{"report_id":"76178f29-310e-484a-b98b-65e9c5e99f51","version":6,"status":"done","tags":[],"date":"2025-12-24T05:26:25Z","url":{"schema":"http","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"title":"Void Network V5","dom":{"size":116550,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (760)","md5":"7d092bed24ed13db0bfa1d4e2d3bbbdd","sha1":"42a04e215cba87cb577a3fb3c28948f89b69a364","sha256":"3ea6428d61177de4e85c08a28c89d2e3437b4374f27a25f1d5a5f5961181ef0d","sha512":"5a25e53c984535d52bfa2ac33b9c6cc71b2c6c481c5a7710aabf7c49c806ca4e805a7324a16e729a65ffec923b20e2d5ce85b5ffe5b3fa92a53b562b009557ee","ssdeep":"1536:cGP6YQL7zbJrtOJUK4HauNseJZyYY6vozmzN/UadQL3OU:VP6YQL7zbJVVNzN/UIQL37","tlshash":"94b3f96145f7161b606bc1e99fe2e60d37788043960accec7ade12a48f0a7dad8777c4","dom_hash":"domhash5c537ee8e5ec91fd211c72be3ed84bd1","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":0,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-28T05:26:25Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-24","alert":"Hunting_JS_WebAssembly","trigger":"wwwen.api.bg.geek.nz/scram/scramjet.all.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}},{"sensor_name":"clamav","sensor_type":"antivirus","title":"ClamAV","description":"ClamAV","scan_date":"2025-12-24","alert":"Win.Trojan.Crypt-291","trigger":"wwwen.api.bg.geek.nz/","verdict":"malicious","severity":"medium","comment":"","link":"https://www.clamav.net/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-12-21T22:24:05.252763Z","alert_count":0,"request_count":6,"received_data":881616,"sent_data":2877,"comment":"","tags":null,"fingerprints":null},{"fqdn":"wwwen.api.bg.geek.nz","ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":2,"request_count":26,"received_data":1324836,"sent_data":11434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":5,"received_data":43282,"sent_data":2716,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":1,"received_data":11479,"sent_data":524,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"void-ann-default-rtdb.firebaseio.com","ip":{"addr":"34.120.206.254","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-10-15","domain_rank":0,"first_seen":"2025-10-18T18:38:08.446277Z","last_seen":"2025-12-17T21:18:46.185194Z","alert_count":0,"request_count":1,"received_data":254,"sent_data":631,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":1,"received_data":433854,"sent_data":441,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"voiduserid-default-rtdb.firebaseio.com","ip":{"addr":"34.120.160.131","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-10-15","domain_rank":0,"first_seen":"2025-12-24T05:26:28.382357Z","last_seen":"2025-12-24T05:26:28.382357Z","alert_count":0,"request_count":1,"received_data":254,"sent_data":634,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"admin-ab-1a964-default-rtdb.firebaseio.com","ip":{"addr":"35.201.97.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2012-10-15","domain_rank":0,"first_seen":"2025-10-18T18:38:08.909145Z","last_seen":"2025-12-17T21:18:46.119959Z","alert_count":0,"request_count":1,"received_data":254,"sent_data":637,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lh7-rt.googleusercontent.com","ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":17174,"first_seen":"2024-07-17T08:42:46Z","last_seen":"2025-12-17T02:00:29.684788Z","alert_count":0,"request_count":3,"received_data":241423,"sent_data":1937,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2025-12-21T22:51:32.802585Z","alert_count":0,"request_count":2,"received_data":774781,"sent_data":856,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e0a68c87830b22abae1dc0d30a2dc342","sha1":"e9c611d57f6ddc8b4895419fdb8e498810056d23","sha256":"53b04564f9adc7f950fc0007887f5d60e05618027a71952c21d5473666f2301b","sha512":"0cae16621004104e2e2e480ed67c6e58d5e69683e74d0e87aed10d1675f68f063366955e23897940d284778adba6ad443a29be28a55d9796141fd65f76c3c390","ssdeep":"","tlshash":"86f02d4980c23248de4210ceaa74a3849570502af227b6c06a1d005128cfa8b03ba78c","size":644,"data":"","first_seen":"2025-12-20T16:38:10.720761Z","last_seen":"2026-01-18T01:42:33.786613Z","times_seen":171,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2cf9f7aec607952d7f13ebc414d749ec","sha1":"6aaea6dae76f5345139a3c693d825e15645c4550","sha256":"82c94b7818e6cee932e792b6c1f4de48df9d44253f50a2595e61b04bc11fe497","sha512":"faa4c83480bca9984a88f37364b730d32c17d3d489814396a1b20c905d04b02a878a57fa5ce06805f4cf6e502bdb2b7503a8222260a21b3570aa471e4664f1e4","ssdeep":"","tlshash":"01a02208ceea88230828b0308c03030bf3cf82822028be008be80b0002e3c282e22080","size":76,"data":"","first_seen":"2025-09-09T04:10:34.722873Z","last_seen":"2026-01-18T01:42:33.7875Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/adminabuse.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"07a7b7abdffa35b936858f7674163d0c","sha1":"5faab25d97d659e3bcf6c8c14dc446d95efda2d2","sha256":"86e9ad2cbd70b92cf469e3a7046b244044d5b0ffbf2abda45f5447f2c03f0e3e","sha512":"d64182b21368b98847f6855ced600e6597c138d6558100bfc9f569ebec89dcb4c6a1da0077e86266ae97e38cc118528cacdf46f7ce2992eb02cffc01269657db","ssdeep":"768:Stgk16EIkxSF+bF60aKAMl357XNkq+RbZvKXE:Stga6H+bFNaKAE/2bZvK0","tlshash":"5423b62827f32110d523e17e6baf6608353050177147ce6cbd6e52985fc2f626af6be8","size":48632,"data":"","first_seen":"2025-10-18T18:38:15.695008Z","last_seen":"2026-02-12T20:12:17.475555Z","times_seen":250,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/games/games.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"244151c7ab0450be0a669710d5d2cfe9","sha1":"40058f56ec486dd02a1427c54e40bee1c9edb678","sha256":"6a7483b7b03b7c4ee1872faec28c4ddbef5590f9a3b16216f8539167dfb3f042","sha512":"31ad1224d95de858dd64c3ec36a02d06f387980ec0c5f38f9b298fbc00deb2c0aaab5ee2cb5ed2eafdb55ece8e3f02ff697243abb0218ca820b3914445c41a57","ssdeep":"1536:/G61Qt8J6fBU0vsqku7KRibPyadueAlGTLP2mwFQ1/pL/kGVTKhfz7mD6ohF6dbn:a7jKej3nI09BOTJLJP","tlshash":"adc38d5590b22497068445909ec9eaccfaa416278ead64017d34f03c9fdff9f39a932f","size":126605,"data":"","first_seen":"2025-12-22T23:43:48.587691Z","last_seen":"2026-01-15T07:03:35.673924Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-814Y2X3KSF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9668846056d43a2ebcc7ea5d5e935982","sha1":"54f6b6ceec13d95216a7d7da31b7337b1eeb92e7","sha256":"32ed9796134d07c637aa0118e1c1c264a89c31c805d26cf4bb721ce165a76309","sha512":"0c0e733616790d9299468ddc2ff573633a6fffd3cc0fd30562de8c80eb9b50a8c47a10838d93269ab0c1e5d46a979575c8006ee7c83fdf4513056f276cbecc5c","ssdeep":"6144:xiIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:tC8bu7/1mbrnsy39WbMpb","tlshash":"cc941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","size":433250,"data":"","first_seen":"2025-12-23T13:29:24.011255Z","last_seen":"2025-12-24T07:57:49.146953Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.5.0/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"02904152d3c28593a13bcf7a431db7f9","sha1":"5d0ee803da86c06d228cbaebeda485a0f522a33f","sha256":"c3eae2c5e526c62112ade0f9edba2dc34f36ac7a0dc352bd7158e5322a878353","sha512":"3e7090861bd96a521071769a63e09fc98f85a75cda30b0dd5344b533831a3602eef3681c95322fdaf27544ef43b142b00687f4a3f852c941fc973c6fdf534bb6","ssdeep":"3072:6sLOPfSdWAI6aJZJwJ/JcJEJgJBJBJ4JJJ4JlJjJPGoAZr/p20:HLQS/raHaJK6Gz/anaTJBGoAl/p20","tlshash":"cd141a813381b62317f96aea45328142b33959a87509447cf97c8ce779a198d32bfff4","size":191543,"data":"","first_seen":"2025-11-16T04:42:32.577155Z","last_seen":"2026-02-12T20:12:17.494542Z","times_seen":120,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/http.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5c5cf22f34d681d41993f7e5093761a4","sha1":"115fa7fd2b38d0cfb5718fcdb7b3e907b1c5390a","sha256":"c83169cf862e67baca77cf3cd14a629bb84962a7fa22ac053c3a8ffb858c803e","sha512":"0c501c4c1ee87a9775096318b5b3c1469cd51a55083ba18eb20920978ad47b7560801edbe82cfe882b6dace2c85a31d804277f59fc9200f2ac9322356f4fb37a","ssdeep":"96:j2H7pLOfZhgOlaUMsXFW2mrWX7tCuWrtlmtU6VM:j2HNL0ZhplaUMsXFW2mrWX7tCuW5UtM","tlshash":"b3a164ca12e74205a453d4e1afb33b0737745003950ac52e7aed31addf46acbd573698","size":5032,"data":"","first_seen":"2025-10-18T18:38:15.768381Z","last_seen":"2026-04-05T12:24:04.05722Z","times_seen":317,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8a90039ef973c55fe797fdfcf1faa517","sha1":"780a97e5402037f6714bd6fd993477eefbaf69c0","sha256":"ef6e050bbdc7a53aac6337a3895fce63a339b35faade96598428691a42b48a7a","sha512":"a300687237fc26f6bfba8addaf3391b542b4af818caf96dc681ce86c84779db15fc2fa737fce7cac77d0c97b121bb0d471f5391b3dfbab06d8dbea63ab6d0f7d","ssdeep":"","tlshash":"8ca002411de9147752690a308c453f9334944d21312df094b610193d06c0c491908534","size":73,"data":"","first_seen":"2025-09-09T04:10:34.725021Z","last_seen":"2026-02-12T20:12:17.540918Z","times_seen":277,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/11.0.2/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f9a82e4c1c1b2f37677714bafb67571c","sha1":"d0e6f3d0d890aef150d297734fa9ad143a4526c7","sha256":"c69080e34624183023d3227e3c4fb157e67cc6136ceb397ffb53fc3ba0dbe0f9","sha512":"ba261464c966aed04f90cfa2fa9d3347f6bc74923aed4d4cd31d98d5172706ceb2c75ee367b1d8eaef48e045d75922be3ef03e8375db1c4239c576767d81cf0c","ssdeep":"3072:RiSxYKRN5xRylyrkMVl1B0LN/l1sa6tZcSF5Ouao:RiS6KRN5xR5rN0LN/l1sa6tZcSFMuao","tlshash":"3da3952d2bf711330aa354bc2f1f6086b32dd11b261ada94789d83e48f4653946f6fe4","size":100754,"data":"","first_seen":"2024-12-03T13:13:08.303607Z","last_seen":"2026-04-05T12:24:04.012964Z","times_seen":397,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/save-code.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b77fc7b4e6d013e4cf03c3d3a6f2029","sha1":"05641d2c7d58be703d932e447301783c67ce46dd","sha256":"c38e17d3c4c0359acb101de8789403f06d053472f29c942258795d2b3a012a07","sha512":"3d4886132dfd8c7676ed163831f98865194cff0fee2ecac2a230b77551db2ee94a3f6f729ebd442e76194b370a57ed1d6a747f2df6ff280e9ced755c76bb0f67","ssdeep":"192:yabMrxt61KiI83M6bicyxC6V86PZzDjFw2VyqRfp3B0rF4tnfWiMskS9nRlHem:tjyPf4Y3Um","tlshash":"7c32f14b65f72534853bb0beab0ba5016135b0073808cee4bf5ca3541fd6728bae76d9","size":11991,"data":"","first_seen":"2025-11-20T22:40:22.265216Z","last_seen":"2026-01-07T20:13:09.25721Z","times_seen":241,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/apps/apps.