%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c84c3f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97346,"size_decoded":13763,"mime_type":"text/css","magic":"ASCII text","md5":"29d380de3b0cdf1eb8aed66d55e36e3e","sha1":"454033faf1f92c3fbfff9c88916d7b877ae1e123","sha256":"f557881af9ff80d96e2eaa3616cc53826b100581d6d5f81a450c1ae55e9546fe","sha512":"e0e06b29252594d4cbe288ca499b98fe7bbdc934e22e769e4ca3035a4e7fb0376a6da6b9ddb1056481f1aa8c053516df4e3ca0b964baff1c58c4d84f79395861","ssdeep":"768:QHFIR6Pkxoi/oTWNFZFYz4bFwYQQcb1mVbXk:4anxBowHuc9k100","tlshash":"fa93251607631945690b98141ffe1764726890439a0fdaf8becb7644cf8f2a8b5b2fcd","first_seen":"2026-01-19T18:34:15.967687Z","last_seen":"2026-09-03T18:45:06.444292Z","times_seen":43,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/what-else2-c8YgOWn0.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.690Z","timestamp":1788461062690,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/what-else2-c8YgOWn0.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:49 GMT\r\netag: \"696ab511-1da4a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uWd5xthGPxkN9yUD8u%2FkHs26M%2B3ddQTkKtsCYewjI%2BnHJt8jzUg9YiNeBWUd%2FYJEX46pqJM20h%2FPrY6RSfq1MhEkEZoXz7%2BLCoOGmk7dLBgUtpBxZBrFX4eATvrARoNWkdc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9cc83120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 121418\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121418,"size_decoded":122166,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b69dfcd8c29bfc4f2508cc9dd5f8d5de","sha1":"78f32e0c41df32ec90859219bcc022abc6073e7d","sha256":"c48a2088d24ffb0e3c37305a63f5041399bc0443b6dd953bfc04b80f6e80dacb","sha512":"5adf6d27363eefde8416a79c643fd3870f80424e88cdc9a8c794cfc2e9ffa6077fc433a66c1ce984a86ac82fe7ea4692dc3b7ee6fa2cb6c4966bd944ee9e5d9f","ssdeep":"3072:0ZvaMgOwH2zjUXcX/BSMKMaribKZgeaz5w6DlBNezaI0:0ZvaMvu2wcPxWA5ZlBgz4","tlshash":"c2c312314c089285245972acf0f46b0aaa5e1d1d76c4bff4f221674ea9a379f06d8f36","first_seen":"2026-01-19T18:34:15.997502Z","last_seen":"2026-09-03T18:45:06.444819Z","times_seen":42,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/menu1.png.html","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:23.146Z","timestamp":1788461063146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /menu1.png.html HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/index_files/a0iyt.css?hcwmgqv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b6UrragzuKYbYjCQdrZlg%2FYZMzSkQiUh5xMhUaMAKJECpDMUzMsGej3TaP%2B%2BthQV36uLTyTcAzURpqXrl0VabpT3t0IUcLYSCNE2gxqQDTm4P70Xoe9OrsfdO1tckxnwroo%3D\"}]}\r\npriority: u=4,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a356e7ccad1e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]}],"data":{"size":344837,"size_decoded":64585,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45775)","md5":"66de74904e2cb63eeabef7caf22cd208","sha1":"352265db58038327aceabf03d5ba88b6150f9784","sha256":"a3faf8e40b47aa624bf300e8e6fa2c3510a6c4adf5ab984982febba9b7b1edf3","sha512":"27218375ec5622c2c79ac26e6292cab43cf2e5d47a411c3223579849effe89aed10d4f51a4b9b08a858345dfece9a52b60abf6c809459b7abf65f1100977877f","ssdeep":"3072:+gnqB+v3ixPG7dRHpNWCmhOtxsgefuo5lAY:fnqB+PiVG7dRHpMCmhOteV","tlshash":"8a74961a55b100763d23a1f9efee6a1d727aa087de2ddea07ecc2121cfc52f49d91244","first_seen":"2026-01-19T18:34:15.987159Z","last_seen":"2026-09-03T18:45:06.437879Z","times_seen":43,"resource_available":true,"data":null}},"time_used":672,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":218,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/shield.svg.html","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:23.149Z","timestamp":1788461063149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /shield.svg.html HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/index_files/a0iyt.css?hcwmgqv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=51z9kzvBL5zc7EAglXZBqnlqIk2aCZcWlb3%2Bl18898kcGSY8ubM9oV8OiinmG2WFiPPqiUVNjwJOTy8GT7MAoe2UYChS8qekkY5r9WzGyMY%2F5MMbbyVfq%2BLXe18%2BCM7X7lA%3D\"}]}\r\npriority: u=4,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a356e7ccad20120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":344837,"size_decoded":64471,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (45775)","md5":"66de74904e2cb63eeabef7caf22cd208","sha1":"352265db58038327aceabf03d5ba88b6150f9784","sha256":"a3faf8e40b47aa624bf300e8e6fa2c3510a6c4adf5ab984982febba9b7b1edf3","sha512":"27218375ec5622c2c79ac26e6292cab43cf2e5d47a411c3223579849effe89aed10d4f51a4b9b08a858345dfece9a52b60abf6c809459b7abf65f1100977877f","ssdeep":"3072:+gnqB+v3ixPG7dRHpNWCmhOtxsgefuo5lAY:fnqB+PiVG7dRHpMCmhOteV","tlshash":"8a74961a55b100763d23a1f9efee6a1d727aa087de2ddea07ecc2121cfc52f49d91244","first_seen":"2026-01-19T18:34:15.987159Z","last_seen":"2026-09-03T18:45:06.437879Z","times_seen":43,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":435,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.224Z","timestamp":1788461064224,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115977\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-03T23:38:13.46471Z","times_seen":276328,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/cj0y4.css?egssuw7","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.445Z","timestamp":1788461062445,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/cj0y4.css?egssuw7 HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\netag: W/\"696ab50d-5d2b\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qYiyTGNcdwrDsT9%2Br6oKu0k5Dr2gOuJ1ZTfp59HH095kB%2BTI6KvER7aO%2BT6Rywvtf6hdqNYR5xWA4uca3E1urHgDH1sA%2FI2slkpLmDHqjnT81N4AFC3UUawbkJkiYWPps1c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c84c40120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23851,"size_decoded":4951,"mime_type":"text/css","magic":"ASCII text, with very long lines (23850)","md5":"d849077e8b4cc93dd5c925165f2cded4","sha1":"496b8e753292cc78d4964d94eee5c250d53ca13a","sha256":"ee3512f8c59eaa415d996f68ce467b98f6a0cfe42631bb0196df90dccb04f855","sha512":"c97d51f2e5a2d75c4f7d8ec70e0eeb90b2fff45d63abc1f28b3f2a1780d5da779d5f821597baee476fa1dd315c78721c4f93aaee8a0a8b4f5465b237f41ef297","ssdeep":"192:CBh5Cif2Ib/m3ozgBVdX+LZDcFPAtmFHiJw3epAd/34JpG:CB72IrjgIFAFPAtmQa3Mu/ofG","tlshash":"43b2f9a1aa88e017f67a862f59c0f60875d9e50bfdf3085ef414d1008fd7e5f2a792a4","first_seen":"2023-07-01T11:25:55Z","last_seen":"2026-09-03T18:45:06.445382Z","times_seen":1972,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/e1c98a7a1e1a7d4b504922bb5d6d9288b2aac2fb.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.715Z","timestamp":1788461062715,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/e1c98a7a1e1a7d4b504922bb5d6d9288b2aac2fb.