{"report_id":"7944ecde-ab71-457b-99ac-b7ecc73dad2a","version":0,"status":"done","tags":[],"date":"2026-09-20T10:45:11Z","url":{"schema":"http","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"title":"Zephgain | Official Website [2026] Platform","dom":{"size":2319747,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (35016)","md5":"467947f377d06c436f8d949916afdf3b","sha1":"02173bf12074b3debc474d97649500d33b3d9138","sha256":"316fd3a22519fbcd1497a5aacddeb87ffc728ac201fd298cf4ad90b3fa4e62da","sha512":"bbf0f7db539878bdd77049ea7d48483efd743a8678785e157fd44596d1f8abca2f6b4669db391414c976c17685ab71e78e8d4ba78fa545b5e9588e07bd9ad39b","ssdeep":"49152:QYJuf+hs/IYGEhAS5dhch6RhMJ+dhIH29hAab8h2GHohmSD9hmpf4hExSDhc6y:QYyIY7ap1sSWoLky","tlshash":"f1b5c623026a34260533c2d430aa5736e2aa9d5bfa970e413fdcd7e66fedc90b15721d","dom_hash":"domhashf876149b5d5d7a1ddf169be4e0a6fc7f","first_seen":"2026-09-20T10:45:32.436157Z","last_seen":"2026-09-20T10:45:32.436157Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-25T10:45:11Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null},"summary":[{"fqdn":"zephgain.org","ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-08-04","domain_rank":0,"first_seen":"2026-08-25T03:41:43.838392Z","last_seen":"2026-09-20T10:23:23.626172Z","alert_count":425,"request_count":85,"received_data":3086510,"sent_data":42353,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]}]},{"fqdn":"widgets.tradingview-widget.com","ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-06-05","domain_rank":0,"first_seen":"2025-12-20T20:19:51.551929Z","last_seen":"2026-09-13T13:16:47.538868Z","alert_count":0,"request_count":32,"received_data":395429,"sent_data":16709,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"s3-symbol-logo.tradingview.com","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"2010-03-20","domain_rank":110931,"first_seen":"2020-11-23T08:22:37Z","last_seen":"2026-09-19T05:06:17.563506Z","alert_count":0,"request_count":4,"received_data":7313,"sent_data":2238,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]},{"fqdn":"widget-sheriff.tradingview-widget.com","ip":{"addr":"143.204.238.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2020-06-05","domain_rank":206730,"first_seen":"2024-02-01T14:12:53Z","last_seen":"2026-09-19T05:05:39.639591Z","alert_count":0,"request_count":1,"received_data":539,"sent_data":570,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"widgetdata.tradingview.com","ip":{"addr":"92.38.154.194","port":443,"asn":202422,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2010-03-20","domain_rank":179381,"first_seen":"2015-02-20T09:47:36Z","last_seen":"2026-09-20T08:41:49.590789Z","alert_count":0,"request_count":1,"received_data":224,"sent_data":727,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"zephgain.org/module/geo/geo-flag.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4356e963f78e4937cd1e0dddcbbe5997","sha1":"bc8d412d4608c04ccb9dcd7780875be304b5e3b7","sha256":"3af01327aa9b196c1313f25b4bd7aaac0511d84867a9b9fef0c84320eec69d52","sha512":"808952959c8445ad7ed1f15deac91987a299eb39d6a058b6df7bf835f10ec67e8660e5ec3750977b2c2f9732cd535b173704a8b1f253bbff7bd5bbe4014f0c62","ssdeep":"","tlshash":"0821af2dbce3247a8917f17824af404972b52023110ddd057d0d85589fa95384af47dc","size":1147,"data":"","first_seen":"2026-07-18T04:13:48.526404Z","last_seen":"2026-09-20T10:45:32.440954Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/scale-chatbot/assets/chatbot-script.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2955cb87e1f9bcf63fd0ca7b267cccff","sha1":"e2eeebd5d2257da1ea94fb5909372a59bd349ea6","sha256":"60a23c832135d335f18c6dce43401c6973d999009a648e078bb1a65c5683a84e","sha512":"ac73ea57bddf27d609f3775b5663c890460b4fc319f55d87b34d14ff1cd6ef9cd5d0b09b0b562e2cf3052394c262d7e31242fb4578b65ad946df6361ef5432b4","ssdeep":"96:ba48+/JNZO4sDnWoi2x5PBibNXLS71iGiEDBzipiooGbqcbQTt6xHB9OlTipiUif:bj9cDnWoiwJBidL6iGigipioqcQ6xHBG","tlshash":"f2a152a762f32232059f092b998667597674404b180fe9163c5cc1f40faafe057b1ba5","size":4661,"data":"","first_seen":"2026-07-18T04:13:48.610409Z","last_seen":"2026-09-20T10:45:32.469475Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/zfMORx0xp_.