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"3ebc1198ba183882377f9b9d125cb991","sha1":"c17e9b057a8ad55d3ef97d100313734ea60496c0","sha256":"1da78c080206cba172d19d790d94c5c60a9e96e7e7b64b2683e76db7399262cf","sha512":"ee7eb3920db929bc763fee63fdd1003f2381a4c4011f92ffef5a337b1e18f293b65b86abdbcf756517a38a22f149460ac543260cc031de66e3fd7e688211305b","ssdeep":"","tlshash":"266183a3042040295b0891c4f9c552ddff8f46bb9ca56006ba38546c6fd67ff31a63bd","size":3418,"data":"","first_seen":"2025-12-01T00:51:41.56894Z","last_seen":"2026-02-07T17:04:55.85246Z","times_seen":264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"441b79bece6ad35af7520e9b2c2bb59a","sha1":"77776f954a28ab88034a26b578a34855261a2c55","sha256":"534813d1da2f4d4550383d5db0879aedb2f74c2d0b8951ade277e8bcaea6df52","sha512":"ef93a7f2ee645a52d3d4654117d5b8494efbc5c3bde10668c9bdbd0cc139261074a7b9587e72f4f28b3d6fe422ca27542aec33fcaa468f655d2cae6a6566ebdc","ssdeep":"3072:LQD0P92aoIb4HLBl+o/es1zreclzsVO/3fPO4LHi3aLyjqLAVX2NDQXNvFzVuop1:MwVpM/eULAINDQdvFBuopyG","tlshash":"b18462af8fcd269f4856e7881a4bb0501fed93bd331a8c13768e963bc252416dcb3651","size":386702,"data":"","first_seen":"2025-12-18T17:28:30.039839Z","last_seen":"2026-04-05T02:10:53.510206Z","times_seen":352,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/pages/home/home.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f6529a437d1ab757a9c5a7bcd5029a37","sha1":"3c165a13da3957483c553044891e373621244366","sha256":"4e48b36dab43c7655377088866c76b7eaaa70323e9f43de34508d13f1fb48991","sha512":"85026d239fbdf62c8b5caeb8d9e1c10939c34876b2e446301d3b23faf4b1547e02376bce3e2c3294e3aa4246d96e7be915cf1cb122f636ade5251ddeba3eee41","ssdeep":"96:CG3yXGeVm+jJYuwwMnlg9M6cI4VATO2X7rSP7:3O/d9dsVATNX7rSP7","tlshash":"4ab12d352eb30421806b426a6bff8f843125105b228fcd1a7a6e951d1f92e14b7f5ff2","size":5471,"data":"","first_seen":"2025-08-04T10:22:24.493228Z","last_seen":"2026-02-24T20:32:59.486409Z","times_seen":307,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d6acdea3ab89f84193ff43866a014bfa","sha1":"02869db4cd8e28bc26fabd035bb12d73c70dd4c8","sha256":"95af1f3485d3d2f2f68dc0dae682cb61341863c92b8b50fe987c35fe224a3390","sha512":"f8778111e13ec895594c0f1768cdd3735ba8034d3db451fe1a4a2671763673f2b6102ba3caef2b2a73df716a75bd9e56ad5c5e4fe03222c506a3a6c9c6ed88ce","ssdeep":"","tlshash":"a7e0682c08f78d7380b7b0085a3f20053251cf0b0f88e8467b0e8366af948e56a83fc8","size":396,"data":"","first_seen":"2025-09-09T04:10:34.727312Z","last_seen":"2026-01-18T01:42:33.791542Z","times_seen":275,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/blank.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"277c0de97164dedc59159e750964fed6","sha1":"f98937cff2b1d9b8538353ff7fbac13323829ffd","sha256":"c6a7c4e8052639aed0eee74fdb8ff47b87b06e71eeedbf16c87356e114747599","sha512":"ea043f18b9a3d8b56ba1b41297de3015315de22bd3126a85fc362695376f17180e520c08f5462606618bb88e19947a89aebdbe65704c84eb7efcf6ecbec40cbb","ssdeep":"96:DU7t1mHkwE+gt5pR4X5xaQIS9oyijNI3xe5S:DU7t1mEwE+gjpR4X5xFIS9oyiJgxWS","tlshash":"5da1825984f32250a13be0796f6b770836725007760ece7d3a8d03509f8676ae1a3bec","size":4847,"data":"","first_seen":"2025-08-04T10:22:24.511526Z","last_seen":"2026-01-25T03:35:21.580333Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/footer/footer.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9bfc860b29e20f2217858e85ca610f7e","sha1":"c8cc7584df1a355dd575ca94bb829a77ba995653","sha256":"b655c55023be0fa8fee2bbd2272e6bad1c920c311357090c9bf1dbec981ba5c2","sha512":"93f78b66293ef7c91492545f4c2b10b0fa09bbb33449af7ae919ad36996a8908f43c06fda9828570993d86a8011e0428ec67afa3edc260b4a514cd825763329a","ssdeep":"192:zjU/CZOJpr9sEb+dXR7yZycYR1dFBDJ00ZTrFLSbgrS9IBQHt7vfLJxaC8vwyTFo:PUc8Kf7fpva8+dD2gmEBqrkd","tlshash":"85b2556b9ad7160c692790ac8fe755553379d003a10acc3d7fde22794f0e1cae872b89","size":24966,"data":"","first_seen":"2025-12-20T23:35:11.11766Z","last_seen":"2026-01-08T23:16:47.336864Z","times_seen":151,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.5.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"686623729c8e9d3047d18ad79c4a23b9","sha1":"bcbf32c366d7f22b6aa7a07cb6d41c7fb4bfb760","sha256":"4a168c67d315dad304efe9122083c1d748c194070d5d80df67a314665e1b1875","sha512":"ec566a448653c226782804988349f34d336534507d1d200bb8774ea6798adc07ee3d26c7483990ab8e55f1acee1f072ca17172e08527e3e572acc43e1dcc30a4","ssdeep":"3072:MHSxYKRntxRYl2rkMVl1BqLN/D3yaxt30Q7urHkp:MHS6KRntxRPrNqLN/D3yaxt30Q7gHkp","tlshash":"a3a3842d2be7113306a354bc2f1f6086b32dd11b261ada94789d83e48f8653d46f6fe4","size":103065,"data":"","first_seen":"2025-11-05T06:51:35.970429Z","last_seen":"2026-02-12T20:12:17.492864Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/particles.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23a4e2927e6179f9a602597ed5b239fa","sha1":"8e55571ddb18a9e864ea4d35a67347ab1d4bc074","sha256":"fb699cd2921111df477108e68483942a288def0a3eb4b708866c992521850107","sha512":"e2597420d9692b3f433d6d5c6a55291d1fa6dbc7fd33cb17e2badcbc5b8c3119d89921320c77093cc41154d045496fc8936f5c4cae9a8cdcf18d8c061b4febac","ssdeep":"192:Zl20q8LSyIIGtXOtOQppuAnAsHClugt+wJeTE2LZoDrMG:2TIGtXOtOQppuAnAsHCluK+TTPaDH","tlshash":"15e1c11d5bff1521e263716d1fafa385a772800b1d46c92c786ca2d4cfb1a210a69f7c","size":7318,"data":"","first_seen":"2025-11-20T22:40:22.238843Z","last_seen":"2026-02-24T20:32:59.504094Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/ultraviolet/uv/uv.config.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d851cfb22c704fb1a71a1a175b35eabd","sha1":"e6fde3e134835f81602ec27929590b83b4f62e55","sha256":"256b156d3d886cd12b7a0ad0374a646b0adb7671eebab7b3d9fece6e17c58b89","sha512":"391667df6c586f5544f5c5fa6c9a98163f54f3c932df2b2eb830646a408e44c693522519ef1bea14684112d40e7b9fb5cb16823830c85a2e635ae4af900970b4","ssdeep":"","tlshash":"f3e0268f4dd94d875f30c11442a20c34c749733735049026fe3cd3980f34a50219852c","size":330,"data":"","first_seen":"2025-12-10T20:51:03.802702Z","last_seen":"2026-01-25T03:35:21.603889Z","times_seen":255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"04ff95c4b9c0a811a46e1a589826848a","sha1":"45e72b2e0b3e9faebced911cb99e77014135c757","sha256":"bd22f9043f1a0347bd3d6693a77dd51a060c1e32f2e54aa2057bb7bbf5e93336","sha512":"81508e931428e430ed41c379de718a4fd024cdf78fa85ebaddce8eb16541eb2ac0131a7ca1c371524dcf2975911c1fb0a84a97348f4d1bcb2d1ae0b9ef0cb13b","ssdeep":"","tlshash":"38a00273f0c28c7e4032b144227a3508b943011e82909020764d08709f3708ba5044c4","size":81,"data":"","first_seen":"2023-03-08T01:49:48Z","last_seen":"2026-03-25T21:56:18.485782Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"6563b70f9d2115397aa083691c02f26a","sha1":"5e241c646d1629f1857c062b7257182246be1b84","sha256":"8455c32a4e5fa4b7c2789a929c6ea70e504d97e6b1b96212f508da9bfd9d80bb","sha512":"2262d36e09decb96128669b4dd54fc92a0ca5e5eb5f7befc555b76b0a84bfc5b704b0b45bbd20f4a1e8e4c49350d726eee20e23b09f5cad98636a2de71de2283","ssdeep":"","tlshash":"31b00273f0c28c7e4032b144227a3508b943011e82909020764d08709f3708ba5044c4","size":97,"data":"","first_seen":"2023-03-07T12:01:50Z","last_seen":"2026-04-03T19:06:41.689625Z","times_seen":375,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db52f88efe5ade0d87a759d3418176aa","sha1":"fa5063266330083383165ea360cedded68d4b09c","sha256":"672f6b941682e3a22d555b545af2d342e1c9c33f34f4e7c484014a30dbcc42ed","sha512":"9cd2e2cb02fbee8577d9e2b93636fba1c885ed90da20f47f48a25b5f7390930e8ff72d05b05ac08d17a7faacb1a064cb67073791a2cf73d9c6e62121eea3c085","ssdeep":"192:q/YqoAOdqCSGIiJiof7elrZ25Nmf3qmmKHqir5//Tf3eKCSIAwfje:+KGt5qirxAAQe","tlshash":"a6228424e9b31021e12752ba5f9f960c31349103f606cc5cb77fc6c4af81aed95baba4","size":10211,"data":"","first_seen":"2025-12-20T16:38:10.730447Z","last_seen":"2026-01-16T20:18:37.387759Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.4.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8f675b0e91f5a23869151a1990843937","sha1":"52204e5eb0bafa3b8bcce4da642d9fd39989f47f","sha256":"f1566138227e01ae6d9b58dc6df0c77647af9ac97fce5d5833f3df59db7b7f55","sha512":"1425d43bcf93052c4d250d1cd981945550ee231f23fa62a16d9613f6dc5a75ec81133369a4a62076ad932ffe60e2d6ba9a1db6df9900b195fae2e3e807845dbf","ssdeep":"3072:MHSxYKRntxRYl2rkMVl1BqLN/DP2axt30Q7urHNp:MHS6KRntxRPrNqLN/DP2axt30Q7gHNp","tlshash":"03a3842d2be7113306a354bc2f1f6086b32dd11b261ada94789d83e48f8653d46f6fe4","size":103065,"data":"","first_seen":"2025-10-13T02:42:11.028344Z","last_seen":"2026-04-01T19:53:21.986073Z","times_seen":259,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"04ff95c4b9c0a811a46e1a589826848a","sha1":"45e72b2e0b3e9faebced911cb99e77014135c757","sha256":"bd22f9043f1a0347bd3d6693a77dd51a060c1e32f2e54aa2057bb7bbf5e93336","sha512":"81508e931428e430ed41c379de718a4fd024cdf78fa85ebaddce8eb16541eb2ac0131a7ca1c371524dcf2975911c1fb0a84a97348f4d1bcb2d1ae0b9ef0cb13b","ssdeep":"","tlshash":"38a00273f0c28c7e4032b144227a3508b943011e82909020764d08709f3708ba5044c4","size":81,"data":"","first_seen":"2023-03-08T01:49:48Z","last_seen":"2026-03-25T21:56:18.485782Z","times_seen":425,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/chrome-mobile-warning.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c57eedca6bce2cd46ec885fd13b25f4","sha1":"dcb15c7be270250095e79f0f9dd88751e74b3402","sha256":"ace20d7024f7972b7116cb40e434cfefb545859532e96191fa88c68d03aad797","sha512":"8f5ffbe08762bcd9265b577d1ab875bbfa9b7e377583ffd0be2efd9e56a469c07398e612e752132a1da949eaea1c7d58afb8927d046362cda2c4669dcdd5c818","ssdeep":"96:u2o5tAMoTKqnJKpOKeAjZ5SpgLvnJCJytTs9fH:u9AMoTKqnJKp/eAjZ5Spix9a","tlshash":"83c1432aa2eb0205a45390e16f7353493fb49047d40ac52d7acf67a4cf4eac5a4b7f6c","size":5603,"data":"","first_seen":"2025-12-01T00:51:41.574007Z","last_seen":"2026-02-24T20:32:59.504897Z","times_seen":291,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/ultraviolet/uv/uv.bundle.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a621c1e2133cd8c4e12b98689a356265","sha1":"ab56999010f90369ee5d3a03e6d96558475e0ffc","sha256":"78ae6d9f61f392225d938e9a14c18e80c217da8248d14f87fab86a8b26ff1f5c","sha512":"83c3ebe7aca130bd6727e9971c0d2533cdf18755ab2fb2436dd32dc933b5dd013dfa0f983becaa1b96d839d2597f7e03e320c1bedcda407500878fe94e98e90b","ssdeep":"6144:bkyp7W3VxS/SF/+GxN0yGX74h2adYfEINVL5y979xTDrpvWwmp24R:4ygCKF/+WpQ74oaCfJ75y979xTDpW24R","tlshash":"48f41cf33382a5b38bd680df9a562291a235411af4cc580dfafcc4db263556d1237e7a","size":763060,"data":"","first_seen":"2023-10-18T20:09:06Z","last_seen":"2026-02-20T01:56:53.544891Z","times_seen":295,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/scram/scramjet.all.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da7ec81e9ac874c022a2704110015d72","sha1":"8b834b2c70d508f308eae50abe4d08c66f53aa1b","sha256":"49e67b462f40cc09541556aa4b762b76c6ec5eee393c4c49221667260056e10a","sha512":"f8c7467b3c0cdadc40283f01f8af4056a0de693c2e7bb0af3765f2433a84ebf723c760dcafcc6b610ed61f45e592ac3982f78a5541bec60c97afbc6f7afcef08","ssdeep":"3072:QLHmIdZtzQNg/kMBaNpgSV1EMHC+ybk0BR5i10oDDp6:QLtQSBa5ohI10U6","tlshash":"24045d923aa0b83787db519d906b1601b33e11786409807cf5bcd8ea5bb4a4f527ff39","size":176344,"data":"","first_seen":"2025-09-09T20:28:56.414826Z","last_seen":"2026-02-01T19:31:30.243824Z","times_seen":266,"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-24","alert":"Hunting_JS_WebAssembly","trigger":"wwwen.api.bg.geek.nz/scram/scramjet.all.