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\netag: \"696ab50d-1f48\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8ANMZi3BwQBfTB2gkHRCyR7byd16p21j9bO%2B0XbD4%2Fh%2F9w0S9l7F4Hls9R1dHpMKYUag4wCkgj%2FOsn6H2MS%2F%2Fo1TAs536PZjgfie2ur%2BtghjWwW8B0ZixrBi0mKs%2FRazJ3c%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9fc9d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8008,"size_decoded":8757,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a234a9a7cbcf4c55f3529b1da5bf685d","sha1":"4be8ca1f7c4800e4820bdf90683249ebf01a98cf","sha256":"386facbde5e56c71e9471ea9497e0d84fc08e674aba9a13b089fedbb6b8c9c4e","sha512":"57abd9c2e9f8077a125ad43bd9d1a9bce442949a4a8a4f1f3b5922f61c2adea3d53a83f4f2fb3ff28df1b19256790b9dbfb69b4b184023d4203e5f8164ff74c0","ssdeep":"192:vEGCpUxmEjdiRhDuUHppVIl3EgALhrz+GgESOOtvKs3V:SAmamp/JMgxz+b9KS","tlshash":"faf1b01b140f54513905c39565a36724e9753b1c383ae881d871985d4fc6ebdb71c8f6","first_seen":"2026-01-19T18:34:16.003613Z","last_seen":"2026-09-03T18:45:06.445918Z","times_seen":42,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.219Z","timestamp":1788461064219,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:32:05 GMT\r\nexpires: Thu, 02 Sep 2027 10:32:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115939\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":19533,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-09-03T20:12:18.58108Z","times_seen":11929,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.220Z","timestamp":1788461064220,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115977\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-03T23:38:13.46471Z","times_seen":276328,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.227Z","timestamp":1788461064227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:32:05 GMT\r\nexpires: Thu, 02 Sep 2027 10:32:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115939\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":19533,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-09-03T20:12:18.58108Z","times_seen":11929,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/_nuxt/assets/index.js?r8g2d74","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.449Z","timestamp":1788461062449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /_nuxt/assets/index.js?r8g2d74 HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\nlast-modified: Thu, 27 Aug 2026 19:51:53 GMT\r\netag: W/\"6a909559-f731a\"\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache\r\ncontent-encoding: gzip\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iZ%2B2ODQPYL4%2FRqtObv9EBNOf5ewPxJWmEaGe31FfGiMsJx5EFO4HgZ7ktB7PgWkDMxAZX0ThmewIanPHNt%2FPHku98HXmorX4uuZU2cSssl7k9tste91ZkH0T6Z99cbWUsYc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c84c41120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1012506,"size_decoded":238064,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (63196), with no line terminators","md5":"f6efcea826a3af135ea7e51e1f53277c","sha1":"0a7b271fc0ebc72df06134b4b358404302c7675f","sha256":"a9b0092ae6ba206c2d9881e7545dc6494eae6b2ab0c4c65e57e10b67cf65ea4b","sha512":"6bc0cb338744400063d8f63d79af7f319235c54251c0178d99215a74844ddbc03cfb13fd6ca9c6339098ff389d20c2fad1d18215e5a99483df6174b140e32905","ssdeep":"24576:YNCSe8fooelbwz3RuAuV6scbaD8nA55q0k:YY98fooelMz3RuAuV6scbaD8nA55qv","tlshash":"ea25d6d7e2b28c066eddb9953ef35cf708da40d29d8d0760a3d3a80299e07b19761973","first_seen":"2026-08-28T13:03:16.800553Z","last_seen":"2026-09-03T18:45:06.446516Z","times_seen":161,"resource_available":true,"data":null}},"time_used":927,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":458,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/fb4b89f0bfb71662c3833f8578a6c68d2e8bbcd8.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.722Z","timestamp":1788461062722,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/fb4b89f0bfb71662c3833f8578a6c68d2e8bbcd8.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:47 GMT\r\netag: \"696ab50f-20cc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BIjj2C%2Fq2aR68jUVZfyQCuZWrN7G97zA9ML4ewHgTJqFkgy%2FSu0ajKjZ3Xyy7rnfe7LlpY5RypiB4%2FXzVujMQVXnZHqDctTbqFiMFGziZ%2B5VC3uYSZ94Zsbott1LjnQZnB0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7ca0ca4120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8396,"size_decoded":9139,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1fbdc887d3a515a4648a7246d185cd93","sha1":"a550bb10287680e9e920036d3c02dbf91483c6e1","sha256":"a6c46f0af3a7996769cf9dfad2c9cd2bd28568a14bb5ccdb2660c001615f82fd","sha512":"645c47250e5385e9cf170418cf9b558cddaa9b45bcf43ce8ea55b35dbaa89a3821fc5d2d183ef17eccdb0826ff0ec72bd5c61eb969e369dd009bedc1c29b5ac9","ssdeep":"192:91CJ9ZyECJpFYJq/wtkiYnugksG0s+wNPMhB50Qy:9kJ9ZyEIFYw/ckiYnumTSM/CD","tlshash":"b202b1f2da72de22d7d8be2483d1c912819a021eb7c3b07340bcb5dc74ad55263d1ba6","first_seen":"2026-01-19T18:34:16.017909Z","last_seen":"2026-09-03T18:45:06.446977Z","times_seen":42,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/11-CEJH9EXk.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.725Z","timestamp":1788461062725,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/11-CEJH9EXk.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:48 GMT\r\netag: \"696ab510-97a0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4LBi%2BIgaHtcOcKFe%2BkyeddiNNZoWmK%2BCrlIsao2XL8kjzVB6Mhv56ceumRTub1Cz%2BhWc6SkL6ll%2B%2B2WThMkT7USb6C50ZCuRKawyH8d0ETerH7%2BjNDPMSPJjJV94mUrUZiw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7ca0ca5120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38816\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38816,"size_decoded":39564,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2177e4f251cec8964a2095ae5580c102","sha1":"1b299f16903cac3ffd7243865628678175f3b769","sha256":"1da228ad0147fed249b59a16053f231bdd5521616ff40a820ae0ca3c08e1aa12","sha512":"a3200f3b124fcde79ced9fa47247fa2a8deb13ab36d71e8d19598485ec8efcd13c9a04a490bd1a60af84523aa2c886b54e4dd9a05e39a66cf171e63892790444","ssdeep":"768:Ot9rqQHoPLFKpPFG3/ZjN+R8pkh/Crv5Xsy3nddXyPN2IDEQzv:2iL0pP8RjO8SE13+I6v","tlshash":"f503f1003b5a80587109ca9d50837eec32667cf43f0a158f8ed9b27662f599572b98ff","first_seen":"2026-01-19T18:34:15.97684Z","last_seen":"2026-09-03T18:45:06.447546Z","times_seen":42,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/44-DcUgPKtf.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.729Z","timestamp":1788461062729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/44-DcUgPKtf.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:46 GMT\r\netag: \"696ab50e-ade2\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DNEdzrooE3GQkBzhqqZTJPJ10C0x90sI1Brs0MtdCOjO%2F0fxL5mnR8kxTr%2FAz0np4YCqIXpFiHvMZuYbRwdo8RbdeYolwwHZMeEMLLN0F2ohKAjigWP8oi%2Bvj6y8rV0izmM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7ca1cab120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 44514\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44514,"size_decoded":45254,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a7bdc93665a5e2cc5bb3b70a82183d55","sha1":"249a14f474327e0c2d095edc53751c6369c6a796","sha256":"4ab1e848b10767a4d783e165ed361d1e7cd674741e177c964788045048b705fa","sha512":"cbb7c6ee8a6feee53336ff67203e293453ed347e4fe15b818847192766a98dbe95521f746c9d213a867b674b7eadebfe34f33d54a65bb80b751f50325b78319c","ssdeep":"768:kOwU2kTWNk2oc/tdVzpjg0nmXa8xN5pKxA4D673OkmoripP/c17DDKi:kOV2kKKBc/P1p00Ya8xN5Eq4eykmoriS","tlshash":"fe13f2955deccf3c5fe6306c1280fb1d4770e35a421adb3d849a99b6accd38d4ab84a0","first_seen":"2026-01-19T18:34:16.019273Z","last_seen":"2026-09-03T18:45:06.448894Z","times_seen":42,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/faq.png","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.731Z","timestamp":1788461062731,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/faq.png HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:47 GMT\r\netag: \"696ab50f-410\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MxoK6rp9afzQbG77m10ukEc5t7GXtgZ5edAZkBoKioHI7K3VL6mkshQAPxA%2Fgu%2BEpNoVtmflC3x8gc3Uzo9WwyWCw4%2BlNI%2BJSILvtdH8LYKaqIAip%2FT%2FoWI49NDf0gxERec%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7ca1cac120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1040\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1040,"size_decoded":1783,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"c21b8362d305982af91344c8e1bcf20d","sha1":"824376c3051794b7cc6b3db0aaa42b3195a8e3b9","sha256":"3f8d874e45fecc5e008232dd0b2c495e6f9575b31e7c8f25b47e4fd4933f4cdf","sha512":"9ebe701df8b409649649be24c5c2fcbdc354bab5d15c0dacebfd5d235f81a6da92817b5b9d051ed143b2d5ca43d779c82940a628a0e8a1966ce2944a73f819c9","ssdeep":"","tlshash":"a411b57dcf6940b0f89dec991e3a82eef00f990eaa395da821510120bb4562ced1b508","first_seen":"2026-01-19T18:34:15.99651Z","last_seen":"2026-09-03T18:45:06.449607Z","times_seen":42,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/bnszq.css?7x7x5yk","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.656Z","timestamp":1788461062656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/bnszq.css?7x7x5yk HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\netag: W/\"696ab50d-64a0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DsnrbgrMFvn88WZOfgcr0aSx7%2BgkVeHRpksGDfmL71XWiM7lj5gVXHviyyusG4WMeU0lCCa8SCAfweJ4bZYq8YZ3PcKm5QsfMIkjnAWq5nnw8GSaTvBW%2F5yLmxbTjo7ehqU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c99c73120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25760,"size_decoded":1945,"mime_type":"text/css","magic":"ASCII text","md5":"48a22b11b227aa645b63c6a9a01e881f","sha1":"b9d4a98f63f36876ff9f10a8f9345796030536dc","sha256":"002db250b233a261e69843d1dd51658831e61a00f1a28d3d228f4fa23a4b4360","sha512":"cde99297eca43765c9b9e4f1841c93ab27ba031edeefd36a3eaa4d0598e8e774251fa96ea1f2901e956b1fad270797d4733f26eb0358686ba8aedd8dacc02d72","ssdeep":"384:yERPGRjsUrZ5gZ29AvbCdeOA1uCrDfxXvOZAMkwuUdb0Fqzzl:x31uaDfxfOZvkwuwb0Ezzl","tlshash":"53c2db91042b9500eb471cc623cf7f36ae8e21557486c57aaffd1ce8acead225364b1d","first_seen":"2024-12-26T13:31:28.691209Z","last_seen":"2026-09-03T18:45:06.450451Z","times_seen":76,"resource_available":false,"data":null}},"time_used":75,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":75,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/sweetalert2@11.7.16/dist/sweetalert2.all.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.129.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.662Z","timestamp":1788461062662,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2026 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 20 May 2026 15:48:47 GMT","end":"Sat, 05 Dec 2026 14:48:47 GMT"},"fingerprint":{"sha1":"D4:05:C2:EC:C7:EE:2B:D0:08:68:0D:3D:33:77:48:78:43:E7:D1:E1","sha256":"ED:84:90:EE:71:BC:6B:5E:B3:D2:50:B0:23:3A:06:0D:E0:50:C6:B6:A9:09:36:E6:CE:FE:E8:66:89:EB:4E:C5"}}},"request":{"raw":"GET /npm/sweetalert2@11.7.16/dist/sweetalert2.all.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 11.7.16\r\nx-jsd-version-type: version\r\netag: W/\"10917-UZ72hgnB9ZXuapy7dmDkyFhaDUE\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nage: 1480026\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\nx-served-by: cache-fra-eddf8230204-FRA, cache-bma-essb1270069-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 18792\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":67863,"size_decoded":19589,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (43691)","md5":"0aaaa3278d29d8b8d9b3795f60d3b836","sha1":"519ef68609c1f595ee6a9cbb7660e4c8585a0d41","sha256":"b030031299100b9d6c6b413bf9e9d712f59695f1384ef548c3f43b0a0faecbfa","sha512":"cbd33a9e99d528a9c653168484a2243ae90ca8b99190c6422f887ec632982ca07177aa7b7f8b0bb9fba889062d0f5ea5cff9822605e0de2190850c3976341dcf","ssdeep":"768:kUgzbI5DOSZLI59BuNFoa8JQYpKb+uQcC3aqxUhPGLMcLDvoXJhIVEqzeeMRodgT:4po84n66IwRrAqgnByzfe+GcYAuq","tlshash":"a863fa625a04f033b6bb05ae64d0e104b9999419fcb74c54f42cc9904febd4f26b7bba","first_seen":"2023-07-11T17:54:11Z","last_seen":"2026-09-03T18:45:06.451059Z","times_seen":1727,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":11,"receive":1,"ssl":18},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/85fbbbed31ccf33309e03046b9d7f8718c223a18.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.692Z","timestamp":1788461062692,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/85fbbbed31ccf33309e03046b9d7f8718c223a18.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:49 GMT\r\netag: \"696ab511-e00\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrEfesOQlN0C5%2FFp%2BCKe4GnRxCnhp4E1kTIKgjuO%2FEekUQOk9ze65wM7MS1Sgtg2cukbjUyLqMQOmpsGvttMpbOpmLgogTy1dnfau8EruchMeAYUjtoXmpSOASiCvjqAAVM%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9dc84120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3584\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3584,"size_decoded":4322,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 466x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4844591e7c1b32b009fc3e5cd85d6104","sha1":"a523a0e5978f940099fb5b07e08db95bfee3758d","sha256":"3515aabb1494a34720f3400cc4e5a0b008d8d1854fd8257e81039cab7845db7d","sha512":"77f35aa4df0bf7d2df3aaced9f29ea5e8785ddccd99f1d3b2154fbb4ab71842299433fd69c3a5e846a4f2fe285d86d4b4b8015edbe0a9f3047dc85b61db8f373","ssdeep":"","tlshash":"a8716e33e156dbdec720fb970af57f296e747917c422f21095bf7842292450696f1708","first_seen":"2026-01-19T18:34:15.993351Z","last_seen":"2026-09-03T18:45:06.451596Z","times_seen":42,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/team9-sIMRwxbc.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.702Z","timestamp":1788461062702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/team9-sIMRwxbc.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:46 GMT\r\netag: \"696ab50e-2f9a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=M3dhA2%2Fu1hmqUu0V5GSCNTjt6z88IiqInzGMejOfMmoqn59pwTdinY2j6Mg8liYg5tBNxMhhT5Atq7KOUEPiVZJwpU035HGfPa4fHzWh3CksdRlH34%2BMP6GVoVaOPb9TQQk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9ec8e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12186\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12186,"size_decoded":12924,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 470x368, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"69c8f5a5f7402337f798b13b27814a3e","sha1":"5b45499c6f44cd5315b832ccc9e43f17819051b0","sha256":"588ecbe4127bdc2a83ac54b4c0f6acd9445b1d46c3bdf863113c568abe0c276c","sha512":"c35540d4b700720e7d67b9ee7327e5c45dc7e7339c1b8613b71827fae80f88ccdbb3752f2f6c3ffd748d059010acf14e33559bd81a19ca0a21c3afd77050d482","ssdeep":"192:vp/ligsEYYwByETp/kOG2WkfG7KvyumuwflUuY2U7o9Xnsm8uYX9ryoiB:vp/lBbwb/xG2BOUytOuY2WknsmSryoiB","tlshash":"d242bf22b34c619de792c0e967bbcc83061819f78648bfdd23615cfbcaab79154e1852","first_seen":"2026-01-19T18:34:15.98218Z","last_seen":"2026-09-03T18:45:06.452258Z","times_seen":42,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/3066aabd21889aa6b62d3c86837c6fcac484b39d.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.710Z","timestamp":1788461062710,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/3066aabd21889aa6b62d3c86837c6fcac484b39d.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:48 GMT\r\netag: \"696ab510-19bc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V3xIAdSJYT2ajtxouhyrx%2BL62Zp%2FZG24f40KMbOXg2xFGchkTA5IYtnhIKeL14DF%2BkNtKBNphGKInsAu428gZLlmIg%2BTIF4w012%2BMoYt5YqprHa6VldIPSF0upuHMtItWAo%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9fc97120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6588\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6588,"size_decoded":7331,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d3612e0ead94557e8f539e6618b1c9c2","sha1":"4ebb8ce08344ea97af4ec18277290ac65cbd0710","sha256":"e7fa0e4c0975f1db40455556eb4c2c2fef211587a9203d539f0b2323c5383569","sha512":"7b1728e1b890375c2028ead3e885d077f321da606f7ab4f2fc05cb551d04ffb54a05e49c4fc56a9706b7406afa9a36d3580bf19ec00114cd66c3cebc5d38a6dd","ssdeep":"192:IhbHzInGAI1LjCsuu4GHIZdrtPlTbshq8hOxbL:IhzAi+hdrtPl4q8kxbL","tlshash":"cfd1af421d5a4b1035ff0ce8229c86e775532a7502cad0f82ea326da4793d22eb1c3d9","first_seen":"2026-01-19T18:34:16.022796Z","last_seen":"2026-09-03T18:45:06.45285Z","times_seen":42,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/668f0d3d472d295c224c9dba35f5e77a9926d1fb.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.718Z","timestamp":1788461062718,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/668f0d3d472d295c224c9dba35f5e77a9926d1fb.