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"1e62f54c468ff00b14f0402779ae3f0e","sha1":"854d71ecd32e630fbf3b43364c5d5558909e4192","sha256":"c2f9463f02c09d02dce53cd44e137737eff5efa9b7111bfb10e29030a95cbf99","sha512":"19ce1f67e482cca331e49e31b4c5d56805bdb1c961fa0bb2c4285d82b3572d5c48088e8e337069c8cb3f1ff0a5726274fd7bbdf01e486c52a4f3b3befdf70035","ssdeep":"","tlshash":"9e61b817f02061b0fef604628104292a2a7ce5dae51744bcfb5ddcd0a7ca4a6b60ef73","size":3380,"data":"","first_seen":"2026-09-19T05:04:00.985789Z","last_seen":"2026-09-20T10:45:32.465663Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"43e28c5553d54ed2964bd5147521769b","sha1":"0a2b8c3db330a47aa7b9195e6dfdf944adb9240d","sha256":"d63026c985dc46aeb316574b7bf1828080c906238e35d5e34cb80414c0e70d23","sha512":"6dda085e4196167cf64287cb675c05b09bdaa291decebd1bea2b52ccdbd380de5875dc233fa3d439559413693f1e7974f485d60a2c1541bf62a8887bf5ff9811","ssdeep":"","tlshash":"1b80000c0a20c0882a00af00e000c202a0c2200f0220238ce823bce2a83c888808fea0","size":38,"data":"","first_seen":"2023-04-10T16:02:06Z","last_seen":"2026-09-20T13:45:15.095062Z","times_seen":203099,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b8164d26a9fafb2612a7e75b55523d6e","sha1":"64d11c3fe1ee23716501ae5bf5ed03d1c5688fc5","sha256":"b6e3a2333ba3834718aab06090d691839c6ec931d335b2c191aa4ce432a8f86b","sha512":"a76ef871e9e064f5afd45b05d707c9a728d1adb75d33a87d821f0c384c5754b69e9a4974f4b1160b2ecbdae090e65840ee592e54dfdea2c8da8559d7830c4bff","ssdeep":"","tlshash":"e5b092099b92bc210ec0401144aa6948700940932a442a60bb8ca2092b0c8bb14a2acd","size":111,"data":"","first_seen":"2026-08-25T03:41:53.716887Z","last_seen":"2026-09-20T10:45:32.516534Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ff04b60368fc2cb3b8465b65724ebc5b","sha1":"e2491991f52d30479bc04644f7733649725e746c","sha256":"a6b2cc00c5a519988fa1ed7d76875aca2482c3b9912b0294c01d47828b238d20","sha512":"1d60dcf6a74f1c33f2748d347eda96ab2b0ad62bfd97e7e9178a65adb6e941cfa06df3695e3ff695ea6aa2b517ce10e48b1aaa6d65d7f4661171c8fcd702fbbc","ssdeep":"","tlshash":"9471dc14beb79037453f80ae2bef925a7a6460033484d8457e8c96341f98a9a94f2fdd","size":3799,"data":"","first_seen":"2026-09-15T18:42:16.225449Z","last_seen":"2026-09-20T10:45:32.517199Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a39815e02959c14f0d4dc2e6ecd2af83","sha1":"df4a36e041d16ced7bd103322ba855ae3475570a","sha256":"bad6fc3a92a52c18577d4bb49c8310e13a64f4d45894159b2111cd49a1512704","sha512":"fd3b43892615e1d14a4e84e2503090fe359f12a050c38853f1f0be83759f48cdc6ad0eee15c3686dd6ba2c9d41157e5b9243c512205f5f7171148901210c440b","ssdeep":"","tlshash":"e741ef6ff9b124b244b322a943dfca9437910457a0c2c8173eaddfc60f52a645de6ed4","size":2263,"data":"","first_seen":"2026-08-25T03:41:53.7241Z","last_seen":"2026-09-20T10:45:32.517762Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6b9fe4d4a069488546e3e43c54ca2b2b","sha1":"1e775ad3f67d738b5ed0e9f80baac9568e805ea0","sha256":"82d599c4a87a28cb5aff30c759959bf7b79ab72d7536f0d43210a61ee33e08a1","sha512":"ac1b4952188cd8ca1efeccc09423264305047aff5ece0ea45aac3feafd3b305fddd2724a88808d849a313f959f35a98916095dd2aff01900899666fcdd11d496","ssdeep":"192:aQsRUH70aWha1VKe5Z6cru0cltXOxYSxARp:EUFP5VcXV","tlshash":"f5d1cfcc36e72019825370a84aaf90867178f8171b8aed01790c87d67f49639b772bdb","size":6662,"data":"","first_seen":"2026-09-20T10:23:25.986028Z","last_seen":"2026-09-20T10:45:32.518309Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac313660730eb2e32ad1590f08e69add","sha1":"28f67e783052bc57d1c444440efe1eb063f0e78f","sha256":"86e5cc75d6b0b7f068beb4cfd3d12b692dd2538d0ca3e4a30979ff57f27c7964","sha512":"5bdf2074732a42e6b0b6c62bb890177e65c15002d61f7a4cd13057136e869db5861667e12e2020b6b754bda2546e7d7c9554fe219774935c8b75947a2648d81d","ssdeep":"768:l603Xlqn/kiIzNT9tSR1Mi2SouFGUh4O/tb6VNw4O:5iIzCMi2SourGOr","tlshash":"28f2c86e9354973ba5fec3a6b0e04587ae5e76440e80046c397ccfce1289ad379e2731","size":37061,"data":"","first_seen":"2026-06-19T01:43:14.45103Z","last_seen":"2026-09-20T10:45:32.518978Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3b87f9aa5d3a035503ca7f2d2b610d24","sha1":"5bc53bd36818cb713b6fe97ee76ed5f6a16d18ff","sha256":"7804ee8ef8edf495fc6c01f28e89483c1389349268fbd8068a3c9e31abb1505b","sha512":"94c62356d3c32ac891977c1cc5e02da09f7f1882fb53a4ee10437712e9c71ce797be36301c8ab616454f67b5b13c8d05b0a6a21f8b59d7c0932ec9daa8e5311c","ssdeep":"192:vaZzs6ARz6GNwLc3yUDsWrKh2hI7VKYE4Kr2V1XDW7F86rxkggbeGFWA8YQlYb0h:va5pmzCiu6rkg70F8e0Dt4pygKUoPDsY","tlshash":"663209cc7b68b8a61a926974540b3503f33751e0441ed1a4b534eee3fca5e48b9b2bf4","size":11084,"data":"","first_seen":"2026-06-19T01:43:14.452722Z","last_seen":"2026-09-20T10:45:32.519487Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f30b0ec2c5f5e429e326f524670d01e1","sha1":"bf0427eb9a7a8f688ac6dcd8662f7e054efba2ae","sha256":"3f36bb4c0b75957ba26657e93e13b53dc2da219afe57bb0b0770a37c225c45cd","sha512":"3efd224fd33f362f9261c97f1dcf064fc1f93e92190939136d8