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/user-tracking.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab7c8909b2815c0d3325db0c05645ab6","sha1":"bb8b9cef2614b1da069bf6138ef30409be06b13e","sha256":"0311b4cca7b231ea8ed319abcd33e4efaac542dfc0eea26c372550ddfd09698f","sha512":"14d033564ac1a3a628ff8ea18830d2820055d70319b2a2a3b6bd3b6c8397983d237b55c672a8dff00055c039b459e6290d678f3fd24acf21cc9903483681cdb4","ssdeep":"192:vyQfQXivRQe7TySGiyxcwZMTFHkSG9xiLpwq3p5XlNN5Hy1q3xFF8wKEoo+hgr2C:vy0yMZNGLi+nw+Vhgr2OmyUMki","tlshash":"3e62b65896b32130500355e9d75b6a1a7e31b013264bdcf93b5c8a905fc2f22b2d6fae","size":15742,"data":"","first_seen":"2025-12-24T04:53:22.649897Z","last_seen":"2026-01-25T03:35:21.592525Z","times_seen":115,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/ga-tracking.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dcc66623f691144cebae5587793e2ba0","sha1":"82c280211152915c86f869cf049b952b4fbc45fd","sha256":"cedd707303327a2a9f8222a0f65e86573c3d19f15331240644a9d0346b31dcec","sha512":"11e49719f5493e6db10f0e61586035ba044f75835da8588e7f91004520a700acdb5f8431ba262c7b38ff0fefd908ac58eb1ac5035b9230ba90c6ea538823b9e0","ssdeep":"","tlshash":"1a21c96d1c7388318b7760562b7fd389363231037451ea423eacc604af21bd74e10d64","size":1147,"data":"","first_seen":"2025-08-04T10:22:24.518029Z","last_seen":"2026-01-25T03:35:21.588792Z","times_seen":279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/ultraviolet/register-sw.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00013bdfd98bb3ea023c955ddd1eb50e","sha1":"d0e0b2e089d680ddc666f794b54341eb76c7fda4","sha256":"e14f785c0472d90e635d642e0e2b78053f60913859b26f111a96ee8c0fe8dd85","sha512":"d307d5f1c82ef055486d62c2fbc8bc0d77ac90b1fb35a7116c3f6f7ab4775ee52475efd9e25700bf91c322ad12da7d229357cb63a3b44a09205bacd18677e4b6","ssdeep":"","tlshash":"2811ce19857a5a33cbe379bdec1b0110622bc0197495cd51bbfe52002f8777c666b4a5","size":1013,"data":"","first_seen":"2025-12-01T00:51:41.586346Z","last_seen":"2026-01-25T03:35:21.578545Z","times_seen":263,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"736795c20587ca25a678bdeb2b193c63","sha1":"9d95c70c2a7435624b63b8851bd3f2ae2bfd525d","sha256":"d764820c110b46c0b3aa0557ce9ec28998b67349008b84f6b1e9bdb32e62fe62","sha512":"b654264aa43d045bf85f22f2856f221b6d497b41c65d636e48338687cbc3e137eb852c63a0cece129a9a095d93e2a9bee1f5b95b29fc65aac0d3d9174c02de8c","ssdeep":"192:Uz2j0/OdPMsrOTs+FmfW8P7TA1UTCs3TryPLn:UzN/UadauQy","tlshash":"8b22a8b95e33003140b751652befe7003528508baa4adc063f6e97990f81ea4ebfb7d5","size":10582,"data":"","first_seen":"2025-11-26T05:52:44.478619Z","last_seen":"2026-01-18T01:42:33.794241Z","times_seen":262,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"bd54129df7a76a30fbc152174dea9e28","sha1":"5e13469b31935e665c318e8009165cf9b0112c25","sha256":"51c8dc8138f74f27afd14c9d87dffffa07b101193f5bd98856cfba8be2617bca","sha512":"3300d8a6bd010ab5aaefda57ab014d9f2d0f8fb9144bc69ce47cb5996db85193119d73d3a7b73846d70acd6ffd34b18c33eaf5734de40aab0fb516910b09cf0a","ssdeep":"384:dMbo89zIk43C80Yt0wW7FvoW2xjCkLvjrt8El772wz8H6Cd99I4A6Cjy9I4c7beL:dxdl7x8K5Eee","tlshash":"e38276a001fb3c5728feddb7b405d5eeb5689d721a9404fc8a848196de693f1c61c3ca","size":18447,"data":"","first_seen":"2025-12-11T06:55:09.334078Z","last_seen":"2026-01-16T20:18:37.395239Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/baremux/index.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6fb6efaada06db33826110942794112","sha1":"f6687e452c4258d3485ba1757ffd97dd669859f1","sha256":"1d56021f65ac6caf0e92b9c46d00f9a9045722766304fc6432f7927ced8a2c82","sha512":"aa60231d0276710aec2ce50b8e9f30fd9b112514cabd5146f9d84f8305c0360cd3ff234ef20e66937a6e153748d4dd83afc772b6ad8114d839f7f742fdde64d5","ssdeep":"192:Z4FBMoJDWTnqfyW8d76vR5UOy43oaxAkPccYLiMYeFOlYAKnY3M:Z4FBhDWTOy6vfUOy44occYuMYeFOlYAe","tlshash":"b902d7d0b0b524bec7a661d174d93201b265b1b4b714c0b4f73c2eff39da496a60af28","size":8589,"data":"","first_seen":"2025-12-01T00:51:41.584499Z","last_seen":"2026-04-05T12:24:04.110154Z","times_seen":357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/particles.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"23a4e2927e6179f9a602597ed5b239fa","sha1":"8e55571ddb18a9e864ea4d35a67347ab1d4bc074","sha256":"fb699cd2921111df477108e68483942a288def0a3eb4b708866c992521850107","sha512":"e2597420d9692b3f433d6d5c6a55291d1fa6dbc7fd33cb17e2badcbc5b8c3119d89921320c77093cc41154d045496fc8936f5c4cae9a8cdcf18d8c061b4febac","ssdeep":"192:Zl20q8LSyIIGtXOtOQppuAnAsHClugt+wJeTE2LZoDrMG:2TIGtXOtOQppuAnAsHCluK+TTPaDH","tlshash":"15e1c11d5bff1521e263716d1fafa385a772800b1d46c92c786ca2d4cfb1a210a69f7c","size":7318,"data":"","first_seen":"2025-11-20T22:40:22.238843Z","last_seen":"2026-02-24T20:32:59.504094Z","times_seen":298,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/settings.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"27e3892d7ee000c4817ca90582bb30b2","sha1":"ffa843083b7649f6f6ff4023fe3067a36a73f048","sha256":"1e3787486c33cc258736e8b475c2ae762149cbc3aae8e324a62f7f18b8217bd8","sha512":"446469e35f38200618052b412d2ae024062b2fb8621ec32544478793c861399a7319ca3668297fe38ea3d7de0667f781e8782af43164f80445935c99dce9e0a2","ssdeep":"","tlshash":"f881613a25a300356717b16d569fc241f133e41bbd69ce197a4e2d58aff052882e3b9c","size":3996,"data":"","first_seen":"2025-12-24T01:53:19.258902Z","last_seen":"2025-12-27T02:55:32.900627Z","times_seen":38,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/scramjet-preload.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"158b7ba6923cdc6987f6ed234df9dd2a","sha1":"3cb07832557f2c59bb925afbdd2308da041aaa43","sha256":"5303aad48561f80b727c4da8bb74fb07ca6c0750a5dd92feb3bdbf9edb9febb4","sha512":"485aefda667f1cd931760273a39a4b57c39b9c4a663782dcf37f101e7dce0403a6e5ebd2fa0f044f8e2303badd11c43c096b7f902f0f9ff3722300ffdf69e6bf","ssdeep":"","tlshash":"3251010a12b3113901737afdde6f8111326340833044ea517b5da61cef5b7bea2b6be5","size":2479,"data":"","first_seen":"2025-12-03T23:45:14.025237Z","last_seen":"2026-01-23T18:35:03.597939Z","times_seen":260,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/page-loader-main.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"110715dccf155c8776f22153a801a6a5","sha1":"f2e6c10456f84502dc0e2a27512c9bc7aa492b09","sha256":"e207f128ce206dbc4beaebeb09407c9065109dce6cd3cbb1d0c5fa685658ef54","sha512":"8638746fc8fd171bff322616ae676f3c0c528bec4aee7c45704d40f04c9460b811deee9e86398a0f3269948fb97a16ef5fbb3759d510bcd5debdee944a3baed5","ssdeep":"","tlshash":"1731f628bdf6d0304067706f06bfea4cb8266103250ae95a3e9c4ac45f85fed9c55ea8","size":1538,"data":"","first_seen":"2025-09-09T04:10:34.693206Z","last_seen":"2026-02-12T20:12:17.470576Z","times_seen":282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/local-game-encoder.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7621c2fd7f4c7df19eab674336d4d690","sha1":"f7321053e7b2d3c41ea401894814c430dccb0c37","sha256":"ad83c5a37ed8cf2f7dbd99f1c46f9563929ddbd7317b61310c3aaf7d333bbbfb","sha512":"132fc56f4b8ee49b3a4ebc08dd8390037c545c174b140de80d3c4cf2a27dc44a67b884db6eb74db6b403d740778b99116815182607bb0b97dec8d0529742d9f3","ssdeep":"","tlshash":"9231675427fb1686456663b983470221e13ca58f160cfec8bd9c538e2f3d71c98e3b64","size":1646,"data":"","first_seen":"2025-09-09T04:10:34.688891Z","last_seen":"2026-02-24T20:32:59.498588Z","times_seen":305,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3317a52b40f7a6c5722869b785c12c81","sha1":"392f00deabcbddb1e502eb21e9b602f96e4fc8fb","sha256":"c333347c6eff7890356a90f6763410a3e14ba5020df91dbc54bad679325c1d6b","sha512":"068661d1e230c806d72ba1936d61c2ad4cbabac8d7b547fdb656fbd2e80c0a5ea0ce1989f458df157576358f707629cb62a32b518fbe531b241eb323c4eb43d9","ssdeep":"","tlshash":"3d311239e305419dc2a520f3291f958b5fb50ba0ec2857b19a4fbc444484b99655da54","size":1548,"data":"","first_seen":"2025-12-20T16:38:10.72675Z","last_seen":"2026-01-16T20:18:37.394419Z","times_seen":166,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/popup-listener.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9195d932df921639d18f8198ae8503bc","sha1":"abe50296d7b4d131481eb18a96938fe237d62009","sha256":"e8481a1ead8b50b6c0cc501d8dad8db51ed3e5ffb576e4446577c302dff9d463","sha512":"05037f121d81066e13fd9c2bcedf28a9a81e397fc09ae0947f2f687ab2eef8a76b81cff0b6096ad5fc1cb2922f898040663292f380489dfa4bc6bd48b3f385f3","ssdeep":"192:Eake2yai+ay2i5wtiv/O+y8SO5kf7NCrdU/OeG4sXnKPe4wIAxLm:EsAhmAY","tlshash":"64d17344a5a30708542300ee5be7960d3774a1036e06ec1d77ff82a4bfaa6dee1f3294","size":6765,"data":"","first_seen":"2025-10-18T18:38:15.691263Z","last_seen":"2026-04-05T12:24:03.989988Z","times_seen":318,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.4.0/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b99b49634061a90cef201779039c094e","sha1":"cce5357a8d97b1c2529ecae768758c04880c44cf","sha256":"9d740e1efc4f3c4170666e735a4e34623c62570ef4c99e0b4ec41d801ddc1637","sha512":"2e4d1b4917de643d3a1a43f72a28120f3ecc1322b3e3b287d8958931a14b0e8d4e40bffd32f4dee6d9b8a34f0a03d3c402ec6a1fd83d3b84895ccfba4492c9a9","ssdeep":"3072:3sLOPfSdWAI6aJZJwJ/JcJEJgJBJBJ4JJJ4JlJjJPGoAZr/p20:8LQS/raHaJK6Gz/anaTJBGoAl/p20","tlshash":"df141a813381b62317f96aea45328142b33959a87509447cf97c8ce779a198d32bfff4","size":191543,"data":"","first_seen":"2025-10-18T18:38:15.703928Z","last_seen":"2026-01-31T09:24:24.419981Z","times_seen":249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/11.0.2/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e657794babf8518324cf992827b35562","sha1":"bcad4ca23c6b698ce50c1e6e3c815e31c946802d","sha256":"611b09f31aa435141d5e6dc721940730e6df53dda798d645d5c587d2c11794f9","sha512":"46b41392d6740ab6954f0010212c24a2a0b13c4cdb0136d3f860f7c5627731c922010364dde8dc153a1c1277050e7c7124faa47d92b521d617b8cee1c05d73ea","ssdeep":"3072:ly5y6XEHy6RJZJwJ/J/JXJgJBJBJ6JJJ4JaJjJeyzAEzDIZWF:8I6c1RHaJxhGz/EnaMJoyzAeDIZC","tlshash":"110419803381b61317f9aaea45328142b33959a97509447cf97c8ce779a198e31bfff4","size":186300,"data":"","first_seen":"2025-03-10T18:44:19.836673Z","last_seen":"2026-04-05T12:24:04.10884Z","times_seen":343,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/adsence-tracking.