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:49 GMT\r\netag: \"696ab511-1c94\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZGD%2B%2FUNU5RQ16Z1sHnxBamRm0lp80xeeCX%2F92Vz1pEzeXKFOZ4fn%2BbYJhS%2Fr687NaEMpSU%2BDGsfM1%2F4fb3VtHlVQy9ja8v58230lNMqNM%2FZOSjQ2KK2Dgsy7yRVTAflWgLw%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9fc9f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7316\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7316,"size_decoded":8065,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"12de453d0c5fc89ee18e14e8936e014c","sha1":"21c5f129f2db84e24ca29bd018430ed98a484645","sha256":"414bc3383250bc5ce7cf5d3631d601df81b51c2b30b136924833d50b5214a02d","sha512":"dfe4b7d18875f40051c3d7a283a29726bb529cb0471b881c4e2ab08052c71836917287bbe49dc878b521535caa41bc667946ff2bb6185e169f9b150159ff8032","ssdeep":"192:Hai6Y/O1m3qzwP2IrurAer7hUgJdSDi7AyK/Z28oJ4mqN8Eny:HaiL3DP2IruznhUgPS2E/ZNoJx2y","tlshash":"39e19f4a50497c21cd211bd66caa2e0123e390b46d3187599f914ce4e0f1ea5fb3b292","first_seen":"2026-01-19T18:34:16.004908Z","last_seen":"2026-09-03T18:45:06.453466Z","times_seen":42,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/22-CzpWkn_R.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.726Z","timestamp":1788461062726,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/22-CzpWkn_R.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:47 GMT\r\netag: \"696ab50f-16346\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ZZdqbZgUe0tILttqqcpUsdk%2FulPMkxqK4cdxHYkgRf3fbWNmYbD5dNSYZuufT%2F4ss3zMUr5RkEwI4LTcGoTHnDFsByaKcVEBTLstUyOG9nTiwvOkG9Ms%2FtQs7cSIuNyME8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7ca0ca9120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 90950\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90950,"size_decoded":91691,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"a99b5c198c361be33321ee03b02df661","sha1":"4f3e5ad4d3eb10f507de9361c79d3923a99dcbdf","sha256":"e25b0cca2aa5b61adc4677f8e776e897baab9caa3d20aa35da77bee12fda01e6","sha512":"c7263c09121bdfaa4156f6cb36460fcb5a0f540941f8b07bd2e3fddbfdcd2c30b5217bffb969d8d6ac27e2ad55d4dfa1b752355b1b7f9977843f8daf0391a487","ssdeep":"1536:pcMgRzWKPKgmuDe47MEN7FdlmxRE5fqr27ZFRPx5FZjxdPU8BloZwZSwyWhowLJh:G1lmuflm4lWMvPx5FVnB6w0wyWhFtzoI","tlshash":"39931228ab8685623f2c192d5079cecd23bb847291587e784831f2de95d552dff0f60e","first_seen":"2026-01-19T18:34:16.011964Z","last_seen":"2026-09-03T18:45:06.454582Z","times_seen":42,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/hxrwj.css?r0qrqd0","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.660Z","timestamp":1788461062660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/hxrwj.css?r0qrqd0 HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\netag: W/\"696ab50d-6420\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4EX9zWX%2B8BWDO3NLntND6RfK4drTPXahvsjzpIAwPm3K%2F%2BR90FxMLvCoXmJYlElWFOM5VvJIGhnDQGEXyTaIZMU1cNnG4MIV%2FeVeTjUNxHaXeOEkHo7vfj5TZn6YdrgVYh0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c99c76120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25632,"size_decoded":5404,"mime_type":"text/css","magic":"ASCII text","md5":"4b4598f2717d8e4cea90b6c3df7fb204","sha1":"84a84be46d8eb4a308123efdef947f06a5bb4efc","sha256":"23f23f2386728fe23df93ab65ad0ddf0702fc094e50f5c0739478dac11f96274","sha512":"d39ecc6a30e7166bc432092048980710d4b8e5d3468382fbeb900db418f51382be1bbcfc0d61ef4a9eba1a51fd3a4047bef1e3219d62f6bd669f84acaef71de4","ssdeep":"384:/cGDdlPQs80vYUmEewH6ep1IKX9vbvGtvFCQ:/cGDdlPQL0vYUmEewH5vIK9bvGtvFCQ","tlshash":"1fb234073a292842d60b94543de06f469a1ed053eb0eddf72c62a5acc6cd18d1db3bde","first_seen":"2026-01-19T18:34:15.971427Z","last_seen":"2026-09-03T18:45:06.45522Z","times_seen":43,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/gerx6.css?xfbakdg","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.439Z","timestamp":1788461062439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/gerx6.css?xfbakdg HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: text/css\r\netag: W/\"696ab50d-8cd\"\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=In0cBxaula28OnKFk8TMBxumKoPtudg0gjEZnmaMZzdAgMZsdih8v1%2FwmGUfHU0wIfM8ZDv59Kf4fPJP80gjgFzHKUueiXY7sRd0deDard7pHRowOdhtSThtqWM4pMZyZ5k%3D\"}]}\r\nage: 505\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a356e7c83c3b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2253,"size_decoded":1323,"mime_type":"text/css","magic":"ASCII text","md5":"625ca91498dc236809aebfb8066200ad","sha1":"c5824b34210dbce332418e5677c7201576536b22","sha256":"5dafd6ab6b98936cebe34f359ca807f7ce6787ab9bc1ffa7883947fd3039c971","sha512":"0d7c5ba243d2b05d9da18111d86d208ba8aca376f58aa76ed64d63b4d1a1e29495aa43905af7dc6c45c1498bdfdb64a7d845806d0751784da065d73194ec2ed0","ssdeep":"","tlshash":"4d417881482b5204e6975cd327cf3f266e8c61487045d7b93ffe189b9cead6513a074e","first_seen":"2025-06-28T19:47:13.761885Z","last_seen":"2026-09-03T18:45:06.455827Z","times_seen":85,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/team2-CTL725D4.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.693Z","timestamp":1788461062693,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/team2-CTL725D4.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:51 GMT\r\netag: \"696ab513-18f6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bozg%2BOjRYcYPPtx86ocwin7W3Aj5bxAp87X0KphKB5TStHWRG39MSyLVL5AUMHPui4NdLmqlgXvwtWRmNT7Y0Nbm3QFLuPK7cpgQbjxvTgypERRuyvH2jpFoIPUSsniG5ro%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9dc86120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 6390\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6390,"size_decoded":7125,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 470x363, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c3fa2c726f4c6284401447830e2b34d4","sha1":"0a56554c1b0cd3b5c4fdba539a63e907326a186c","sha256":"e53beaa66b7cd87fb98cc7c389d2c28f45fea060adeea90588dba77c0c2e69c9","sha512":"d919c16afa8587bb2aada781ff0b1ef97dccbf395f21e879ca4e284453e58c997815985b0dd824f718b9d070b5d2b03171f2460b644b01831ff122f3f0dbfed1","ssdeep":"192:mweXRzbbVUA8cCnUZqk2xINFgoz1pNAeSp/w:4R3bDXqk2ugo7Ceyw","tlshash":"c3d19e9ce86f2f7efc2ba17e9d8c1004c4831b6c20a465a6f0b1bca9490b5b5cf14998","first_seen":"2026-01-19T18:34:15.99428Z","last_seen":"2026-09-03T18:45:06.456373Z","times_seen":42,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/b1374a7d228afed6bd69ae74d8d3ad49c56643c5.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.707Z","timestamp":1788461062707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/b1374a7d228afed6bd69ae74d8d3ad49c56643c5.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:48 GMT\r\netag: \"696ab510-1b5e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uPncCrA%2BiTgjWNBkJWHRoOT9Z2zAYXba58x5n2RsgH18Iv8dz%2B2nmgZDnkhZKIdNJ9V0SfGSnON%2BtqnuMksnztfyx%2FRYlG6YJmCT6oYs5vWX%2Ft7%2B6xfMpFodmOcjesxorGg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9ec95120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7006,"size_decoded":7751,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bc18103d634eea073f3b6a883f19c703","sha1":"19ed60f86aa95a5cd32d813ffb9fb32e2557b793","sha256":"0f9058200eed850e782794beae00473c990b14304c9fd13abda1a2ea20009da2","sha512":"b3040507dbad6dd87a38e430d73219a6bb7b1da302432a8777b966ed97e08fdd11bda4d7da3883cdb5c11236ac980eb18f33d0d99d14fd0fcffa866fcb15b281","ssdeep":"192:4zpP3LnRVhpmLTlnRMkg4FUm40o6wN2vs7ehYaetMu33:4zV3LnnATlnqkg4FUDvEU7eetMu33","tlshash":"49e1af2439283183e472fd38315b9b66fd03808c455ca4c86ad67e535bfa1a9bfa25cc","first_seen":"2026-01-19T18:34:15.986023Z","last_seen":"2026-09-03T18:45:06.456953Z","times_seen":42,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/2d6a5d77ce9d27f3e017dab40b83d776cea1fd61.