eae9cd1a6a55654306e59cc6daa0ef5af39f5c4e4415b31f4d9a7a92fef600a222dbec9805ac6","ssdeep":"192:9WihiHfjQm1TvFvF0jDMA/REd4Z4N4H6dIMHRQEIrEmOJJSLBJn6m:ofjHb4Z04H6dRHRQEIrBZZ","tlshash":"c33286966533313685a250fa739f92206372312b3486e8d4fb9c82012f5ba16d77f7dd","size":11280,"data":"","first_seen":"2026-06-19T01:43:14.454109Z","last_seen":"2026-09-20T10:45:32.520071Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"888d6445a8890070db576419213db694","sha1":"04401326f8a6dc11618670ff5420923fe20892ff","sha256":"e8294f654680bd5d76ed781d72d9b4f7775a22025c0d2869d3c775e790e5880a","sha512":"622fc8f018e73fbcd73f9c2c02548c0b8ca14967377300863e52fb1d30d09cc6ba47bd569338128e7b46179b413b74b624dc9aae1f62e24a2d8f903d9250ded6","ssdeep":"384:xAm7SI8oVKoA3teYkmOBijJ/D5Hmbrwg3fRVY1p48Mh:BuoVMeRm2it7y0jU","tlshash":"7da2a41a27b32021660370bd67cba106f134d40b354ded547e6c5301bfa6e35eae6bd9","size":21467,"data":"","first_seen":"2026-09-20T10:23:25.997112Z","last_seen":"2026-09-20T10:45:32.520642Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2773f9f503a6bd7c0f3023fd87f5ab1b","sha1":"a25c92815357fd21af1ffb6b358cc2da541f2f13","sha256":"a09eaaa3581751410f71949f599b925c6cac3311ae108c0379bb7af6cad58a13","sha512":"8c3adb19300fb400b8cf0b2f462254dc03a05fb3474e2bf5a8f2fa485562346aae208189f5dd28213a59414de9a76bd9cc186b36e8f7497062a9fad17d1d41a3","ssdeep":"768:K4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsBtph3UzcIYzEB3uaGbntH:HH0qIeZlORvqIuKUsXDrphEzcTerc","tlshash":"a253e90612bb18361793b0b95287b511726c00671285cde6b9acc708bfddf1af3a77e9","size":62772,"data":"","first_seen":"2026-09-20T10:23:25.999371Z","last_seen":"2026-09-20T10:45:32.521338Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"918861098ae5e49f0b24148d88b3c73a","sha1":"45bf4c028c97d8c6357091b73cbd382a3624216b","sha256":"6392dd11e69a9ca996d7722542b5557860dfb764525e43c3b9b3f9046b863986","sha512":"72cf5df93db53195cf1a21814a4f639381dda91ae4736ad4a9fea59035e92146baed03e9d74b3ea772e334bcec2d5a9419d8323d064edf84990cad9cdcc09be9","ssdeep":"768:A4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsj7ph3HQCSYv+aB3uaGbntH:ZH0qIeZlORvqIuKUsXDXphXQGTrc","tlshash":"fa53e90612bf18361793b0b95287b511726c00671285cde6b9ac8708bfddf19f3a77e9","size":62762,"data":"","first_seen":"2026-09-20T10:23:26.0013Z","last_seen":"2026-09-20T10:45:32.522047Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5cad109fc15fcbd290c293aa81222b6","sha1":"9c0cf3d12642bc22e81c61d26b485696a42e266a","sha256":"ed4cbd7038f359cfb0579b7fc4f5b744b542c52ea6df306145945d4e28eae61b","sha512":"c9ab9ab9e5d93641ddc0a3fd154a63b28cef72329c51d36e0a05fd6c924eb3e25c471e9e15279c5f089bd09605abb694b5ece91259f5e03bab5789b1c97e97c5","ssdeep":"","tlshash":"c1017b259f31093a60ab148c066cde0855ad105437e88f91bba9da99b973247c602d8b","size":691,"data":"","first_seen":"2026-08-25T03:41:53.746395Z","last_seen":"2026-09-20T10:45:32.522764Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"31ea529617c10da0848245534e29b3af","sha1":"bbd63506c3593bf8284e7ef7216ef6beb2f1a015","sha256":"8007a45243f8af56576ca2531aa88cc4411bc024889412f7edf63caee2c9b1b6","sha512":"fce22f2c0084d36fefda9a26cb3b19e6fd6753e6e6449971ba338191e117806d2d108b5f22cf415231ff80f592d26d196b816d63803fc761fdb48cd3cf87d082","ssdeep":"","tlshash":"403146594db2257e5433025a0a8747863b2d5087218fce123f1c53060fc9b285da1be0","size":1566,"data":"","first_seen":"2026-08-25T03:41:53.747781Z","last_seen":"2026-09-20T10:45:32.523274Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8724bca193f7612a4d639a9ebf990e5","sha1":"ed55912b39d4251a15947812bba6ca8b23536d75","sha256":"8b10a32e6ac5f0f7d948a2231b1b5e25c10776bfab89befcd0395cea5aa8a9d6","sha512":"2b9dd1c77b4c00db7ec73a92e03479c85b4c17fe3bdfa644008a096ab2c6aeac6ec08a380987acbb00d1ed85bbd5d770114fa36cf0594cebf5458dabc68e68a7","ssdeep":"768:E4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsGNph3MlrY0tB3uaGbntH:tH0qIeZlORvqIuKUsXDIph8lUqrc","tlshash":"4453e91612bf18361793b0b95287b511726c00631285cde6b9acc708bfd9f1af3a77e9","size":62780,"data":"","first_seen":"2026-09-20T10:23:26.005386Z","last_seen":"2026-09-20T10:45:32.523825Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"93949b8fa358b80a0fac75d6ffd44b32","sha1":"6f902757f8a39592ba91cc3c0526a473e357ab61","sha256":"a62ca3dd979b58e58e05ad802087fc954d879247daa822a89111c8f5fea24c12","sha512":"e1815d88d7976d4c514a64cd59c1eb9a7c300b8a082f0072fbc57796805ddc11e08ddc83e8eb9a73500e1c80114609455419d5f7a0db7f1d501ed0f72f62ab99","ssdeep":"768:K4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVs8pph3EBeYdLB3uaGbntH:HH0qIeZlORvqIuKUsXD2ph0BFjrc","tlshash":"2