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"33ad651bcaa5274e61864a735743f94e","sha1":"38fbad1ef61747a60b446ed4d7701e232712ed3d","sha256":"0b150705f64b0a0332235d0b72a27c9199bf0d59e1259022a2c2740936799e0e","sha512":"b872d74818fc1b48daedbd9c555b0e2295d2f47db9bb1eb0dbcd8908e9ff87ad424677125a3d46b48f2d4a48c1678f5345c48cfeef4866140a4b3fc145fd4748","ssdeep":"","tlshash":"b1d023b315228f131f70983443b3bc0deaab1323bdeec0c114c004908bc2f7605682e0","size":220,"data":"","first_seen":"2025-08-04T10:22:24.519722Z","last_seen":"2026-04-05T12:24:04.113451Z","times_seen":325,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"2bf9f8719f16e737293569b35c9d0656","sha1":"fae39a6c0395a64f118e3fff97b2e19b5502a43a","sha256":"e546be894f1b90a3eb05e824dd39a6422ea46b4731f2cc3c082b820afe1484df","sha512":"4c6e726be94e92f2ca4b3c7c51d8126f8b13054e9aebe6d5748192d4d347ed0d900a527c4796ded839da2622666bc24c4d8c3ff8a93e48cd829cc71e8a72cd8b","ssdeep":"","tlshash":"a3d0a7296a05859cc16120e2292fd48f4e700a609c14ab609acfbc044484bd8595d910","size":221,"data":"","first_seen":"2023-03-07T01:23:37Z","last_seen":"2026-04-04T06:23:56.544303Z","times_seen":1508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"md5":"a644795d99999996846881fbb2aecef5","sha1":"b5b8757c3d7512d6e489944643bf85aaf74a7e85","sha256":"b3d38db7725b64e9f09acf60b5aaa16b01f7d18d632b92604b9b43361a5a90e1","sha512":"633936dbcc9bdbe6bf0529ef98049de8d1d6da7a26a86ab87ab480ecffe35593b6923c8100c39275f7ac6a9f7ac6aaac65be2a8ba9d606a263c524e6341df08f","ssdeep":"192://YqoAOdqCSGIiJiof7elrG25Nmf3qmmKHqir5//Tf3eKCSIAwfj+:9KGq5qirxAAQ+","tlshash":"df02942469b31021e12752aa5fdf960c313491037606cc5cb77fdac4af81afd95babb4","size":8862,"data":"","first_seen":"2025-12-11T06:55:09.335534Z","last_seen":"2026-01-16T20:18:37.396739Z","times_seen":251,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/11.0.2/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.121Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /firebasejs/11.0.2/firebase-database.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 48812\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 16:50:10 GMT\r\nexpires: Sun, 20 Dec 2026 16:50:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 304552\r\nlast-modified: Thu, 14 Nov 2024 15:33:18 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":186300,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e657794babf8518324cf992827b35562","sha1":"bcad4ca23c6b698ce50c1e6e3c815e31c946802d","sha256":"611b09f31aa435141d5e6dc721940730e6df53dda798d645d5c587d2c11794f9","sha512":"46b41392d6740ab6954f0010212c24a2a0b13c4cdb0136d3f860f7c5627731c922010364dde8dc153a1c1277050e7c7124faa47d92b521d617b8cee1c05d73ea","ssdeep":"3072:ly5y6XEHy6RJZJwJ/J/JXJgJBJBJ6JJJ4JaJjJeyzAEzDIZWF:8I6c1RHaJxhGz/EnaMJoyzAeDIZC","tlshash":"110419803381b61317f9aaea45328142b33959a97509447cf97c8ce779a198e31bfff4","first_seen":"2025-03-10T18:44:19.836673Z","last_seen":"2026-04-05T12:24:04.10884Z","times_seen":343,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":61,"dns":1,"connect":8,"send":0,"wait":9,"receive":11,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/games/games.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/games/games.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\netag: W/\"1ee8d-19b48024e5e\"\r\nexpires: 0\r\nlast-modified: Mon, 22 Dec 2025 21:41:09 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126605,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (610)","md5":"244151c7ab0450be0a669710d5d2cfe9","sha1":"40058f56ec486dd02a1427c54e40bee1c9edb678","sha256":"6a7483b7b03b7c4ee1872faec28c4ddbef5590f9a3b16216f8539167dfb3f042","sha512":"31ad1224d95de858dd64c3ec36a02d06f387980ec0c5f38f9b298fbc00deb2c0aaab5ee2cb5ed2eafdb55ece8e3f02ff697243abb0218ca820b3914445c41a57","ssdeep":"1536:/G61Qt8J6fBU0vsqku7KRibPyadueAlGTLP2mwFQ1/pL/kGVTKhfz7mD6ohF6dbn:a7jKej3nI09BOTJLJP","tlshash":"adc38d5590b22497068445909ec9eaccfaa416278ead64017d34f03c9fdff9f39a932f","first_seen":"2025-12-22T23:43:48.587691Z","last_seen":"2026-01-15T07:03:35.673924Z","times_seen":145,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/adminabuse.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/adminabuse.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"bdf8-19a66aac287\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:30:58 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48632,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (362)","md5":"07a7b7abdffa35b936858f7674163d0c","sha1":"5faab25d97d659e3bcf6c8c14dc446d95efda2d2","sha256":"86e9ad2cbd70b92cf469e3a7046b244044d5b0ffbf2abda45f5447f2c03f0e3e","sha512":"d64182b21368b98847f6855ced600e6597c138d6558100bfc9f569ebec89dcb4c6a1da0077e86266ae97e38cc118528cacdf46f7ce2992eb02cffc01269657db","ssdeep":"768:Stgk16EIkxSF+bF60aKAMl357XNkq+RbZvKXE:Stga6H+bFNaKAE/2bZvK0","tlshash":"5423b62827f32110d523e17e6baf6608353050177147ce6cbd6e52985fc2f626af6be8","first_seen":"2025-10-18T18:38:15.695008Z","last_seen":"2026-02-12T20:12:17.475555Z","times_seen":250,"resource_available":true,"data":null}},"time_used":115,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/http.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.960Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/http.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"13a8-19a66aac287\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:30:58 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5032,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5c5cf22f34d681d41993f7e5093761a4","sha1":"115fa7fd2b38d0cfb5718fcdb7b3e907b1c5390a","sha256":"c83169cf862e67baca77cf3cd14a629bb84962a7fa22ac053c3a8ffb858c803e","sha512":"0c501c4c1ee87a9775096318b5b3c1469cd51a55083ba18eb20920978ad47b7560801edbe82cfe882b6dace2c85a31d804277f59fc9200f2ac9322356f4fb37a","ssdeep":"96:j2H7pLOfZhgOlaUMsXFW2mrWX7tCuWrtlmtU6VM:j2HNL0ZhplaUMsXFW2mrWX7tCuW5UtM","tlshash":"b3a164ca12e74205a453d4e1afb33b0737745003950ac52e7aed31addf46acbd573698","first_seen":"2025-10-18T18:38:15.768381Z","last_seen":"2026-04-05T12:24:04.05722Z","times_seen":317,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/page-loader-main.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/page-loader-main.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\netag: W/\"602-19a66aac287\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:30:58 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1538,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"110715dccf155c8776f22153a801a6a5","sha1":"f2e6c10456f84502dc0e2a27512c9bc7aa492b09","sha256":"e207f128ce206dbc4beaebeb09407c9065109dce6cd3cbb1d0c5fa685658ef54","sha512":"8638746fc8fd171bff322616ae676f3c0c528bec4aee7c45704d40f04c9460b811deee9e86398a0f3269948fb97a16ef5fbb3759d510bcd5debdee944a3baed5","ssdeep":"","tlshash":"1731f628bdf6d0304067706f06bfea4cb8266103250ae95a3e9c4ac45f85fed9c55ea8","first_seen":"2025-09-09T04:10:34.693206Z","last_seen":"2026-02-12T20:12:17.470576Z","times_seen":282,"resource_available":true,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":330,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 07:02:38 GMT\r\nexpires: Sun, 20 Dec 2026 07:02:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 339804\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-05T14:48:15.082698Z","times_seen":204590,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":61,"dns":0,"connect":0,"send":0,"wait":11,"receive":1,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.563Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7824\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Dec 2025 19:08:46 GMT\r\nexpires: Sat, 19 Dec 2026 19:08:46 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:56 GMT\r\ncontent-type: font/woff2\r\nage: 382636\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7824,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7824, version 1.0","md5":"af4d371a10271dafeb343f1eace762bc","sha1":"6d11d743bc3cfb169d70bc86450f18351dc1a905","sha256":"60bf0aba6526436f3930c58c12047687fbb6bff4dd180cce4613458ed3439ea2","sha512":"98e1d4804a31f0ec40307bb02d7af0e25e1a01f2d0f69676cd55f97f64a8d50ecfd5be05525956c4a80bf0d98810badbb08acb2927cd78963bcdde9f96e25ba1","ssdeep":"192:SvrCMV0T6yUN1NfKPtAqGFNL2kshO5YwMg9eSnUK:SvV0T6pNzSPtCrhsCYwMqeSnUK","tlshash":"44f1ae6ff6ea226ff944537dbc50108431224f92b94f11b61d2b126a77e87c8620b2a9","first_seen":"2023-04-06T18:33:44Z","last_seen":"2026-04-05T15:00:41.600585Z","times_seen":21407,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":44,"dns":2,"connect":9,"send":0,"wait":16,"receive":1,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/ultraviolet/register-sw.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.950Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /ultraviolet/register-sw.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"3f5-19ad5841fac\"\r\nexpires: 0\r\nlast-modified: Sun, 30 Nov 2025 16:06:37 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1013,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"00013bdfd98bb3ea023c955ddd1eb50e","sha1":"d0e0b2e089d680ddc666f794b54341eb76c7fda4","sha256":"e14f785c0472d90e635d642e0e2b78053f60913859b26f111a96ee8c0fe8dd85","sha512":"d307d5f1c82ef055486d62c2fbc8bc0d77ac90b1fb35a7116c3f6f7ab4775ee52475efd9e25700bf91c322ad12da7d229357cb63a3b44a09205bacd18677e4b6","ssdeep":"","tlshash":"2811ce19857a5a33cbe379bdec1b0110622bc0197495cd51bbfe52002f8777c666b4a5","first_seen":"2025-12-01T00:51:41.586346Z","last_seen":"2026-01-25T03:35:21.578545Z","times_seen":263,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/particles.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/particles.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"1c96-19a6a73e797\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 21:09:32 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7318,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"23a4e2927e6179f9a602597ed5b239fa","sha1":"8e55571ddb18a9e864ea4d35a67347ab1d4bc074","sha256":"fb699cd2921111df477108e68483942a288def0a3eb4b708866c992521850107","sha512":"e2597420d9692b3f433d6d5c6a55291d1fa6dbc7fd33cb17e2badcbc5b8c3119d89921320c77093cc41154d045496fc8936f5c4cae9a8cdcf18d8c061b4febac","ssdeep":"192:Zl20q8LSyIIGtXOtOQppuAnAsHClugt+wJeTE2LZoDrMG:2TIGtXOtOQppuAnAsHCluK+TTPaDH","tlshash":"15e1c11d5bff1521e263716d1fafa385a772800b1d46c92c786ca2d4cfb1a210a69f7c","first_seen":"2025-11-20T22:40:22.238843Z","last_seen":"2026-02-24T20:32:59.504094Z","times_seen":298,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/11.0.2/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /firebasejs/11.0.2/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 22671\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 10:58:09 GMT\r\nexpires: Sun, 20 Dec 2026 10:58:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 325673\r\nlast-modified: Thu, 14 Nov 2024 15:32:42 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100754,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"f9a82e4c1c1b2f37677714bafb67571c","sha1":"d0e6f3d0d890aef150d297734fa9ad143a4526c7","sha256":"c69080e34624183023d3227e3c4fb157e67cc6136ceb397ffb53fc3ba0dbe0f9","sha512":"ba261464c966aed04f90cfa2fa9d3347f6bc74923aed4d4cd31d98d5172706ceb2c75ee367b1d8eaef48e045d75922be3ef03e8375db1c4239c576767d81cf0c","ssdeep":"3072:RiSxYKRN5xRylyrkMVl1B0LN/l1sa6tZcSF5Ouao:RiS6KRN5xR5rN0LN/l1sa6tZcSFMuao","tlshash":"3da3952d2bf711330aa354bc2f1f6086b32dd11b261ada94789d83e48f4653946f6fe4","first_seen":"2024-12-03T13:13:08.303607Z","last_seen":"2026-04-05T12:24:04.012964Z","times_seen":397,"resource_available":true,"data":null}},"time_used":156,"timings":{"blocked":67,"dns":4,"connect":21,"send":0,"wait":19,"receive":2,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 21:59:25 GMT\r\nexpires: Thu, 17 Dec 2026 21:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 545197\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-05T14:38:59.221005Z","times_seen":296285,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":48,"dns":3,"connect":8,"send":0,"wait":14,"receive":1,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/scram/scramjet.all.