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.708Z","timestamp":1788461062708,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/2d6a5d77ce9d27f3e017dab40b83d776cea1fd61.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:49 GMT\r\netag: \"696ab511-1e74\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=v6TSdq7puFumRkWdnzrm%2BrJsKKpQk4D4jigWYa%2F0XbPBihefkaWsxUYQjU1I6DTaPHMWTXV3bqe33v3YkyE95qfnNR2KP0Xd2TXy4OJtMIEdgwyl5dU0M%2FBLoUT689iU4RE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9ec96120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7796\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7796,"size_decoded":8535,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"413e50b3e83823aa4c3a93a4dbcd7e90","sha1":"e637d2fffcb6cfdca36dd677fdebc1358aca355c","sha256":"ca04d5c306a9844fe74302f49fed460d072447d30a8a21279a319dd01623008e","sha512":"9ea3ba5cc61230423ff5a42ecfa0c93be0b1fadca8cec95cb466b2c84f896c0ff0602fc98b7b475e3a5c71a2ecea6f98c1638332e66912a78aa00c10f8817fb5","ssdeep":"192:O8iy3Vhz+vc7xECzI5Q7lJUbK+f06qHdwOSVILGo:Ow3zz+0EPi7lJF+8d9GVQd","tlshash":"c6f1bf5ff0d01030d8d6259c8b293b0df3a72e88c4872abbbdc8952080d36c12586e7f","first_seen":"2026-01-19T18:34:15.999575Z","last_seen":"2026-09-03T18:45:06.457517Z","times_seen":42,"resource_available":false,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/6b940a1205537db46cf4299e059085e87d60a7b7.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.714Z","timestamp":1788461062714,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/6b940a1205537db46cf4299e059085e87d60a7b7.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:46 GMT\r\netag: \"696ab50e-24bc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BQYvkkNM8lzBucHi%2B68wBzqL7EnEZ5Lmn5nMjq6TCUWz3p2I4RlGsmAFK%2B3HX8V8Un4J4B4EB%2FsVqSf%2BchUx4%2FtDDK3bg3rtZR9jXqZq6JwH26lefAfYxB3Oyicv0YzqUl0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9fc9a120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9404\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9404,"size_decoded":10147,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"bb9547e0cbb34f2651e9607d9593735d","sha1":"fbed51e06e5bf27c2d1041a7d8267fd350bc7d0a","sha256":"073d53215bed534821494a466a3c3dc122804f2584d28c22eb459fdc4aac960a","sha512":"a414e7402f884f8b0d0dab7b3e4a371db7f2bcda3226943df0efcc2986388ef0ba54088e5fdd3a390c9626e80919a24ebd488a68767419a755acf9e1ac7e01de","ssdeep":"192:Cp2yroSb7xe6pUealgSkqZt4peYnuqlZjB4O8ATmkdu1acOrd2R/mb:jchb8oUeaFk8tuJ/r/FxQEcOpK/0","tlshash":"bc12cfa5c022c46e8f64382ff48ae644ad7998a310728cc400b6f03ead33b5191276f8","first_seen":"2026-01-19T18:34:15.984902Z","last_seen":"2026-09-03T18:45:06.458133Z","times_seen":42,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.853Z","timestamp":1788461062853,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 18:44:22 GMT\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22743,"size_decoded":1639,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"03d386d3d51356518f1c932bd7d1f021","sha1":"f20bdaa14bb1dba0ae6b28e1c455976bcc6e0081","sha256":"e833d17f31411e640714d4c41bd3d264b7c2b48b4740ce7ea6d7988f50e58d69","sha512":"dcbd99af933cbe40c84ba846643ac9e9e5b070e391a04d2d608a0f89f470b31aea8bee06ba7048fb2e7140eaeb75ce1c990d32444736469826bee4c96ffb2dc5","ssdeep":"192:WpNmp9pKpO3tp3pxYp5NnWjO3GAxRKNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NP:WLmXoKtZIB1OKYXuM0p2+g7GQK","tlshash":"d5a28992002ba400ab971dc233cf7f3aaece10856085d1b96ffd0dc59cead66436876d","first_seen":"2025-09-10T18:54:49.359958Z","last_seen":"2026-09-03T18:45:06.458798Z","times_seen":9831,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/amlsafe-Dapxivrv.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.717Z","timestamp":1788461062717,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/amlsafe-Dapxivrv.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:48 GMT\r\netag: \"696ab510-268f4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4xancAq%2FkMgYF27Gi1AQUY6Y%2Fbb253Kn5d8VLHHItMFOm9NklThUgyVaUl9k9KPMi1ghYi9o7H1O7BwpKFA%2BZymxtshp3qy2VG9uHU%2FbiQm9oBWQIkZ5dNYG4EoM%2B5ZH9E0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9fc9e120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 157940\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":157940,"size_decoded":158686,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"057facc4918748d63b7254832670ab4f","sha1":"b36577e415519988474fde41aa610e9d34fe9482","sha256":"5e5e05f24460904bec2c522acb9fb5d743f66374e559923e78588f51c58dcedf","sha512":"55d1b0f80b74488a126d218fab941fbfe6c2f7d0d5de561098733cda3f6ba1083032d87aeea68cc203c77af6cc24d0ef8ff14824fedec10f400c0c6aa2001973","ssdeep":"3072:QBvusmW9C7Yj7oUrSk+x5hBq+I00LGLd9+r6YesmH1csf:Qc5G/gk057vI00LG5jG","tlshash":"08f312c2c132c489e5dbd8f3be8721d5d0eb95a86a91eb2e045ed57271f92ac0f75c20","first_seen":"2026-01-19T18:34:15.995431Z","last_seen":"2026-09-03T18:45:06.459396Z","times_seen":42,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/uniochange-B8zbqJSY.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.720Z","timestamp":1788461062720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/uniochange-B8zbqJSY.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:48 GMT\r\netag: \"696ab510-268a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W24X8l7T7fxo8Ah0vAX%2Fzpfks4YA%2FWA0th%2FRNG%2FzT%2FEHb0m9aUqq%2BEgA9Qjr71GLVLaCmq0LTufBx8dCO8EWnzmOJE8iIBjPKuZioOtctqhXyahH8qsaROPDLAklgymMDeU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7ca0ca3120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9866\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9866,"size_decoded":10611,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5d6f40caeea62ae44ee20b830ff7eb4f","sha1":"076fb07758814fc41e79e17b0caa5df996130df1","sha256":"ecca746bea8f3baf8c6ea6aa83c1f5c4d6069159b85598f432662a703fb51ed9","sha512":"8ca552e2b9e750a788f3dbab0b5a1ccb4a87cf27a4a4a830bf7e29689b37aff20a0bf41a39cdaff29072bd9bab4931e6bc3e219ae18937917023cc08fa7f2bde","ssdeep":"192:P0aEAeKJ3xG6r81DQnj2C89AhU2YV9YcVHDR94iLVcCs+hsEInZ+qL3XtopVXR:PbP3BG6rYkj2I6PlVHDT4GJIZr7to7R","tlshash":"c812bfe36e91181e37aa3938d639855750d8afdb332ad110f6001d1af34ecc798b18cb","first_seen":"2026-01-19T18:34:16.000562Z","last_seen":"2026-09-03T18:45:06.459965Z","times_seen":42,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.804Z","timestamp":1788461062804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Montserrat:wght@100;200;300;400;500;600;700;800;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 18:44:22 GMT\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17343,"size_decoded":1474,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"8099fd2908b8ff98a6fa32c13b3c27a4","sha1":"46fb2e3603399fb539bb43d472601b2c22644511","sha256":"f6ec0c0b2c87c966c56dd4a1622440388bf0da1ca5574d266d1994010a78ea10","sha512":"5d35d28aeb01a832abcf499a571a4e8e3f4e41ac214eedb2e4631e7a81352148c5a1ee172a933b22df8dacc01b0af6d1343c22a5e90506ce93e21de72671a2c2","ssdeep":"192:NpRdp7opQpOPpu9R27hpOYu+RV7y6OfuXRo7TbOmuwRv7M0OFupRS719Ocu6RB7D:Nnd1oWQIOrRPQPTzajdfMfPE","tlshash":"a872ac91105be500e6472cc923cf7e26dd4e21627494c57a7ffe2ca8adeac225325b3d","first_seen":"2025-09-05T06:25:47.318539Z","last_seen":"2026-09-03T20:23:55.806856Z","times_seen":3989,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":33,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/how-does-DnlstxIX.svg","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.688Z","timestamp":1788461062688,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/how-does-DnlstxIX.svg HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"696ab50d-1270d\"\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GpBAkgtts0Oz1c%2FCk7AC1EaLE2LsH9l7GHRA30lFDANzmnp9fZ017LXempbnni%2FHKuvAJTjTBYZnLDs0fzMmi%2FY2X3b9wsxQg42pOF3Iw4awDrLU3vQ0414uGDeFdfRY0EQ%3D\"}]}\r\nage: 