d53e91612bf18361793b0b95287b511726c00631285cde6b9ac8708bfd9f1af3a77ed","size":62772,"data":"","first_seen":"2026-09-20T10:23:26.006586Z","last_seen":"2026-09-20T10:45:32.52483Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1d505624a316ef0ba7ff56cd033a1e68","sha1":"38cecfcd3863c80a594d1666cb7612d80ec0c53d","sha256":"da006e5ffe605b1da856019cebdc20a9adf9e99eb9a090e9d18b15799d0b47f0","sha512":"4c411d856fc4c85e225550848d888e87bdff7f0d8ccf4b3b88f4564c57d128832567360553da6c8400b51cd431e18718ea402b681c56a571d4f00e3e98527582","ssdeep":"768:i4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsyvph3n4PYQlB3uaGbntH:/H0qIeZlORvqIuKUsXDophX4g0rc","tlshash":"9353e90612bb18361793b0ba5287b511726c00671281cde6b9ac8708bfd9f19f3a77ed","size":62766,"data":"","first_seen":"2026-09-20T10:23:26.008923Z","last_seen":"2026-09-20T10:45:32.525595Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"efb9d795dd2aae078dde0e7a338fda87","sha1":"73927251ed853f0c844b8d416e4b93b25ea88599","sha256":"cfc84cf8fb56ac2c5caaa2dc1273b605e0b24928e455f02c6cf0eed1d20158ac","sha512":"e87200b624146643f05678f2d728a4aac5b07addd57f84b1fc06c6762aa2e102f6d829579ed0e0973cf57260ed5a0fd6dfc7e398bb6509b052463e059fc0a50b","ssdeep":"768:K4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsORph3ij5YjlB3uaGbntH:HH0qIeZlORvqIuKUsXD0phyjeDrc","tlshash":"a953e90612bf18361793b0ba5287b511726c00671285cde6b9acc708bfd9f19f3a77e9","size":62776,"data":"","first_seen":"2026-09-20T10:23:26.0119Z","last_seen":"2026-09-20T10:45:32.526496Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30af3bac9614085d524fbc816cb6f44f","sha1":"ce2b9ba4af12d6601086ee8361ec75100745d1c2","sha256":"7ab3038481ab84e90643e594771e1334ff94ecec89f33cba2f3f6e7f5fa31bf1","sha512":"32d01e266a966def756863bb6225af0715f3f5c289c22a8cb466fd0be7bb5cefdf4dc23113951f46926c6abb00407d026621e5ca7a5d3ac854604693f77a2e99","ssdeep":"768:a4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsWKph3lMxYzZlB3uaGbntH:3H0qIeZlORvqIuKUsXDNphVM2zxrc","tlshash":"f553ea1612bf18361793b0b95287b511726c00631285cde6b9ac8708bfd9f1af3a77ed","size":62766,"data":"","first_seen":"2026-09-20T10:23:26.013636Z","last_seen":"2026-09-20T10:45:32.527255Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3d0d9b1f94fb91dd928b20db9a6562b1","sha1":"5b3f413c86da6605bdc72bdee89fbb82b22396e5","sha256":"f9204f72ef06a8ed9db1e68174a875846aabff63bb871e7901526c22598fa54d","sha512":"6beb3b0f310ec743e5c67fd0b29dad68d0334c03acc1c0577e89ceba2e1554963e940b4724991fbfeaee94603b7cbf7abb5976bac9d139bfc7618704a5454e3f","ssdeep":"768:24HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsdrph3BgQYvsB3uaGbntH:DH0qIeZlORvqIuKUsXDFphRgbCrc","tlshash":"0b53e91612bb18361793b0ba5287b511726c00671281cde6b9ac8708bfddf19f3a77e9","size":62763,"data":"","first_seen":"2026-09-20T10:23:26.014875Z","last_seen":"2026-09-20T10:45:32.528035Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc591e9629134d2706551caea3e58684","sha1":"0fa214ef1625d3f84acfb1b3a3a343855167d0db","sha256":"f78d06b531af3aa825d5e510a507baed42a20c1101067f858fb981b852bc41c3","sha512":"02bfd5849917a52466a286650c95fab734749297b0f81e9b6c7e4bbc3781f46e9c275d5296d31574af492a7cfcf47b68bd5db78dd175348d9f7feae7e3ff318d","ssdeep":"768:w4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsSFph3TKPYaBB3uaGbntH:pH0qIeZlORvqIuKUsXDAphjKgorc","tlshash":"8453e91612bf18361793b0b95287b511726c00631285cde6b9acc708bfd9f1af3a77e9","size":62773,"data":"","first_seen":"2026-09-20T10:23:26.01609Z","last_seen":"2026-09-20T10:45:32.530637Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30f92601f514ce6b4a004fceb3d0c65d","sha1":"72943288bbfbd08e36a699d0169c4a35f55b3284","sha256":"2a0338d7959c806e5497b76e2bb31c74366a2348098c5fe2708903d2c45ce799","sha512":"45732f71c063435a0bc2327460a41d04b097d763b76d527c6377252388b281431a14f95e672a61c2b8f1e7d17182c342bceeba3af4d9c6b3172312b314047742","ssdeep":"768:E4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsnfph3Y5YYoKB3uaGbntH:tH0qIeZlORvqIuKUsXDfpho5Dhrc","tlshash":"6853e91612bf18361793b0ba5287b511726c00631285cde6bdac8708bfd9f19f3a77e9","size":62768,"data":"","first_seen":"2026-09-20T10:23:26.017846Z","last_seen":"2026-09-20T10:45:32.535448Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0cb20efae403623b60c950e24105ea13","sha1":"a1fa4f7b6d9446aed86e120d35479fe19c1e5139","sha256":"2a5177258b32a85316e8bc6183cae87b577661f340f0c57a29b10301892b36c9","sha512":"7de437c4d8e4f21a8f2dc2d1d533c1aaa863667c647d079174b4bd4eaa83ec4a96813ffcb23c5c8c42c7f11d3c4d62894a611533b8ea0ee0e0674260913d107a","ssdeep":"768:k4HlqqIRScjsZlORmBm5qIuKUsXaWOy2T0NhYVsC/ph