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /scram/scramjet.all.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\netag: W/\"2b0d8-19abdcfb883\"\r\nexpires: 0\r\nlast-modified: Wed, 26 Nov 2025 01:38:18 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":176344,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (35617)","md5":"e15ace2a34bc4674313ae381add7e6a4","sha1":"c1b9b70b2450dd8cf3410c1c888880a2d4f04e91","sha256":"9667421ec65913072a13cf07d584ea0c88d7f393683023b889ae1791ecd7bb4d","sha512":"5e16dcda4c6e5a282cf9b28162347d377c18d69b0eecf78d47197176704a5b620d3ad64f100f857e232060990602fe92c144a35d8b90eabf6d723b67085cae82","ssdeep":"3072:QLHmIdZtzQNg/kMBaNpgSV1EMHC+ybkM2pS6wgEuRi10oDDp6:QLtQSBa5oqStgEuQ10U6","tlshash":"8f044c9236b0773787db62a850ab1600b23d11795409807cb5bcdcea5ba4a4f633ff79","first_seen":"2025-12-17T19:36:38.580296Z","last_seen":"2026-01-25T03:35:21.605012Z","times_seen":107,"resource_available":false,"data":null}},"time_used":99,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"user_akbkyowd9geqr98","sensor_type":"yara","title":"Private YARA rules","description":"Private YARA rules","scan_date":"2025-12-24","alert":"Hunting_JS_WebAssembly","trigger":"wwwen.api.bg.geek.nz/scram/scramjet.all.js","verdict":"audit","severity":"audit","comment":"","link":"","meta":{"description":"Looking for manual construction of JS wasmCode used in exploits","rule":"Hunting_JS_WebAssembly"},"detection_meta":{"user_id":"akbkyowd9geqr98","detection_id":"01K9VTTZ58QH7V4PSKSDDP3N4H","visibility":"private"}}],"urlquery":null}},{"url":{"schema":"wss","addr":"admin-ab-1a964-default-rtdb.firebaseio.com/.ws?v=5\u0026p=1:790117213809:web:369d803d764e12b4c85dd0","fqdn":"admin-ab-1a964-default-rtdb.firebaseio.com","domain":"firebaseio.com","tld":"com"},"ip":{"addr":"35.201.97.85","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us-central1.firebasedatabase.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 18:57:08 GMT","end":"Fri, 06 Feb 2026 18:57:07 GMT"},"fingerprint":{"sha1":"06:E4:89:69:52:DC:4A:88:49:E4:9A:19:66:79:97:BD:4A:0A:7C:3F","sha256":"B3:CB:4A:49:C3:DA:64:79:A4:39:BF:C3:A6:36:2C:97:22:04:95:F0:9D:5D:A6:FF:98:33:DE:19:C3:D5:D4:53"}}},"request":{"raw":"GET /.ws?v=5\u0026p=1:790117213809:web:369d803d764e12b4c85dd0 HTTP/1.1\r\nHost: admin-ab-1a964-default-rtdb.firebaseio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Z3ieAGxxdSszQZfnIKu9mg==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 24 Dec 2025 05:26:03 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: DoP9f7ZrKL/dG4HFDjJUm5KeTIM=\r\nStrict-Transport-Security: max-age=31556926; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":34,"send":0,"wait":152,"receive":0,"ssl":282},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/particles.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.059Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/particles.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:03 GMT\r\netag: W/\"1c96-19a6a73e797\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 21:09:32 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7318,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"23a4e2927e6179f9a602597ed5b239fa","sha1":"8e55571ddb18a9e864ea4d35a67347ab1d4bc074","sha256":"fb699cd2921111df477108e68483942a288def0a3eb4b708866c992521850107","sha512":"e2597420d9692b3f433d6d5c6a55291d1fa6dbc7fd33cb17e2badcbc5b8c3119d89921320c77093cc41154d045496fc8936f5c4cae9a8cdcf18d8c061b4febac","ssdeep":"192:Zl20q8LSyIIGtXOtOQppuAnAsHClugt+wJeTE2LZoDrMG:2TIGtXOtOQppuAnAsHCluK+TTPaDH","tlshash":"15e1c11d5bff1521e263716d1fafa385a772800b1d46c92c786ca2d4cfb1a210a69f7c","first_seen":"2025-11-20T22:40:22.238843Z","last_seen":"2026-02-24T20:32:59.504094Z","times_seen":298,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh7-rt.googleusercontent.com/formsz/AN7BsVDFTc8eYK82pfJHrsqfJET4Zl5h9wv6Cs-tp8-mGeroqGCyp_WBsxqe5C790smSSQsr8c4nl87PhFIvqd9DmDuubqqwAyzZpN_UM7g2R9-dVyXh10br3LL_h7cvE1vhkVpfS91F_0P7Ah8ZyBCsuoGr__cv5nOkYTn9?key=yj4V8pHW144VjA9YlEbf1Q","fqdn":"lh7-rt.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.454Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:52:44 GMT","end":"Wed, 25 Feb 2026 15:52:43 GMT"},"fingerprint":{"sha1":"6A:F0:34:52:EF:16:19:7F:E7:B8:2A:C3:D8:EC:36:27:5F:48:61:31","sha256":"15:AF:19:35:54:71:85:51:A2:01:3A:93:C7:2E:1A:DF:0B:24:9A:C4:A8:2A:59:2F:4B:82:64:81:BB:74:37:D8"}}},"request":{"raw":"GET /formsz/AN7BsVDFTc8eYK82pfJHrsqfJET4Zl5h9wv6Cs-tp8-mGeroqGCyp_WBsxqe5C790smSSQsr8c4nl87PhFIvqd9DmDuubqqwAyzZpN_UM7g2R9-dVyXh10br3LL_h7cvE1vhkVpfS91F_0P7Ah8ZyBCsuoGr__cv5nOkYTn9?key=yj4V8pHW144VjA9YlEbf1Q HTTP/1.1\r\nHost: lh7-rt.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v0\"\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: private, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 24 Dec 2025 05:26:03 GMT\r\nserver: fife\r\ncontent-length: 14566\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14566,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"cb004e27c2296dc2bcb0dd61159c9cb9","sha1":"268b76876b8cd3e949cb4e89a39b3f272a2c6d57","sha256":"39b6c8f2c22e44ff279948884215176b579e5d8d96282c652c79cd21ace47922","sha512":"90d561d5e97abb5e3ab26db964f419ed2f9291669158509b85de69ac66e8a6456322550f8ed983561cb65c51b82fb73d5ffe26238bde5069e634995d2fbb1c91","ssdeep":"384:+3xf1gSoLkNuGAizYFRMlylROMR354FTox/InY7cAkOGP:+Bf1glGjz6RcyOMZ54iIQlGP","tlshash":"0562bfe9820dc1c8831c8cafdab3d0de63d651fdd2512eda8e351004c0b6c226a7d9ed","first_seen":"2025-08-04T10:22:24.535727Z","last_seen":"2026-04-05T12:24:04.070259Z","times_seen":324,"resource_available":false,"data":null}},"time_used":372,"timings":{"blocked":85,"dns":55,"connect":23,"send":0,"wait":139,"receive":3,"ssl":62},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-24T05:26:01.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"f168-19b3c99f5ec\"\r\nexpires: 0\r\nlast-modified: Sat, 20 Dec 2025 16:31:21 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]}],"data":{"size":61800,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (18484)","md5":"81e0a27b4f80fe850bf89de470486e26","sha1":"983fc21e0ffbea78285f5098c683de2bb7adadc1","sha256":"2a16f1b971cf275a1b182488cfa87ed54f0edb809b703d50d5bd64c33ba69b6d","sha512":"c5abc380ef7a61acec7d34ac14b672018a4e466a6f7781627e735451642244732b56a0ceed13b56c4cbf27392ee31ff9ceaa523523454b7a36f1352400fceaf1","ssdeep":"768:A0aP66nQL7EbxalZjmcLtVKfFjo7NkzN/UaguQL8xdl7x8K5EeP:naP66nQL7EbgrtOjoazN/UadQLg","tlshash":"c453a5a445f3250324bfc4fa6be2d68d376884034946ccec7bce52a48f4abe6c5a57c5","first_seen":"2025-12-20T16:38:10.707133Z","last_seen":"2026-01-07T20:13:09.256037Z","times_seen":144,"resource_available":false,"data":null}},"time_used":530,"timings":{"blocked":214,"dns":3,"connect":94,"send":0,"wait":102,"receive":0,"ssl":113},"alerts":{"ids":null,"analyzer":[{"sensor_name":"clamav","sensor_type":"antivirus","title":"ClamAV","description":"ClamAV","scan_date":"2025-12-24","alert":"Win.Trojan.Crypt-291","trigger":"wwwen.api.bg.geek.nz/","verdict":"malicious","severity":"medium","comment":"","link":"https://www.clamav.net/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.936Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Dec 2025 05:26:02 GMT\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10793,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"80df91dcfc8560910aca9bdd91a1e7d0","sha1":"2949de02fc38469258987e9b847a70a9cff1a21c","sha256":"0552ee50f635535685ba2713af81fa081791d7705baa9cdb3c5d1f463aa0a228","sha512":"65cbf1a5ff0d2e099211a39ed5128c8a95587b42dc854f30ffec1fc82e658911808709e5300319b495ec69bed73670e5c91404feb94fda4e7315b9b79ec62402","ssdeep":"192:+pspOlpXHaedhHdPgKQcXr3lVwa3RzJ/apsqiazk:+mkX","tlshash":"aa22add1087be114ab835cc123ce7d36ee1e9255b850e5786bfd0c98adabc254372b2d","first_seen":"2025-09-17T11:27:36.910597Z","last_seen":"2026-04-05T12:53:54.79244Z","times_seen":4640,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":157,"dns":1,"connect":21,"send":0,"wait":30,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/ultraviolet/uv/uv.config.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.947Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /ultraviolet/uv/uv.config.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"14a-19affee2729\"\r\nexpires: 0\r\nlast-modified: Mon, 08 Dec 2025 21:46:29 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":330,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"d851cfb22c704fb1a71a1a175b35eabd","sha1":"e6fde3e134835f81602ec27929590b83b4f62e55","sha256":"256b156d3d886cd12b7a0ad0374a646b0adb7671eebab7b3d9fece6e17c58b89","sha512":"391667df6c586f5544f5c5fa6c9a98163f54f3c932df2b2eb830646a408e44c693522519ef1bea14684112d40e7b9fb5cb16823830c85a2e635ae4af900970b4","ssdeep":"","tlshash":"f3e0268f4dd94d875f30c11442a20c34c749733735049026fe3cd3980f34a50219852c","first_seen":"2025-12-10T20:51:03.802702Z","last_seen":"2026-01-25T03:35:21.603889Z","times_seen":255,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/scramjet-preload.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/scramjet-preload.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\netag: W/\"9af-19ae5f18ad3\"\r\nexpires: 0\r\nlast-modified: Wed, 03 Dec 2025 20:40:03 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2479,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"158b7ba6923cdc6987f6ed234df9dd2a","sha1":"3cb07832557f2c59bb925afbdd2308da041aaa43","sha256":"5303aad48561f80b727c4da8bb74fb07ca6c0750a5dd92feb3bdbf9edb9febb4","sha512":"485aefda667f1cd931760273a39a4b57c39b9c4a663782dcf37f101e7dce0403a6e5ebd2fa0f044f8e2303badd11c43c096b7f902f0f9ff3722300ffdf69e6bf","ssdeep":"","tlshash":"3251010a12b3113901737afdde6f8111326340833044ea517b5da61cef5b7bea2b6be5","first_seen":"2025-12-03T23:45:14.025237Z","last_seen":"2026-01-23T18:35:03.597939Z","times_seen":260,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"void-ann-default-rtdb.firebaseio.com/.ws?v=5\u0026p=1:323948351263:web:239c326fbe0e1c25f4aa2a","fqdn":"void-ann-default-rtdb.firebaseio.com","domain":"firebaseio.com","tld":"com"},"ip":{"addr":"34.120.206.254","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.749Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us-central1.firebasedatabase.