505\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a356e7c9cc80120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":75533,"size_decoded":29427,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f74cda42deb365718c80d66ae85c229a","sha1":"4239d279133a77b716a777486656143cf4338569","sha256":"f01c6f20d0beb7cb60a8831b8da262f042cd98a11a758be9032a2459550d4c98","sha512":"d6e3819cb59a1f4e9d1f9802d17c8015e978702b3eeaaeaa4fd61d5bf22a47aae20333fde7abcdb2d450383e9d1617f6edbfd3588d5d0b540376e0dd88a5f7e0","ssdeep":"768:oPk3zyS7R4f5w0BpHL9HMayHkEBGhFUfSmAVg3wTcECVSW7pfxMXuGgNQrdpW4gG:O04o7kF3DTcD7pZy/JkBZga4V","tlshash":"757383dc3f708cc55ec48bdb7f1150ec6a57d5b3aa898e08d15c8f6d088682c9dea983","first_seen":"2025-04-08T20:33:55.218198Z","last_seen":"2026-09-03T18:45:06.462185Z","times_seen":522,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/ohsnap.css?ym0qiqn","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.658Z","timestamp":1788461062658,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/ohsnap.css?ym0qiqn HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:23 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kpdLqa6%2BFtzeLgVU857Okr1gw%2F1hCp%2BFlayaVXqXsPhCVFfpC1Wweqam53wkxV%2BBPAAHOuTCavgayEh5EFYCiwV0xa3DQbTOFkSdF6LT5cTsjfII2n7ElzNLyrWVKzQ4C3s%3D\"}]}\r\npriority: u=2,i=?0\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a356e7c99c74120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146,"size_decoded":696,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"8eec510e57f5f732fd2cce73df7b73ef","sha1":"3c0af39ecb3753c5fee3b53d063c7286019eac3b","sha256":"55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0","sha512":"73bbf698482132b5fd60a0b58926fddec9055f8095a53bc52714e211e9340c3419736ceafd6b279667810114d306bfccdcfcddf51c0b67fe9e3c73c54583e574","ssdeep":"","tlshash":"b7c02b2d35133c4cc563313423c37140c0d6833b687a41110400c00371cf2998ec3397","first_seen":"2023-03-07T12:05:15Z","last_seen":"2026-09-03T23:48:22.721285Z","times_seen":556426,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/team3-DH9H-rCm.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.694Z","timestamp":1788461062694,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/team3-DH9H-rCm.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:48 GMT\r\netag: \"696ab510-1768\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SdT89uS8vz%2Fip11OhLZIQ%2B40vjuK3jv3EKJEBG%2FFHzAGWEIdezQn6GXZymUDLTYE2F0QJDMd%2FnwVrkVLcYGaUDm69P%2BSC9z2VWZgNpSFYOa5QM5Gx87rWjP0U7x%2F5wBpsQE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9dc87120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5992\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5992,"size_decoded":6737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 468x364, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3baaeac48c0807c118171bfc0170e405","sha1":"3790b19ff260c4e7685b12000a60ed7958205f31","sha256":"e9a8aa833810a3f152cdbbec53c14f42a438e639228a2d3d80eda02fe6bbc0dd","sha512":"63091e867bac774f5797c31f1342c7cdd1bfcb127ff15b494374957de842e66611911a8a855c51de15179a859107744ce02d5efaef3d5f06fa80ce6f28ac7e77","ssdeep":"96:sApAfGDyNF0iFDfQ387xO+YRz2pyxo2mIR9BmoEJETU/n8R6GDI7IncyLsJkX6N:sAp8GuAQQ4x/YRCGo2VdUERp4fyLsQ6N","tlshash":"b1c19f299fd7ed40cba642d37ab0ba0f3895185842c5f9fa785cac4398c7a6b21c1349","first_seen":"2026-01-19T18:34:16.007052Z","last_seen":"2026-09-03T18:45:06.462743Z","times_seen":42,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/api/visit","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.899Z","timestamp":1788461064899,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"POST /api/visit HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://invoicebase.pro/\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:25 GMT\r\ncontent-type: text/plain;charset=utf-8\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SwuxqXGLrAAUg%2BeDU1u7hlyXE2EkuiYG5S%2Ficfx%2FQFn5Pgr4I8nF%2FOfQpLpHYYt6H0rETs8tPGkdn1kv7b9LuUp%2Boa0EbRQGPiIqjrfuKRBbqmbFarX7YvOmuDbemZctOig%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7d7af5b120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":728,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-03T23:34:07.547119Z","times_seen":455792,"resource_available":true,"data":null}},"time_used":385,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":385,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/team8-Ba7qheCQ.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.701Z","timestamp":1788461062701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/team8-Ba7qheCQ.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\netag: \"696ab50d-54dc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Axbb7GAdq9em5OQMNjVtQC39q6NVeGXsoOkd%2Bsv7NaSYQqBk3MUK5FZ3xn%2F2L8iL9Ju88IU5q53HwyURCaVxinlzP%2BunVo01Cp6piHq3y6%2BJfKtXRgOOni4GH3RKoG1m2Go%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9ec8d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21724\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21724,"size_decoded":22466,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 467x364, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"fd69262c1f2af11dcd4c56a55ca858b4","sha1":"f2cf5a71c86789722dc0f727204ba8c786265b49","sha256":"a855336d1be30f96949521e06a2a93e98d08a0a4943eb095cc6c5f60ff39c8a7","sha512":"4200f26a3009760009b8dd1af2bf563b38441e852369c20be55af38e63d653966482d187f468f57e65a9e1802d80e7de517c4f8f3c3c917c4829261958a0bb7c","ssdeep":"384:UxcoaRsbTbMxwdyCDp1TmPlX19hhuL1kPLjBYoi5Cnyv6uGzy1z9zlOTD:UxvnW/Y12vnuLcLjBY5J6hS8","tlshash":"4ea2d017e7a9672f50407c12ea590966bcc5c54f34c8024edaa68dfee1a832f68935c3","first_seen":"2026-01-19T18:34:16.013064Z","last_seen":"2026-09-03T18:45:06.463866Z","times_seen":42,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/33-1yWRRjf1.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.728Z","timestamp":1788461062728,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/33-1yWRRjf1.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:47 GMT\r\netag: \"696ab50f-2fab8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q9b4QYw%2BwdJun7QZN%2BQ9u%2F1%2Fq8XrKmYsOW7DobBjyf3LRhaH4ItWVTMmD1enET7GOKRMrNPHqmQl06cV9FfvUPlqJLUrQCKK0I1cgtvB6kn%2B7igmowZc0Qg80ExFGoTn5Ng%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7ca0ca8120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 195256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195256,"size_decoded":196002,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"e14c95095ceb7745f9137ddfd0bf6d86","sha1":"62fdc318c74285b6aa5ea9b5aac4773a7eed879a","sha256":"11dc62844c2e26e17da394e27c511c505c6b3fe6da4cb5cd14e8ee19e6ff7069","sha512":"1f7e7db9a1a8cbf38160413d953deb95a5a4b23c3fdd2e41cab16cd74ef1061607293bebbe2e5f66ee3b705c23aca34f6315261a24539268281399b22f8c3025","ssdeep":"3072:mmDwVkffbM6UYPoKmbC4x6Jqd5Svyr53RxLLt9OLoPXBR9tEKaPpbulNIEInn:N0/65Pvmtx6EvSvyrTZRFP2p6NdC","tlshash":"3814129dcd5e82ecea2f8639400607d6ae7953fc1a68637eadc3cc7529d641ec4b101d","first_seen":"2026-01-19T18:34:16.009784Z","last_seen":"2026-09-03T18:45:06.464455Z","times_seen":42,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/k4h9b.css?1umuqne","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.441Z","timestamp":1788461062441,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/k4h9b.css?1umuqne HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: text/css\r\nvary: accept-encoding\r\npriority: u=2,i=?0\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\netag: W/\"696ab50d-680c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\ncontent-encoding: gzip\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ly%2B%2FwJYoPqyMqT7RAlgQ4NQIg9uh0ZT9omsBnEuHqaG1SpXc7acCeGrPViArSZpNzTbGWC0DT2J%2FgiegzwSqTVGYJuyB%2FES3oqGD2fqdqmEEJBh%2Fxa51immbcizVhkb03w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c84c3d120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26636,"size_decoded":3760,"mime_type":"text/css","magic":"ASCII text, with very long lines (26635)","md5":"d70bf2c979253a1eb74d0d351f28476b","sha1":"5e580b46df14d39c8917393b34c088aa9eb63bf4","sha256":"236e9fe03b44a5dd47a9e4af8e8fba1cbfc4254e942e2d328a1040fb19eb5852","sha512":"d3511ccf21a73572f81eeb159cb43c98e4e8d7437bdd007e64b2596811fd1e67ab4e33f3a7ef0dc9a414efc687c3b1afc85fd85dfafc65f15316a368b23798a0","ssdeep":"768:y5WqJOhWCeZmO6dOG6tuSG52qGZQdGade2KluiORWtCV444x+KGv0gQ1ueKPgQAh:LqJOhWCeZmO6dOG6tuSG52qGZGGade2W","tlshash":"81c2b25a7e4cd104be435b5362df2a0855347588e530198afd2b31c62cd2de7bab3fa8","first_seen":"2026-01-19T18:34:16.021068Z","last_seen":"2026-09-03T18:45:06.465373Z","times_seen":43,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/cost.png.html","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:23.148Z","timestamp":1788461063148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /cost.png.html HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/index_files/a0iyt.css?hcwmgqv\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:24 GMT\r\ncontent-type: text/html; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aW8bJrEE1w0D2Sl57Fn1d0yiHQ5GpRw33rexNsnmQuJjsWalA%2F%2FsRW7ElM%2F6uRibZreSqqaMR2kUxzZwd7buInr99QCsRtPftd1pwAtfUo7e7qfmZbmCT1EXHe2WfDJQNM4%3D\"}]}\r\npriority: u=4,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a356e7ccad1f120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Nuxt.js","description":"Nuxt is a Vue framework for developing modern web applications.","website":"https://nuxt.com","common_platform_enumeration":"","icon":"Nuxt.js.svg","categories":["JavaScript frameworks","Web frameworks","Web servers","Static site generator"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":1828,"size_decoded":1642,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (973)","md5":"7599c8e5205ec8e8273d59ca2077639f","sha1":"f09676b2e2f5d2de7eff6038a6b13b7e606dd089","sha256":"19e3df22cd3e0eae77a5763b24b7a2666349590961c348ebd44bb785fb5080f9","sha512":"927cdafcd045301690ea2dfbbe328436879072373da833edbbc18bf4aa947b02b26358e77869865aecef9380fdfa05968a718baa7b535a0f3cc9afca0e3c9774","ssdeep":"","tlshash":"3031450b0a515cde230373e3f8523409d1db816f63645c50be2d25badbb86a8c1ee866","first_seen":"2026-09-03T18:45:06.465958Z","last_seen":"2026-09-03T18:45:06.465958Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1746,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1744,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:23.184Z","timestamp":1788461063184,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-03T23:38:13.46471Z","times_seen":276328,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":32,"send":0,"wait":18,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:23.186Z","timestamp":1788461063186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-03T23:38:13.46471Z","times_seen":276328,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":22,"receive":43,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:23.187Z","timestamp":1788461063187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-03T23:38:13.46471Z","times_seen":276328,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":28,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.043Z","timestamp":1788461064043,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 18:44:24 GMT\r\ndate: Thu, 03 Sep 2026 18:44:24 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10108,"size_decoded":1427,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e85517dadd43448782d60d7f207fddce","sha1":"6cd31f870727ba8090fac9602b42524b4139a619","sha256":"88fbd0b95222be288587a149c324189ecbd8de0d6f0c94f528ec53857e52b66c","sha512":"5edc78df5bb062a9a2e1ea6724c14dd7eb80d77ea0fa9572de4bb0d52bbd0d163815b08a1ae77084f99fbefbb07715da1c61f0bb36fb498710c91387792955f8","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3RrxGx:vXuM0p2+4","tlshash":"04227792002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-10T18:13:11.065101Z","last_seen":"2026-09-03T23:01:44.397255Z","times_seen":42728,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/1-B8hMQnFc.svg","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.689Z","timestamp":1788461062689,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/1-B8hMQnFc.svg HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/svg+xml\r\netag: W/\"696ab50d-dadf3\"\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8vtXN13lHpTIhZvxI330fScLP9Q%2BkTIn0pN35Xf1I%2BWBXRKRT3KJHLr1D8wxGgK1Lt%2BMW8DUJDO%2BkmqFyhv4i9U73JH0gtJjBNMJcwNFbqxl%2Fg5z5U1cM688T6oLLHlQ3g%3D\"}]}\r\nage: 505\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a356e7c9cc82120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":896499,"size_decoded":651768,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7e54ee403da676c99d77633c01b606c3","sha1":"351c6bb9a4dba01eed5cc86ac6ae0a38f3e472f6","sha256":"59fee31a79439edb17dccae8553674f87012403c8a486c9b098a1e294c119e65","sha512":"7cc6dd0aea72a3f8e9c324dec727ab5133eef87d600768bf29801201118d4025fae2ce28071582dd3699b13a1ded3f3b78c56aa9fb53a67c7e5d1bcb7a099947","ssdeep":"24576:euayhlfPkhRx15QVsLcIuJ2wStoU6ghC5:eaDex6gW","tlshash":"be151214f80ae5b503bd0a251eb7156c6f748f709895ab8e87ac774683983c0f3ede25","first_seen":"2025-04-08T20:33:55.231096Z","last_seen":"2026-09-03T18:45:06.467801Z","times_seen":474,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/team4-B3PbVeRF.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.696Z","timestamp":1788461062696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/team4-B3PbVeRF.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:46 GMT\r\netag: \"696ab50e-1670\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tPkcAcZTo6Mfo%2FHKibi6NsAaxlG1rpXoyWzoI4NpLPyxNsZ8X9uaczZn8l380w1psYcIgjwUhD%2BelQlHYk%2BjjXpOBM0S0jXt0kH%2BfhLPF%2BXybFVNYZ4BIuXMvOvFFkClrw0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9dc88120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5744\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5744,"size_decoded":6487,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 471x363, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"620cd4e9a4e8ed952b0e0d3db67b6a2c","sha1":"c73d45a71e5a7f72243c440c7cf4f336d7e73115","sha256":"e9b9ccb7d2b71ef549dffa96101fce0125c61c301e6573f14bcf88f492895408","sha512":"029341d7131d6bcd32bc5a179391ea9dc9481403c89ca1062dc657dda98a249bc29c4b236b5b6bcdd783afe0467f87ced331d76f245a1aa17f0b0360b124869d","ssdeep":"96:uLghb7pjGxsskoTduLfQvSnfDhEoM4WyK72+lXNf5eL0Uef75e+4XjTQ/zpYsQJE:egB7p6C4wLYqFrfQ7bDf5v/j8XszpYs","tlshash":"d8c1ae18d883e8c2793f318d0d9c2584def6a14ce9ca9c535eaaf64e33b25c4e19c4c6","first_seen":"2026-01-19T18:34:15.969033Z","last_seen":"2026-09-03T18:45:06.46831Z","times_seen":42,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/api/config","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.105Z","timestamp":1788461064105,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /api/config HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://invoicebase.pro/\r\ncontent-language: en-US,q=0.8;en\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:24 GMT\r\ncontent-type: text/plain; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QL9I4CVYeaXIaRNieSdtAdLQe2SvmAUq30lOORuI4oR6DTbQZZCvxY73HqbL6UhWQq5%2BSO3S8YVPL8%2F0vY%2Fyc%2F5aiEw5tpmG7ZFV5qdgtuIjHHw13P709VM99sgqGUHENyg%3D\"}]}\r\npriority: u=4,i=?0\r\naccess-control-max-age: 