3IvPYrpB3uaGbntH:NH0qIeZlORvqIuKUsXD0ph4vgPrc","tlshash":"eb53e91612bf18361793b0b95287b511726c00671281cde6b9acc708bfd9f1af3a77e9","size":62770,"data":"","first_seen":"2026-09-20T10:23:26.019265Z","last_seen":"2026-09-20T10:45:32.537143Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"67dce83759f95c2fa9e8c84251d94f1e","sha1":"b5517298ec0ce6cf7b6ec40391288bc7fc5c1e38","sha256":"78682e9e40fcef30b442d8bb268e189f3c3992c7ab7a5da3cc0d4483247f2712","sha512":"a22c419b73122a35938738a7a745375716ce02cb201990a9333ec92bcdd9b50a82c3cb15e4964840c866c9776d49a491be5740aaec93958628cbfe8710643ae7","ssdeep":"","tlshash":"25f055261873283001bb21bf77eab2893aa5503b204ac40a3cac885c5fc099567f5f6c","size":586,"data":"","first_seen":"2026-06-19T01:43:14.481867Z","last_seen":"2026-09-20T10:45:32.537927Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"535142c4e7c751883c633b2ba7602796","sha1":"e9a68703f66154fe4d20e784d8611d36c3e0e122","sha256":"95b227375dd9b40b0c876a85a858f10218c87ece96dc5dfa0e26fef14937ba1d","sha512":"a4048c77e33338af66be37ba94c173f549e43add0b1de3e680f2cdf07fec32f64f53c323180e4fc543f9dbccbc9d3385f9668fb0111693ba4970e08175cf200b","ssdeep":"","tlshash":"ab11122966db3029a057113562eabd823d16d5030a4bc806be9cf109ffd04b69765bbd","size":1103,"data":"","first_seen":"2026-08-25T03:41:53.765899Z","last_seen":"2026-09-20T10:45:32.538654Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5c1d09e5850a2f0882fcede60e364d70","sha1":"70847ca84ca36212d0bfe24338e29c1118585624","sha256":"0da02bd49afadb75aec050ee27789b022f19849e4442b3696b24f1c22c3274b2","sha512":"2cd3a778ab9f8d6dfd419a20838c17b96b70449b24e468df32781fbe1b7261836c936ccc2c81b56869bf178ad2a746651b84fe148e48cfb02d4e83c95d2abd3c","ssdeep":"","tlshash":"f85122256ce3307a64132025a6ef0a0539ae9113460bcc013ebcb2261fd5dac9bb5ff8","size":3130,"data":"","first_seen":"2026-08-25T03:41:53.767928Z","last_seen":"2026-09-20T10:45:32.539598Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a6a432c30b269bb9c32e45e64eaec3b1","sha1":"e4f6f8e3b813ad557696006fb4568fb9e6655fcf","sha256":"ab0da57e8672058a55fac6973f59835b3e6bce725da8639396f97a061fa587ac","sha512":"d03c21535ee65fcbcc4aba5e258ebaa981746195780ae1d4368ccd43b16da0d61b80404fbd0ae5cae33aa9d52c375f1b8af19827c76cb37d4a2d564f6676510d","ssdeep":"","tlshash":"bef0a7df16f0047506e3b2b2cfbf1504357a529f144bea427cbc53409f9861d6786e88","size":636,"data":"","first_seen":"2026-08-25T03:41:53.769022Z","last_seen":"2026-09-20T10:45:32.540209Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bb2870635c61f4e488874d9452b4f425","sha1":"e20f6b7b6527f30b90697cebb02d138f16e717c4","sha256":"a75d422872a4ea533754579de88c248c2476c1b4063cbd5a93a164720b725391","sha512":"66eb09007003742164310320bcb8d118ee58f23761446db8ebcd8caa6c34ef096d70b21527acbf6de64a0e01deed598f9cde1f98274e1c3ea2d8b9176902c81a","ssdeep":"","tlshash":"71c08c6662a208704297a529526ae6483aa0450326098d023d2c10214f90f90c4fa6c5","size":168,"data":"","first_seen":"2026-08-25T03:41:53.770829Z","last_seen":"2026-09-20T10:45:32.540724Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"dacdac80fbd242ebe01eacc2842a9cc1","sha1":"3b75cb397dc8a4c2881e0f6d8d498aedb09ccae1","sha256":"25f27e45dc33a09eaa6b7ca6d82385c57ecac53f12a716c8946a32542c4c9936","sha512":"696835ba364fef488e84ecd736d371fc3e75c09ebeb939420161075c50f70c0fcffc168948f3a94da99d44f1f32648c4f30931a2677b37e388c92eaee9f374ca","ssdeep":"","tlshash":"8381c9193ae32123416fb67e678b024c7634810b3109cdd83e5d6b66afa0f1416f1bec","size":3825,"data":"","first_seen":"2026-01-07T04:34:38.346065Z","last_seen":"2026-09-20T10:45:32.541228Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"228f008d9063bece7b23323fb1a73719","sha1":"8e59b45ae943a4683c9ed14699b3a61e0c111ec9","sha256":"f5863a1ee0a8be4a40b3997967bc3f7eab4dc122e9cc4867c5e7a7a5785e80c3","sha512":"01232b10bfae5ab5c940c4a491b755f2885df1594f58ae9aa7d64c7bda7129b03b334594f388a55d8823fe0c90da723c2c4ed33c1198d6a3cad27563e6526751","ssdeep":"384:9k/OoDIURONierljFBvp9QaTUz3ikWcpJac55T:u/OooZHp9NxcpJ5L","tlshash":"e5820f8d20e3911bd42b7269a6af150c32359067230add517f4f9b00afc6d7e96e2f8c","size":18982,"data":"","first_seen":"2026-08-25T03:41:53.775453Z","last_seen":"2026-09-20T10:45:32.541738Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/5mqIaTwOe_.