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 18:57:08 GMT","end":"Fri, 06 Feb 2026 18:57:07 GMT"},"fingerprint":{"sha1":"06:E4:89:69:52:DC:4A:88:49:E4:9A:19:66:79:97:BD:4A:0A:7C:3F","sha256":"B3:CB:4A:49:C3:DA:64:79:A4:39:BF:C3:A6:36:2C:97:22:04:95:F0:9D:5D:A6:FF:98:33:DE:19:C3:D5:D4:53"}}},"request":{"raw":"GET /.ws?v=5\u0026p=1:323948351263:web:239c326fbe0e1c25f4aa2a HTTP/1.1\r\nHost: void-ann-default-rtdb.firebaseio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: OTUfEEjUCC0bICv/NPRTdA==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 24 Dec 2025 05:26:03 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: Yf90zkCAkhNZDlVjYuezwPIUEIM=\r\nStrict-Transport-Security: max-age=31556926; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":1,"connect":29,"send":0,"wait":134,"receive":0,"ssl":264},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.5.0/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.448Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /firebasejs/12.5.0/firebase-database.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 50883\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 23:40:55 GMT\r\nexpires: Sun, 20 Dec 2026 23:40:55 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 30 Oct 2025 15:53:05 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nage: 279908\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":191543,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"02904152d3c28593a13bcf7a431db7f9","sha1":"5d0ee803da86c06d228cbaebeda485a0f522a33f","sha256":"c3eae2c5e526c62112ade0f9edba2dc34f36ac7a0dc352bd7158e5322a878353","sha512":"3e7090861bd96a521071769a63e09fc98f85a75cda30b0dd5344b533831a3602eef3681c95322fdaf27544ef43b142b00687f4a3f852c941fc973c6fdf534bb6","ssdeep":"3072:6sLOPfSdWAI6aJZJwJ/JcJEJgJBJBJ4JJJ4JlJjJPGoAZr/p20:HLQS/raHaJK6Gz/anaTJBGoAl/p20","tlshash":"cd141a813381b62317f96aea45328142b33959a87509447cf97c8ce779a198d32bfff4","first_seen":"2025-11-16T04:42:32.577155Z","last_seen":"2026-02-12T20:12:17.494542Z","times_seen":120,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh7-rt.googleusercontent.com/formsz/AN7BsVBiDSZGgAgxhRnqUFCY_8TzussrTcI-a0NpS7Rmci9QIZT3Ghix0lhl_jbjQu3y5v5WiDpP7HZx955NSv9aw6Pt2HKdYFVc4cMgERxUnEASRmhDt6wAu5HNzZhEqR7a4dmtovtWCXyZPUTAOO9yHCVC07beWMC88PI_?key=yj4V8pHW144VjA9YlEbf1Q","fqdn":"lh7-rt.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:52:44 GMT","end":"Wed, 25 Feb 2026 15:52:43 GMT"},"fingerprint":{"sha1":"6A:F0:34:52:EF:16:19:7F:E7:B8:2A:C3:D8:EC:36:27:5F:48:61:31","sha256":"15:AF:19:35:54:71:85:51:A2:01:3A:93:C7:2E:1A:DF:0B:24:9A:C4:A8:2A:59:2F:4B:82:64:81:BB:74:37:D8"}}},"request":{"raw":"GET /formsz/AN7BsVBiDSZGgAgxhRnqUFCY_8TzussrTcI-a0NpS7Rmci9QIZT3Ghix0lhl_jbjQu3y5v5WiDpP7HZx955NSv9aw6Pt2HKdYFVc4cMgERxUnEASRmhDt6wAu5HNzZhEqR7a4dmtovtWCXyZPUTAOO9yHCVC07beWMC88PI_?key=yj4V8pHW144VjA9YlEbf1Q HTTP/1.1\r\nHost: lh7-rt.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v0\"\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: private, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 24 Dec 2025 05:26:03 GMT\r\nserver: fife\r\ncontent-length: 158755\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":158755,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1600 x 1600, 8-bit/color RGBA, non-interlaced","md5":"91c523d97b94e45caa6caf16110e87d7","sha1":"2704497ce405acf4ab987cd8057ad4d2762fe3e9","sha256":"152669b1b999ac2f39d0846a39bdfbef9922094275414e37b3fffd71f899af2c","sha512":"2366fbc1e5445d5662bf1393847acddf71d4033a203dbfe3486f765c895ded6f188ca2267fc97295b3342a2d4c5bcfb74a7f8bcaf6fa8b0022029ffb36944d89","ssdeep":"3072:bq2Ib+e+fLgC8FTPFYh+c2mtmx/9zuzvW2C3zSXywNAxbUeub9s4ZOuA+ftPr4G6:bqd6DcFTPFPSogS2EuiwNMboBs4ZOuzu","tlshash":"ddf3f246d08bcceade7f083084d71f0f27ab49274114ae30f2b6d569fe167267451aea","first_seen":"2025-08-04T10:22:24.506551Z","last_seen":"2026-01-08T23:16:47.337982Z","times_seen":259,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":2,"connect":7,"send":0,"wait":143,"receive":252,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/adsence-tracking.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.942Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/adsence-tracking.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"dc-19a66aac287\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:30:58 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":220,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"33ad651bcaa5274e61864a735743f94e","sha1":"38fbad1ef61747a60b446ed4d7701e232712ed3d","sha256":"0b150705f64b0a0332235d0b72a27c9199bf0d59e1259022a2c2740936799e0e","sha512":"b872d74818fc1b48daedbd9c555b0e2295d2f47db9bb1eb0dbcd8908e9ff87ad424677125a3d46b48f2d4a48c1678f5345c48cfeef4866140a4b3fc145fd4748","ssdeep":"","tlshash":"b1d023b315228f131f70983443b3bc0deaab1323bdeec0c114c004908bc2f7605682e0","first_seen":"2025-08-04T10:22:24.519722Z","last_seen":"2026-04-05T12:24:04.113451Z","times_seen":325,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-814Y2X3KSF","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.738Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-814Y2X3KSF HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\nexpires: Wed, 24 Dec 2025 05:26:02 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 143139\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433250,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"9668846056d43a2ebcc7ea5d5e935982","sha1":"54f6b6ceec13d95216a7d7da31b7337b1eeb92e7","sha256":"32ed9796134d07c637aa0118e1c1c264a89c31c805d26cf4bb721ce165a76309","sha512":"0c0e733616790d9299468ddc2ff573633a6fffd3cc0fd30562de8c80eb9b50a8c47a10838d93269ab0c1e5d46a979575c8006ee7c83fdf4513056f276cbecc5c","ssdeep":"6144:xiIe7ma2bulKY/1u99xHDmHYmyBFzvnsyRO6jJWoNPad4FpC1xY:tC8bu7/1mbrnsy39WbMpb","tlshash":"cc941ace73c674269396e078503f118ba57b29e2b45cc896f189cce42d74a9a4237f7c","first_seen":"2025-12-23T13:29:24.011255Z","last_seen":"2025-12-24T07:57:49.146953Z","times_seen":13,"resource_available":true,"data":null}},"time_used":329,"timings":{"blocked":117,"dns":0,"connect":29,"send":0,"wait":33,"receive":61,"ssl":76},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/favicon.ico","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:03 GMT\r\netag: W/\"2e5d-19a66aac283\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:30:58 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]}],"data":{"size":11869,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"5e6c6f0ece6fdc4b8b204bd1119dbe88","sha1":"e8db016be696da9560f6ce3cba737f0b6972fb0d","sha256":"c63be90bc83f881075e32f19152764f89809b7a308fe81632389a0a0812f4102","sha512":"0a54d1f02f7ba46b68a553418f6a75c4d2080d44358586bef35e05cddda809d0d4ddc17cfbfe0657cc7b4dd086f006e117650faf839e0a961fdbe947465441f3","ssdeep":"192:o4mhHEwxyBaTI4MlOxFKIZdPWdmwGwdjOyJ4ctxn:ozz5cTn","tlshash":"793213594ad31318a01391ee5bf753183b78d1039807ec5c379f72e49f8e6cad9a3a49","first_seen":"2025-10-18T18:38:15.648664Z","last_seen":"2026-01-07T20:13:09.261453Z","times_seen":230,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/footer/footer.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.054Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/footer/footer.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:03 GMT\r\netag: W/\"6186-19b3caef81d\"\r\nexpires: 0\r\nlast-modified: Sat, 20 Dec 2025 16:54:18 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24966,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (821)","md5":"9bfc860b29e20f2217858e85ca610f7e","sha1":"c8cc7584df1a355dd575ca94bb829a77ba995653","sha256":"b655c55023be0fa8fee2bbd2272e6bad1c920c311357090c9bf1dbec981ba5c2","sha512":"93f78b66293ef7c91492545f4c2b10b0fa09bbb33449af7ae919ad36996a8908f43c06fda9828570993d86a8011e0428ec67afa3edc260b4a514cd825763329a","ssdeep":"192:zjU/CZOJpr9sEb+dXR7yZycYR1dFBDJ00ZTrFLSbgrS9IBQHt7vfLJxaC8vwyTFo:PUc8Kf7fpva8+dD2gmEBqrkd","tlshash":"85b2556b9ad7160c692790ac8fe755553379d003a10acc3d7fde22794f0e1cae872b89","first_seen":"2025-12-20T23:35:11.11766Z","last_seen":"2026-01-08T23:16:47.336864Z","times_seen":151,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.5.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /firebasejs/12.5.0/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 23204\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 11:03:31 GMT\r\nexpires: Sun, 20 Dec 2026 11:03:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 325352\r\nlast-modified: Thu, 30 Oct 2025 15:52:36 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103065,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"686623729c8e9d3047d18ad79c4a23b9","sha1":"bcbf32c366d7f22b6aa7a07cb6d41c7fb4bfb760","sha256":"4a168c67d315dad304efe9122083c1d748c194070d5d80df67a314665e1b1875","sha512":"ec566a448653c226782804988349f34d336534507d1d200bb8774ea6798adc07ee3d26c7483990ab8e55f1acee1f072ca17172e08527e3e572acc43e1dcc30a4","ssdeep":"3072:MHSxYKRntxRYl2rkMVl1BqLN/D3yaxt30Q7urHkp:MHS6KRntxRPrNqLN/D3yaxt30Q7gHkp","tlshash":"a3a3842d2be7113306a354bc2f1f6086b32dd11b261ada94789d83e48f8653d46f6fe4","first_seen":"2025-11-05T06:51:35.970429Z","last_seen":"2026-02-12T20:12:17.492864Z","times_seen":122,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/apps/apps.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/apps/apps.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\netag: W/\"d5a-19ac7b749af\"\r\nexpires: 0\r\nlast-modified: Thu, 27 Nov 2025 23:47:49 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3418,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"3ebc1198ba183882377f9b9d125cb991","sha1":"c17e9b057a8ad55d3ef97d100313734ea60496c0","sha256":"1da78c080206cba172d19d790d94c5c60a9e96e7e7b64b2683e76db7399262cf","sha512":"ee7eb3920db929bc763fee63fdd1003f2381a4c4011f92ffef5a337b1e18f293b65b86abdbcf756517a38a22f149460ac543260cc031de66e3fd7e688211305b","ssdeep":"","tlshash":"266183a3042040295b0891c4f9c552ddff8f46bb9ca56006ba38546c6fd67ff31a63bd","first_seen":"2025-12-01T00:51:41.56894Z","last_seen":"2026-02-07T17:04:55.85246Z","times_seen":264,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/save-code.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/save-code.