86400\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, POST\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a356e7d2ae57120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":221,"size_decoded":960,"mime_type":"text/plain; charset=utf-8","magic":"data","md5":"df6b7a26bad9f660536e7c375f4cec43","sha1":"47dada17d935e311f02b75dbe545db155e41d7a1","sha256":"f17fd67fd99fe453561e30fecdf07c596e34024e204be2e84adfe21f314658ae","sha512":"4772a23ad2742ebe18988ccf7ac2b6b7f8b74b480f9e17f43b7ef1928ed03ce5fc4688b43e6ad6c25a0f18f204cfb3df9588a64f2da343b9ee5b7fa34ae96085","ssdeep":"","tlshash":"d6e028530544f30c045f405b18571664d1333ccecd52d8475cc15d35c0040b667bfc79","first_seen":"2026-09-03T18:45:06.468809Z","last_seen":"2026-09-03T18:45:06.468809Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":375,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/home-image-gzJaQJ7U.png","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.687Z","timestamp":1788461062687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/home-image-gzJaQJ7U.png HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:51 GMT\r\netag: \"696ab513-623ba\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=75kNSW5DCOOUFPyTcu0TOJROBkgh3ranoKjF8QkZb2sohkF6BFx28RtzNRHetdTshidtFIpE68XK8nYUs3knyGjtGdxhDgMLzP83P7mM4wqxZHZf4UnBl8U9DglcgHoP42E%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9cc81120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 402362\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":402362,"size_decoded":403097,"mime_type":"image/png","magic":"RIFF (little-endian) data, Web/P image","md5":"07daa01095f08806b1e9e00f52e2d885","sha1":"60f4b9ef9be0d9ffd78c0af4813520b73e9767a9","sha256":"0a3ee4f409e7897ca76f2d9c3b12fc6b43320898d002e9483abbb49b41923725","sha512":"94610ff3384d02ca79817d7a86b90996bcc6b44d7720886a200b06334309c7a2abb92348208c7f319b16b798f6a277d2542196320ef6ce6c585675273299caad","ssdeep":"12288:GbQX2JDsxfk0merFc3kPTgMEtjMeXsVqI:zGJDsBzmUG3GgMEjMecwI","tlshash":"408423a4237d3510f3df24b5bb095b57e31688c7146abb78188997bea2c18d2f9c49cc","first_seen":"2026-01-19T18:34:15.988951Z","last_seen":"2026-09-03T18:45:06.469915Z","times_seen":42,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":32,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/2df0ecacf2e76a7e0ce20dcef096403f359de962.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.720Z","timestamp":1788461062720,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/2df0ecacf2e76a7e0ce20dcef096403f359de962.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:48 GMT\r\netag: \"696ab510-2176\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3uuFvcoA%2B2WbWv3k5dFkUNyW%2BaJvKX5ZsIsc%2FEsoDlSQthQDXMC4lbowbLBXSyAnd89b0%2F%2FY9vK9QwGvnIsbgdy2L1OpOBooIpafxo16eE95AzS2vJmvvnQwaHC4k8BDuug%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9fca0120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 8566\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8566,"size_decoded":9309,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"26ae3e80d2ab26e1dbc190a5d2bcc8ba","sha1":"a8f1f6d1b9786367784512bd1ecde1d61493a34e","sha256":"7049b24370cfc140025193a8e85c28634d89dd8d129a80a29f7ad4e179717f15","sha512":"dd4f2b30230043fe0bc93b05534be02245f75de4feee461999223d19a5531051400707c75a6f61385de60b886cd2805b6dffe394b5ccb0197f0b7c954bf99fe9","ssdeep":"192:l9Tukp7/3VWYsLoNE+6vig4PaMZB0tUxeQHBC0R+:lEkF+8G8Rh/gmBVR+","tlshash":"ca02c0533010a17b9479638d8d924e80b95818f33b0fe54c44bcaab7eaf33ed525a317","first_seen":"2026-01-19T18:34:16.008753Z","last_seen":"2026-09-03T18:45:06.470471Z","times_seen":42,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.223Z","timestamp":1788461064223,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:32:05 GMT\r\nexpires: Thu, 02 Sep 2027 10:32:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115939\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":19533,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-09-03T20:12:18.58108Z","times_seen":11929,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"invoicebase.pro/index_files/cryptohome-Bkw0BUZH.webp","fqdn":"invoicebase.pro","domain":"invoicebase.pro","tld":"pro"},"ip":{"addr":"172.67.146.136","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:22.712Z","timestamp":1788461062712,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"invoicebase.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 15 Aug 2026 07:46:37 GMT","end":"Fri, 13 Nov 2026 08:45:05 GMT"},"fingerprint":{"sha1":"33:34:F4:C1:19:D0:FD:1A:0B:3B:5D:B3:AE:D0:52:CC:E7:2F:94:04","sha256":"1C:9D:16:4F:4A:B4:A2:A4:C2:33:57:17:1C:85:12:2F:4A:EF:33:05:8E:CB:B2:47:1B:3C:86:69:CA:17:D8:BB"}}},"request":{"raw":"GET /index_files/cryptohome-Bkw0BUZH.webp HTTP/1.1\r\nHost: invoicebase.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://invoicebase.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Thu, 03 Sep 2026 18:44:22 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Fri, 16 Jan 2026 22:00:48 GMT\r\netag: \"696ab510-3072\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=864000\r\naccept-ranges: bytes\r\nage: 505\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XUQV0wt%2FXDNOuDZm6vDfPJjnY2LwyeZq9yGS9gLhVyE7mxaw6x7KgA8vEynpRyek5ObhAtjpFzrcOvM92ak4KAitk6f%2FAOSJFhIOVpTYpL9rhfVq25CK9K5%2F95E7rv8A0LU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a356e7c9fc99120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 12402\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12402,"size_decoded":13142,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2ac7cec602b0252c013d4aa5b326693a","sha1":"9b2d322cc378f21cbfb168b8e0cc292590067c44","sha256":"6c7c900a5dcff13de00cf5f3f79a3e91311793b6e0787d2e4b876b99651e6d04","sha512":"56c91b9609dccb7fb7a5aa14a1eaa6ca4df0b9c1e1312cdb80dd171fa4f9b6ba8a3c08ff399f699e8fe5cc4673f62b43fd4c2a64a5e5a87f5826de54b43a0f9e","ssdeep":"192:GxT16NlaNVwG8Pn2RdS7bslDZDUwhKsgc43bF28brrUrH/0e2EfiAa+:G11EOwG8qo74lDxZKsgL88/IIOla+","tlshash":"3e42d0741cff8390dad260914efbeae68f129b9515d6932e30fc2a1f1e9f454e105d0a","first_seen":"2026-01-19T18:34:15.979085Z","last_seen":"2026-09-03T18:45:06.471191Z","times_seen":42,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"invoicebase.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:23.188Z","timestamp":1788461063188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115976\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-03T23:38:13.46471Z","times_seen":276328,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":34,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://invoicebase.pro/","date":"2026-09-03T18:44:24.226Z","timestamp":1788461064226,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7W0I5nvwUgHU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://invoicebase.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 18720\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:32:05 GMT\r\nexpires: Thu, 02 Sep 2027 10:32:05 GMT\r\ncache-control: public, max-age=31536000\r\nage: 115939\r\nlast-modified: Tue, 09 Sep 2025 18:30:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":18720,"size_decoded":19533,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 18720, version 1.0","md5":"2c753ee2983cf76ffeefa20db25a70c3","sha1":"13e20767faf339db1eb3b75b329e00f6d1b483fe","sha256":"28d124cbfadb7765f74a5688577c956ea3dd70f585b4645b2dc132742cd4c319","sha512":"0c9d6b356984e0f502a4a7ed99aef38621a53a580ceab2f1cb3f4f8d923f295891db0aac9eb2563541369a517e53def5b883a846eac8e138c169cd913044c8d7","ssdeep":"384:bNd6oCG7QqLLDPkev3w0zjoO9ETU1yZHG+2EuEn3iQ4:ZwozcqLLDM8Xf9ETU1yIzEuE3il","tlshash":"8982d0c11485e23c8e7c9ebb6a54f2b3acdb1238fed4371437127796504845b947a8bb","first_seen":"2025-09-10T18:13:11.027375Z","last_seen":"2026-09-03T20:12:18.58108Z","times_seen":11929,"resource_available":false,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