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"cb3d7550219724bed0efb817f4f01545","sha1":"3546ab2d13a8d1954aa4ab9f6201e2b9d05df9bf","sha256":"aa5bba780b4373693ea509c7d47b5ef1e8467d2e574debd103ac1f596ce03802","sha512":"70154ff7f45db2b9ff9ba4c8486077632104649b8b67dc9f8f55ebb6646b6e580e92bbcfe8d84198e00d37f80f31077852c249faf341d544f7a78bd06dee6494","ssdeep":"1536:mus6ZA7FXkY615eVap4LtC24vBCQvd+9g:KUB5fp4LtC24vBCQvd+9g","tlshash":"1f63d596b352f233bf8aa26b9e5d4108e708b4c0ac48807db558b4d925c3efd1175fb9","size":72467,"data":"","first_seen":"2026-09-19T05:04:00.8846Z","last_seen":"2026-09-20T10:45:32.479682Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/tv-ticker-tape.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f1a880d1837e98b43994d85d3c7ddd2","sha1":"67f65c4b99269e91816cc567e490dc672fff969a","sha256":"89644a97eb7d89796754d1e805eb9f55659eb2c47f24971a3adda00f782077ae","sha512":"6ae5ee94b0968451382a734fad48b9e01d9746f015b4d06621cd40f1b4f6a6adc4633c8a0bf7615fa7539d816d66431caa52e8db1739dd4d86de971642161aa1","ssdeep":"96:2NJEfwrRPus/OsDOjrrczx1nAem6ILyNhuQMzsVLUbN4eAR//Mk8atw:2bVdPus/OsDOjEyem3WjNVLUbN4z9/RA","tlshash":"85d19453b350b9327294c112cf5a06a6c3244019d90c847cf6e9d9e95acbadd3bfdb36","size":6264,"data":"","first_seen":"2026-09-19T05:04:00.996142Z","last_seen":"2026-09-20T10:45:32.485391Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/Ve4UPiMhwl.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"05ccb3f082f447ff567986684a5a8bfb","sha1":"809ce44de377548581fc1bfaec93efc7d33584a1","sha256":"075bb85c4da0ec09940c53c622a286136bae69afd7667eaeb45b66f237819042","sha512":"e9130826f0d9aa798402f451217e1bc5ec4ef57781e98cb03e9c404e3d0d8aed7df10b2ffb5987370b1c5126041cec4badc798d945cf6fe73bb353a2f7f03a00","ssdeep":"96:2aOevHifa3sK5xx3jbf9f4Gyn4Oz4clfYNYtx:2xwHB3sK5xNr9dyvJV3x","tlshash":"728185954300d0ac8817a815df1e59bd175fa8f37f8e06e4e067c67491c36d9dd57038","size":4097,"data":"","first_seen":"2026-09-19T05:04:01.098825Z","last_seen":"2026-09-20T10:45:32.493894Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/al4F_m27lM.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"46c570dc92d4ba8631e4aae3b2597896","sha1":"7e52f007d3f85d7e81f36b2630703fc49d0c1ed2","sha256":"f42a7e25f42fd00b0935f3a7b06f4429238b50b6798b53c273e30d7095f9e94e","sha512":"874252ce33742c45f4d46d341eab150b2b52ddaa1b61ccc5e8847da7d8238e3e985419568809378ee86d2a63dff9e7be06e37412741b467e281d2d09e4cc4eb9","ssdeep":"","tlshash":"f9d0a7572250b6d8139685825b0dc182a65418f5a9fd91e4f6bd4b1620800c821d5f2a","size":227,"data":"","first_seen":"2026-05-11T09:26:45.785238Z","last_seen":"2026-09-20T10:45:32.48277Z","times_seen":127,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/fwcPhstYIS.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8411fcea91c12c717c5b37f39244a272","sha1":"03c3a044f9b1f626fe7b502e7e87e8e640478b7c","sha256":"4647cd2f8c3a50a575e9f93189f72e28d88429c68017f7bb41dbbd6b658be1ac","sha512":"4ced050e61bc5f420f32f569252c24159ab2453c8b031936919016ce8ce1df765a80f6d2b71a3717beca5d9b777f98c79150c6177eaa015625961620549145fd","ssdeep":"","tlshash":"d0d02e8326c2e1b2479121c1010a24a8fdacaba4004bf825f212e0e17891cfeeba5a41","size":261,"data":"","first_seen":"2026-06-24T17:21:49.639017Z","last_seen":"2026-09-20T10:45:32.510328Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/UEbs2Gh9MF.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"83ba9693202edaf7a394da98e62ac5c9","sha1":"fcd3b9c775c697a3fd9eda7c7bcd1dc0268921c6","sha256":"56ce5ac5608558c67956324e045420fced2a4f32afd57db31da6d598ec978395","sha512":"8360413f9813bc783aa7286f099f8f2fd440936c41855cb6065e002e3f741c69b7cb52c9a8faf725693ccafd36ee0d7bda32aa9f4561938cb420af22d7ef237b","ssdeep":"","tlshash":"a4c02bcfb08733f841300097c61bb4484c8046544a080794c0c585d897550b46bb2f24","size":130,"data":"","first_seen":"2026-06-11T07:41:30.973099Z","last_seen":"2026-09-20T10:45:32.501663Z","times_seen":82,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/rAeTivbriV.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7bd82aae0f45a7b8dea3bcf35407e72e","sha1":"b32e06aa58cc9bf4edc88f5346230faa204c0e65","sha256":"65cef6e9f657a75e60a2cbdd508a0f6637642c44234f92946939c33cad872480","sha512":"1b1a26cc94a8cb32fde7e6cef24e782a4cb1a567fb16aa768c78ff952829f79332d9154367af3cb68bf8a8dc4808f8a0e8a737294a0f073d4b289dd84e244034","ssdeep":"","tlshash":"de1121e275c26108878b12b0809a4c89f064cce3c82f6e74b609e1333c7081796bdf98","size":945,"data":"","first_seen":"2026-06-24T17:21:49.777484Z","last_seen":"2026-09-20T10:45:32.487414Z","times_seen":76,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/datafeed/tv.html?page_url=https%3A%2F%2Fzephgain.org%2F","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a45c86f82359c4b28dbeb9e83c468cc","sha1":"108274771ddf0b439e5120e8919b77063e15fe5e","sha256":"1f4e6bb088758b6019e98db8cb99cb21d26986cb2b3de3700736123495e63df3","sha512":"0e9ad52f242ffe8ed684bd876cb2dbf2ff992c50d98cfaf994de85754702598c116cb6328449f1b92008557d90923b2b3d66daf18ac28d83343c5c013877c08e","ssdeep":"768:SIqKKVpV5q460CJgqQ5iF5ECTDgHTfIjYltEGwwMWYfKV2+wLu8jSEy:aeSeETfltEGfOrLJjSEy","tlshash":"9ae2d76773567123b3a4d2675c290101e329a4853849843cb27cbce7aba7dc676f9f38","size":33680,"data":"","first_seen":"2026-09-19T05:04:01.147809Z","last_seen":"2026-09-20T10:45:32.54227Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/0ORl1h6uuG.