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\netag: W/\"2ed7-19a7d09c9fc\"\r\nexpires: 0\r\nlast-modified: Thu, 13 Nov 2025 11:46:24 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11991,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"8b77fc7b4e6d013e4cf03c3d3a6f2029","sha1":"05641d2c7d58be703d932e447301783c67ce46dd","sha256":"c38e17d3c4c0359acb101de8789403f06d053472f29c942258795d2b3a012a07","sha512":"3d4886132dfd8c7676ed163831f98865194cff0fee2ecac2a230b77551db2ee94a3f6f729ebd442e76194b370a57ed1d6a747f2df6ff280e9ced755c76bb0f67","ssdeep":"192:yabMrxt61KiI83M6bicyxC6V86PZzDjFw2VyqRfp3B0rF4tnfWiMskS9nRlHem:tjyPf4Y3Um","tlshash":"7c32f14b65f72534853bb0beab0ba5016135b0073808cee4bf5ca3541fd6728bae76d9","first_seen":"2025-11-20T22:40:22.265216Z","last_seen":"2026-01-07T20:13:09.25721Z","times_seen":241,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@latest","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /lucide@latest HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 53\r\ncf-ray: 9b2dae761ac776ef-OSL\r\nlocation: /lucide@0.562.0/dist/umd/lucide.min.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":386702,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":5,"dns":0,"connect":1,"send":0,"wait":38,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/ga-tracking.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/ga-tracking.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"47b-19a66aac287\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:30:58 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1147,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"dcc66623f691144cebae5587793e2ba0","sha1":"82c280211152915c86f869cf049b952b4fbc45fd","sha256":"cedd707303327a2a9f8222a0f65e86573c3d19f15331240644a9d0346b31dcec","sha512":"11e49719f5493e6db10f0e61586035ba044f75835da8588e7f91004520a700acdb5f8431ba262c7b38ff0fefd908ac58eb1ac5035b9230ba90c6ea538823b9e0","ssdeep":"","tlshash":"1a21c96d1c7388318b7760562b7fd389363231037451ea423eacc604af21bd74e10d64","first_seen":"2025-08-04T10:22:24.518029Z","last_seen":"2026-01-25T03:35:21.588792Z","times_seen":279,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/ultraviolet/uv/uv.bundle.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.946Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /ultraviolet/uv/uv.bundle.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"ba4b4-19abcb2c03a\"\r\nexpires: 0\r\nlast-modified: Tue, 25 Nov 2025 20:27:02 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":763060,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (64030), with no line terminators","md5":"1c8bb63ceee3d6ad8acbf0f673033385","sha1":"1799c7494dcb8964795c5c603e2301cffe5cf4fc","sha256":"3275cafdef6a9011f271cabfe986b10b15c74db013059ce412e3b97ef6487246","sha512":"408c34d83674bd9d120ac4d6d2acd29e4f2aa8fed7056f3732cdb80174fc2b72b4fbbecf53187ab91d6f534ba7957ee0fa897cb130d29a9ce2ab662208f37185","ssdeep":"12288:4ygCKF/+WpQ74oaCfOcB5y979xTDpW24R:4yOF/+WpQ74oaCfx5y979xTDpW24R","tlshash":"0ff40bf33382a5b38bd680df9a562291a235411af4cc580dfafcc4db263556d1237e7a","first_seen":"2025-12-24T05:26:34.364183Z","last_seen":"2025-12-24T05:26:34.364183Z","times_seen":1,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/popup-listener.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.957Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /popup-listener.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"1a6d-19a66ab0e6f\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:31:17 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6765,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"9195d932df921639d18f8198ae8503bc","sha1":"abe50296d7b4d131481eb18a96938fe237d62009","sha256":"e8481a1ead8b50b6c0cc501d8dad8db51ed3e5ffb576e4446577c302dff9d463","sha512":"05037f121d81066e13fd9c2bcedf28a9a81e397fc09ae0947f2f687ab2eef8a76b81cff0b6096ad5fc1cb2922f898040663292f380489dfa4bc6bd48b3f385f3","ssdeep":"192:Eake2yai+ay2i5wtiv/O+y8SO5kf7NCrdU/OeG4sXnKPe4wIAxLm:EsAhmAY","tlshash":"64d17344a5a30708542300ee5be7960d3774a1036e06ec1d77ff82a4bfaa6dee1f3294","first_seen":"2025-10-18T18:38:15.691263Z","last_seen":"2026-04-05T12:24:03.989988Z","times_seen":318,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/settings.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/settings.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:03 GMT\r\netag: W/\"f9c-19b4e099af6\"\r\nexpires: 0\r\nlast-modified: Wed, 24 Dec 2025 01:46:50 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3996,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (333)","md5":"27e3892d7ee000c4817ca90582bb30b2","sha1":"ffa843083b7649f6f6ff4023fe3067a36a73f048","sha256":"1e3787486c33cc258736e8b475c2ae762149cbc3aae8e324a62f7f18b8217bd8","sha512":"446469e35f38200618052b412d2ae024062b2fb8621ec32544478793c861399a7319ca3668297fe38ea3d7de0667f781e8782af43164f80445935c99dce9e0a2","ssdeep":"","tlshash":"f881613a25a300356717b16d569fc241f133e41bbd69ce197a4e2d58aff052882e3b9c","first_seen":"2025-12-24T01:53:19.258902Z","last_seen":"2025-12-27T02:55:32.900627Z","times_seen":38,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/user-tracking.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.266Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/user-tracking.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:03 GMT\r\netag: W/\"3d7e-19b4e1ea811\"\r\nexpires: 0\r\nlast-modified: Wed, 24 Dec 2025 02:09:50 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15742,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ab7c8909b2815c0d3325db0c05645ab6","sha1":"bb8b9cef2614b1da069bf6138ef30409be06b13e","sha256":"0311b4cca7b231ea8ed319abcd33e4efaac542dfc0eea26c372550ddfd09698f","sha512":"14d033564ac1a3a628ff8ea18830d2820055d70319b2a2a3b6bd3b6c8397983d237b55c672a8dff00055c039b459e6290d678f3fd24acf21cc9903483681cdb4","ssdeep":"192:vyQfQXivRQe7TySGiyxcwZMTFHkSG9xiLpwq3p5XlNN5Hy1q3xFF8wKEoo+hgr2C:vy0yMZNGLi+nw+Vhgr2OmyUMki","tlshash":"3e62b65896b32130500355e9d75b6a1a7e31b013264bdcf93b5c8a905fc2f22b2d6fae","first_seen":"2025-12-24T04:53:22.649897Z","last_seen":"2026-01-25T03:35:21.592525Z","times_seen":115,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/local-game-encoder.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/local-game-encoder.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:01 GMT\r\netag: W/\"66e-19a66aac287\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:30:58 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1646,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"7621c2fd7f4c7df19eab674336d4d690","sha1":"f7321053e7b2d3c41ea401894814c430dccb0c37","sha256":"ad83c5a37ed8cf2f7dbd99f1c46f9563929ddbd7317b61310c3aaf7d333bbbfb","sha512":"132fc56f4b8ee49b3a4ebc08dd8390037c545c174b140de80d3c4cf2a27dc44a67b884db6eb74db6b403d740778b99116815182607bb0b97dec8d0529742d9f3","ssdeep":"","tlshash":"9231675427fb1686456663b983470221e13ca58f160cfec8bd9c538e2f3d71c98e3b64","first_seen":"2025-09-09T04:10:34.688891Z","last_seen":"2026-02-24T20:32:59.498588Z","times_seen":305,"resource_available":true,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/chrome-mobile-warning.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/chrome-mobile-warning.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\netag: W/\"15e3-19ad58c2fb6\"\r\nexpires: 0\r\nlast-modified: Sun, 30 Nov 2025 16:15:25 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5603,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6c57eedca6bce2cd46ec885fd13b25f4","sha1":"dcb15c7be270250095e79f0f9dd88751e74b3402","sha256":"ace20d7024f7972b7116cb40e434cfefb545859532e96191fa88c68d03aad797","sha512":"8f5ffbe08762bcd9265b577d1ab875bbfa9b7e377583ffd0be2efd9e56a469c07398e612e752132a1da949eaea1c7d58afb8927d046362cda2c4669dcdd5c818","ssdeep":"96:u2o5tAMoTKqnJKpOKeAjZ5SpgLvnJCJytTs9fH:u9AMoTKqnJKp/eAjZ5Spix9a","tlshash":"83c1432aa2eb0205a45390e16f7353493fb49047d40ac52d7acf67a4cf4eac5a4b7f6c","first_seen":"2025-12-01T00:51:41.574007Z","last_seen":"2026-02-24T20:32:59.504897Z","times_seen":291,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/lucide@0.562.0/dist/umd/lucide.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 07:56:49 GMT","end":"Sat, 21 Mar 2026 08:56:47 GMT"},"fingerprint":{"sha1":"26:50:C2:17:0A:FF:C4:D7:84:D7:E7:28:A7:58:4B:CD:0A:7B:2A:79","sha256":"93:15:E6:80:68:21:48:A6:B0:14:8D:F2:4E:A3:50:33:6C:01:5B:84:8D:F6:75:2E:09:A4:79:DD:37:13:FA:B0"}}},"request":{"raw":"GET /lucide@0.562.0/dist/umd/lucide.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-encoding: gzip\r\ncf-ray: 9b2dae766b1b76ef-OSL\r\ncf-cache-status: HIT\r\naccess-control-allow-origin: *\r\nage: 239276\r\ncache-control: public, max-age=31536000\r\nexpires: Thu, 24 Dec 2026 05:26:01 GMT\r\nlast-modified: Thu, 18 Dec 2025 10:46:43 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Accept-Encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:U0gT0dovTUVQOD1dsIea7bL3TC0LiVGt4nfovK6m31I=:\r\nfly-request-id: 01KCRH3DM9TE44Y9N2JDNJ77PS-fra\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}],"data":{"size":386702,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65368)","md5":"441b79bece6ad35af7520e9b2c2bb59a","sha1":"77776f954a28ab88034a26b578a34855261a2c55","sha256":"534813d1da2f4d4550383d5db0879aedb2f74c2d0b8951ade277e8bcaea6df52","sha512":"ef93a7f2ee645a52d3d4654117d5b8494efbc5c3bde10668c9bdbd0cc139261074a7b9587e72f4f28b3d6fe422ca27542aec33fcaa468f655d2cae6a6566ebdc","ssdeep":"3072:LQD0P92aoIb4HLBl+o/es1zreclzsVO/3fPO4LHi3aLyjqLAVX2NDQXNvFzVuop1:MwVpM/eULAINDQdvFBuopyG","tlshash":"b18462af8fcd269f4856e7881a4bb0501fed93bd331a8c13768e963bc252416dcb3651","first_seen":"2025-12-18T17:28:30.039839Z","last_seen":"2026-04-05T02:10:53.510206Z","times_seen":352,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.4.0/firebase-app.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /firebasejs/12.4.0/firebase-app.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 23203\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Dec 2025 16:07:09 GMT\r\nexpires: Fri, 18 Dec 2026 16:07:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 479933\r\nlast-modified: Thu, 09 Oct 2025 12:10:08 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":103065,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text","md5":"8f675b0e91f5a23869151a1990843937","sha1":"52204e5eb0bafa3b8bcce4da642d9fd39989f47f","sha256":"f1566138227e01ae6d9b58dc6df0c77647af9ac97fce5d5833f3df59db7b7f55","sha512":"1425d43bcf93052c4d250d1cd981945550ee231f23fa62a16d9613f6dc5a75ec81133369a4a62076ad932ffe60e2d6ba9a1db6df9900b195fae2e3e807845dbf","ssdeep":"3072:MHSxYKRntxRYl2rkMVl1BqLN/DP2axt30Q7urHNp:MHS6KRntxRPrNqLN/DP2axt30Q7gHNp","tlshash":"03a3842d2be7113306a354bc2f1f6086b32dd11b261ada94789d83e48f8653d46f6fe4","first_seen":"2025-10-13T02:42:11.028344Z","last_seen":"2026-04-01T19:53:21.986073Z","times_seen":259,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/firebasejs/12.4.0/firebase-database.