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"713533ba9d1cd0476bfbf6ab5c8e4720","sha1":"6572b30e2e45c43a3c5f3edd9448db89f4d4c485","sha256":"373c9f5dc789c5e52f8b1bc3d615d6af748de3b073e68ef3cd54c5b11ed8f09e","sha512":"135d1c2c7a84f8534fd8df59dd7f8a48c2a334429e20c76776913fc2fa7fb0b42dcfb59d7bba8ed774c14a02b35318acf42f812f817339cf285c99fe1d17497a","ssdeep":"","tlshash":"fa41b78c3253fb7c926d737ce0f61a0792fa29a072dcc142a35c6f942652c44c85de76","size":2429,"data":"","first_seen":"2026-09-19T05:04:01.067181Z","last_seen":"2026-09-20T10:45:32.478569Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/vCoMkKPzt6.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"e0c99434653df073e7081baf93b17498","sha1":"200676c012dcfcef57b5a6cc760ae68eaf8eccd4","sha256":"5a56942211e534fa71a928eee3cdaa5b195296bc99ddf9afa023b3c46af30ace","sha512":"8023d98ddcb7e4f39b7c381d879b838512d929c7c5e6ee69331549907deb11ed824bf7f8221c7a21fa0ea0b2251e398aac2cd8c2af8bc418e9793898e086bd32","ssdeep":"","tlshash":"5de0ab0517902ab8b9ddc7c43c58420116d330488949146c3618f9f0d5f3cee32ff032","size":424,"data":"","first_seen":"2026-09-19T05:04:01.069476Z","last_seen":"2026-09-20T10:45:32.439123Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/5os7DfMwMH.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f1c0baca66076e22c96a6d7cf455dbdf","sha1":"eba4a34e73fa6ba016f2484d2f7a7471d8637f88","sha256":"9869fa8c89bc1e03444192e15016b67423eafa335b0477f181a0c20fd58253ae","sha512":"b70dc5933c4c100016ef86502ecd91904fda8457035944a03b5eb7384ad81c390800b24783b583539d131f93c27e81e41bc0c799249f0fc9c3f40d6611e5ef37","ssdeep":"","tlshash":"4a71c667f21ad0799fa781098b2d593c170a61dcbbcac1f8b92ea6b101d30f94547e34","size":3593,"data":"","first_seen":"2026-09-19T05:04:00.939265Z","last_seen":"2026-09-20T10:45:32.462649Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/1_mm97losW.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"71ed594bdd01b5726bbfc10389df6a18","sha1":"47a0bdc7a7a106ede206d6f42b5837c3d42c981c","sha256":"eb2c59d4c5f77ecf6337dedf06f2f4d31f77e5846ef983d8f0bcd313e36e0b2c","sha512":"847dfba4bde13ce46a6c3e82f875b93ffbc9fbeeba84ec1f9f5344746bffd42026d81d30e5bc5339a0def703e316bb2eb5b5eb9a59941022f55daa00b4e2f8b1","ssdeep":"3072:bxLHBfv7EgZ1UdH4RhPta+XzgJBUN3DevEtoI1:bxLHSgZ1UdH4RhPtxXzgJBUN3DevAh","tlshash":"02f3f9a533aab4635399c2ba54350042f32a78c52d0e052cf57dacdb3da5d09b1faf74","size":170272,"data":"","first_seen":"2026-09-19T18:35:44.696278Z","last_seen":"2026-09-20T10:45:32.489337Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/geo-ui.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e142db64dbbcad95397fd35f58bbc147","sha1":"210cd1466174963714945a32fb74107ad34b9126","sha256":"7a18ff50b54c6772c1725069f56b4b3ba83dbad4592362fe24a8b860efac822e","sha512":"ec3a8671aeed193e0d41f283b7cf8bf6bfc0d3d3b5e24311a4275839609db9fd0f90b2cfc0594ee05487986998a6e09a109e814f753b029bf187604a042f9390","ssdeep":"","tlshash":"c741201da97224668d63213d53eb960c73b260036602da083d0dc74a7f98c3396acffe","size":2382,"data":"","first_seen":"2026-07-18T04:13:48.60616Z","last_seen":"2026-09-20T10:45:32.453593Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/bWymo0P7bz.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"8487d79adcef133ea8ca3f29bd7dfc2b","sha1":"972a9471eee02857d2eb94fe7968f765ca38f584","sha256":"102caf937f0d4128dfd86d86af463e91b7167f3a3058b66667d8a74dec7e8602","sha512":"e757e53e3eba335ded356672acde48b25c5cd26076adba513722994a0cdb682e29a45b91d18a2f6a709a7766e4cb7fbb01ce3617bb43eaede8685c91c8170ac9","ssdeep":"","tlshash":"b661b6daf044e372fe07e955478a174c522030020e5e587cf4ba93f112ebbf52876639","size":3235,"data":"","first_seen":"2026-09-19T05:04:00.956527Z","last_seen":"2026-09-20T10:45:32.494512Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/j3hzcHHtdo.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ecbd840be739691a346386126f512d37","sha1":"0d2cc0ad7086a9eb9853b4a5fe982755f1625cbd","sha256":"5d0d342f79d8bd7a0656d751a6df0c50c5e1a0cefba7f130a94a3ca0d19c91c6","sha512":"b5a5c7db43817efda1f46dd73274f99a1d723fe548cf9c6eef74d939bf3fa597d1e77376181cb2ea2abd85e6664cf5ad972b4f20e31eae33da0bc6db5d206f5a","ssdeep":"","tlshash":"87b022c0f00230b2320200af8f02bc8a83e2a0c003c30b080080838003880e80bbee22","size":126,"data":"","first_seen":"2026-09-19T05:04:00.845586Z","last_seen":"2026-09-20T10:45:32.514573Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/OnMUZouvDW.