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.190Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /firebasejs/12.4.0/firebase-database.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"firebase-js\"\r\nreport-to: {\"group\":\"firebase-js\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/firebase-js\"}]}\r\ncontent-length: 50883\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 20 Dec 2025 20:12:13 GMT\r\nexpires: Sun, 20 Dec 2026 20:12:13 GMT\r\ncache-control: public, max-age=31536000\r\nage: 292429\r\nlast-modified: Thu, 09 Oct 2025 12:10:32 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":191543,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b99b49634061a90cef201779039c094e","sha1":"cce5357a8d97b1c2529ecae768758c04880c44cf","sha256":"9d740e1efc4f3c4170666e735a4e34623c62570ef4c99e0b4ec41d801ddc1637","sha512":"2e4d1b4917de643d3a1a43f72a28120f3ecc1322b3e3b287d8958931a14b0e8d4e40bffd32f4dee6d9b8a34f0a03d3c402ec6a1fd83d3b84895ccfba4492c9a9","ssdeep":"3072:3sLOPfSdWAI6aJZJwJ/JcJEJgJBJBJ4JJJ4JlJjJPGoAZr/p20:8LQS/raHaJK6Gz/anaTJBGoAl/p20","tlshash":"df141a813381b62317f96aea45328142b33959a87509447cf97c8ce779a198d32bfff4","first_seen":"2025-10-18T18:38:15.703928Z","last_seen":"2026-01-31T09:24:24.419981Z","times_seen":249,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 17 Dec 2025 20:59:16 GMT\r\nexpires: Thu, 17 Dec 2026 20:59:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 548807\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-04-05T14:48:15.129875Z","times_seen":193431,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"voiduserid-default-rtdb.firebaseio.com/.ws?v=5\u0026p=1:1066028057959:web:0c265fdbbaa33d98f7dbc2","fqdn":"voiduserid-default-rtdb.firebaseio.com","domain":"firebaseio.com","tld":"com"},"ip":{"addr":"34.120.160.131","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.us-central1.firebasedatabase.app","organization":""},"issuer":{"commonName":"WR1","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Nov 2025 18:57:08 GMT","end":"Fri, 06 Feb 2026 18:57:07 GMT"},"fingerprint":{"sha1":"06:E4:89:69:52:DC:4A:88:49:E4:9A:19:66:79:97:BD:4A:0A:7C:3F","sha256":"B3:CB:4A:49:C3:DA:64:79:A4:39:BF:C3:A6:36:2C:97:22:04:95:F0:9D:5D:A6:FF:98:33:DE:19:C3:D5:D4:53"}}},"request":{"raw":"GET /.ws?v=5\u0026p=1:1066028057959:web:0c265fdbbaa33d98f7dbc2 HTTP/1.1\r\nHost: voiduserid-default-rtdb.firebaseio.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nSec-WebSocket-Version: 13\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: KTWQxejNZF5Z+Y5WLBTQlw==\r\nDNT: 1\r\nConnection: keep-alive, Upgrade\r\nSec-Fetch-Dest: websocket\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Wed, 24 Dec 2025 05:26:03 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: ThGQFTZEmWGWQXagebrWa62v9Z0=\r\nStrict-Transport-Security: max-age=31556926; includeSubDomains; preload\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T14:47:06.668895Z","times_seen":13379084,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":0,"dns":1,"connect":27,"send":0,"wait":151,"receive":0,"ssl":160},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/pages/home/home.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:01.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /pages/home/home.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\netag: W/\"155f-19a66ab0e6f\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:31:17 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5471,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text","md5":"f6529a437d1ab757a9c5a7bcd5029a37","sha1":"3c165a13da3957483c553044891e373621244366","sha256":"4e48b36dab43c7655377088866c76b7eaaa70323e9f43de34508d13f1fb48991","sha512":"85026d239fbdf62c8b5caeb8d9e1c10939c34876b2e446301d3b23faf4b1547e02376bce3e2c3294e3aa4246d96e7be915cf1cb122f636ade5251ddeba3eee41","ssdeep":"96:CG3yXGeVm+jJYuwwMnlg9M6cI4VATO2X7rSP7:3O/d9dsVATNX7rSP7","tlshash":"4ab12d352eb30421806b426a6bff8f843125105b228fcd1a7a6e951d1f92e14b7f5ff2","first_seen":"2025-08-04T10:22:24.493228Z","last_seen":"2026-02-24T20:32:59.486409Z","times_seen":307,"resource_available":true,"data":null}},"time_used":353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":353,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.567Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://wwwen.api.bg.geek.nz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7840\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 18 Dec 2025 09:56:55 GMT\r\nexpires: Fri, 18 Dec 2026 09:56:55 GMT\r\ncache-control: public, max-age=31536000\r\nage: 502147\r\nlast-modified: Mon, 15 Sep 2025 16:35:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7840,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7840, version 1.0","md5":"8d91ec1ca2d8b56640a47117e313a3e9","sha1":"a9e9bafe64666f4595051a0e895b47a5fa39e67e","sha256":"78bc3aa78faec288bbb3bf26c9a0fa4eb67b1e69da94a17233c5cab60525efdb","sha512":"bd3a864bd45f39ee83ee79ba4469a156ad8ff3dd33d8aae11e3edd97b29c2ef7f610ac851726041251e34b0108f618a2f945038bf6c0de9a7982e0d643cdfcfb","ssdeep":"192:S5upwnqrBHPLA3J73KAQDPh50uFdXrnpjDS7LjvQnRb:S5ELrBvLA3J76AIPhi+vXwzQnRb","tlshash":"68f19de0200937e4f73d5feee6276b7f2e2edb05e25305aa7556014c69de39310d21a2","first_seen":"2023-04-06T21:42:41Z","last_seen":"2026-04-05T14:51:03.492543Z","times_seen":56955,"resource_available":false,"data":null}},"time_used":124,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":8,"receive":1,"ssl":50},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh7-rt.googleusercontent.com/formsz/AN7BsVAsEUdNIJ37l2osQJwSfhirbiW-Xmspc_FvDtbR-aeq20ovmOhBLq9tnKKm-Uwgoc3tGPzvExx4Puuitz8Oj2PcBJnn-uFrzqEFuqb3WR4tzY5EgAK9XVdN__9APcELoHIZ2oIzSKUmyGoXKT9zlFXISDXqNErA4KyPiA?key=yj4V8pHW144VjA9YlEbf1Q","fqdn":"lh7-rt.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.74.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.453Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:52:44 GMT","end":"Wed, 25 Feb 2026 15:52:43 GMT"},"fingerprint":{"sha1":"6A:F0:34:52:EF:16:19:7F:E7:B8:2A:C3:D8:EC:36:27:5F:48:61:31","sha256":"15:AF:19:35:54:71:85:51:A2:01:3A:93:C7:2E:1A:DF:0B:24:9A:C4:A8:2A:59:2F:4B:82:64:81:BB:74:37:D8"}}},"request":{"raw":"GET /formsz/AN7BsVAsEUdNIJ37l2osQJwSfhirbiW-Xmspc_FvDtbR-aeq20ovmOhBLq9tnKKm-Uwgoc3tGPzvExx4Puuitz8Oj2PcBJnn-uFrzqEFuqb3WR4tzY5EgAK9XVdN__9APcELoHIZ2oIzSKUmyGoXKT9zlFXISDXqNErA4KyPiA?key=yj4V8pHW144VjA9YlEbf1Q HTTP/1.1\r\nHost: lh7-rt.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v0\"\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: private, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Wed, 24 Dec 2025 05:26:03 GMT\r\nserver: fife\r\ncontent-length: 66705\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":66705,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1600x1600, components 3","md5":"8ad6acb8438325429fa43125a051416e","sha1":"dae787919dcf2e46669b4072686e6d65bb84781f","sha256":"3b4e73beba089c4c823cc457415659eeced32b74d64d0d7c9b6706cccb412d7c","sha512":"abc36c6c1eff8b5b0b9432aafe7331dbf47ce927814e9a8c55b39ff21ff225fbf4b1e1c32fa9503ebdd5dff05212c5507dd8594766f41125cecf7e169e89b668","ssdeep":"1536:9gnb/4eGspdxo1yEpSucP1K2o0rAU65unZLw:9gDvGspdxOO1KT0MwVw","tlshash":"0753028277d6350fda450ab2e80b71b1fe6e53ff658a84ae3048406e8775390bc6d356","first_seen":"2025-08-04T10:22:24.489559Z","last_seen":"2026-02-28T12:26:59.537377Z","times_seen":309,"resource_available":false,"data":null}},"time_used":459,"timings":{"blocked":69,"dns":56,"connect":11,"send":0,"wait":140,"receive":122,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/baremux/index.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:02.522Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /baremux/index.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:02 GMT\r\netag: W/\"218d-19b2d0e499f\"\r\nexpires: 0\r\nlast-modified: Wed, 17 Dec 2025 16:04:29 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8589,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8554)","md5":"d6fb6efaada06db33826110942794112","sha1":"f6687e452c4258d3485ba1757ffd97dd669859f1","sha256":"1d56021f65ac6caf0e92b9c46d00f9a9045722766304fc6432f7927ced8a2c82","sha512":"aa60231d0276710aec2ce50b8e9f30fd9b112514cabd5146f9d84f8305c0360cd3ff234ef20e66937a6e153748d4dd83afc772b6ad8114d839f7f742fdde64d5","ssdeep":"192:Z4FBMoJDWTnqfyW8d76vR5UOy43oaxAkPccYLiMYeFOlYAKnY3M:Z4FBhDWTOy6vfUOy44occYuMYeFOlYAe","tlshash":"b902d7d0b0b524bec7a661d174d93201b265b1b4b714c0b4f73c2eff39da496a60af28","first_seen":"2025-12-01T00:51:41.584499Z","last_seen":"2026-04-05T12:24:04.110154Z","times_seen":357,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wwwen.api.bg.geek.nz/assets/js/blank.js","fqdn":"wwwen.api.bg.geek.nz","domain":"bg.geek.nz","tld":"geek.nz"},"ip":{"addr":"15.204.209.18","port":443,"asn":16276,"as":"OVH SAS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wwwen.api.bg.geek.nz/","date":"2025-12-24T05:26:03.058Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wwwen.api.bg.geek.nz","organization":""},"issuer":{"commonName":"ZeroSSL ECC Domain Secure Site CA","organization":"ZeroSSL"},"validity":{"start":"Sat, 20 Dec 2025 00:00:00 GMT","end":"Fri, 20 Mar 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A9:45:DF:EF:1F:41:4E:92:2A:2F:7A:23:96:09:FC:04:FF:80:54:7D","sha256":"5E:42:49:2C:D0:11:C4:89:7B:A3:93:BA:99:34:8D:96:2B:1B:85:7E:4A:DA:A9:B4:F7:54:7E:8B:CB:48:22:98"}}},"request":{"raw":"GET /assets/js/blank.js HTTP/1.1\r\nHost: wwwen.api.bg.geek.nz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://wwwen.api.bg.geek.nz/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000,h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable, public, max-age=0\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Wed, 24 Dec 2025 05:26:03 GMT\r\netag: W/\"12ef-19a66aac287\"\r\nexpires: 0\r\nlast-modified: Sun, 09 Nov 2025 03:30:58 GMT\r\npragma: no-cache\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000\r\nvary: accept-encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-protected-by: VoidNetwork-Shield\r\nx-xss-protection: 1; mode=block\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4847,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"277c0de97164dedc59159e750964fed6","sha1":"f98937cff2b1d9b8538353ff7fbac13323829ffd","sha256":"c6a7c4e8052639aed0eee74fdb8ff47b87b06e71eeedbf16c87356e114747599","sha512":"ea043f18b9a3d8b56ba1b41297de3015315de22bd3126a85fc362695376f17180e520c08f5462606618bb88e19947a89aebdbe65704c84eb7efcf6ecbec40cbb","ssdeep":"96:DU7t1mHkwE+gt5pR4X5xaQIS9oyijNI3xe5S:DU7t1mEwE+gjpR4X5xFIS9oyiJgxWS","tlshash":"5da1825984f32250a13be0796f6b770836725007760ece7d3a8d03509f8676ae1a3bec","first_seen":"2025-08-04T10:22:24.511526Z","last_seen":"2026-01-25T03:35:21.580333Z","times_seen":279,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}