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"b7592c8a64512312aeea65f01c2af171","sha1":"2a236fe524679b319db4b2fca164b08a43860b92","sha256":"c96677b8d073e3f0b1f12960cb21c78ef55344cf55a4b89ceea9e800b2fd9bc4","sha512":"1bf835ed0f6806f94a2d10a65ccdfe57f852c3ea5d0b3823195cf8fa4440a03c5036412052f8e2a2ac0abea5c43efee0ac30e51e8330ed67b0b6838a4fba73a5","ssdeep":"","tlshash":"51511071b2a9a269f3e441614c3d440332197483bd89052cf1e958ededebcd97abc63d","size":2695,"data":"","first_seen":"2026-09-19T18:35:44.59071Z","last_seen":"2026-09-20T10:45:32.488114Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/script-bottom.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ccd6dc7549fed0a2f80a1bab70fac36b","sha1":"bf66d96ab89cee891c809c24c46595f549414d25","sha256":"9c7f2b0007eeca5197ef0328287d323b93c041e7a121315faa9936fb74e89d2a","sha512":"08319451276d65dfe20c89417d3789900f856bd4fa0cf3d45ecd6e091c9a02a4c13329d30f7973aabcded2dbaf63a5d8c46565cd83ead6abbf002ef24419e7c2","ssdeep":"","tlshash":"9931e03029f80172a037027977ee6fc4a5211872224cfc18b77f4259afd6ae04fa19c1","size":1469,"data":"","first_seen":"2026-07-05T04:52:57.89206Z","last_seen":"2026-09-20T10:45:32.506363Z","times_seen":13,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/IhikR6bCRx.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"923274b24afc7cc4a36a779135ff25c1","sha1":"d7cabeaa43f9bc1ffde68aaaf32ef6519348abb7","sha256":"c3354f31c9f5c5e87f3e2d624803dd34c636334e1581732b6edd5fd55d7e2a0e","sha512":"5a041dfa597f43b39a097d44cc8cad53402026ac7548a00481e23872e4ca25fa3f57bfc4d97c727f2910db8d5011e3072db2967e85dafd6b6e5627650d79c540","ssdeep":"","tlshash":"3d41659737f32a32baeac099dc1198851751209444cd041c703dfde77297cd1b0b9e79","size":2184,"data":"","first_seen":"2026-09-19T05:04:00.886848Z","last_seen":"2026-09-20T10:45:32.509703Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/SBGFACmfhF.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"155c016fcc3e5a8e644c5169ff366d20","sha1":"1095f9d51f242822223c9666c1da9b890289c141","sha256":"e35cc840386d90627bfb3368e48e7e995c3aeb9a05e6831d345c2c8b60c36b61","sha512":"661b4889c7bc950e75e29d7f7df54aace341973936d4f0ff4a7ef2fb77d454c62a36d03953c26edf247786d81660335b498314374f2addeb7180676e1e427124","ssdeep":"","tlshash":"ceb0120107bb44f04206e245c01f40919512f24fbf2cc2e871086712c3c70c09c0d930","size":100,"data":"","first_seen":"2026-09-19T05:04:01.100684Z","last_seen":"2026-09-20T10:45:32.472529Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/GhTKbY-38R.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f5e02663bb95adb27758fa28db2c2182","sha1":"c846afa84199374079d2ebe4697f0db17ecd58e6","sha256":"b8c91e7202e35a8fa9c7a3e7c0188efa096c323b2c8f9100d05541127df3d38e","sha512":"0c5d7ad693f9c9d942b3eef75ea9a242c5b7f5f932127c4530e8e1dc89eb216bdc0d663146a5079647c1ce95cf3c20827f8f929e466e336f4d892a782e897e02","ssdeep":"","tlshash":"2551b7ada255c47ccee6b01606a48a4c931d245cfd668a7dfa9ef1f007c3be40c92338","size":2715,"data":"","first_seen":"2026-09-19T05:04:01.038921Z","last_seen":"2026-09-20T10:45:32.455442Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/a4MGWLHy7a.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"754034716e1c55a52ef1693b730da277","sha1":"6fb7a6b6da9a7b6912bf38229611f3b4e0b683f7","sha256":"323f16cfc7c0895ebc233e19410f1cf1d31b508d86a454b3ac92dbebd20b7418","sha512":"9d99c3ddc6545dbf6886abc0d04d0fd5f844bdcff9e8869cdfe9ae4053075d514e056ade7d0bb53a3874b30a2576bb6392f6e941a054a4d93b3ccaf212dae4b6","ssdeep":"","tlshash":"814132a1338267563bb241530c668346b32d1c93388d153c79acadc72a679e9b0eab75","size":2435,"data":"","first_seen":"2026-09-19T05:04:00.998099Z","last_seen":"2026-09-20T10:45:32.481249Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/fpEnGU-zjN.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"a345630707375b10bd468d0124170d6a","sha1":"46485dd37720694809540d1a85814db2a0e82e2d","sha256":"4226ba6f0503776efd546e5f371e14f7c5cec9f3188304a6b03ad68c63eb8b93","sha512":"2c69d0d2adbe2d01b6e959e2cdea26c5184841e0c3c66bc932632ce283a36ca98eff741710eb13b179f11ac0a89010b8bc73dfc1916aecfa639ab7b199236bce","ssdeep":"96:ml79PtyPCP8aOWr8s70Wj7xystaSa6aqWQ1xqs5NEVt/Ef:m5WaODsQWj7Is8Q1kKNe5y","tlshash":"7da1a615d282533a0cef105ece2028638335b488f9c6d17dbc7aa5eaa48b5dd3f96735","size":4660,"data":"","first_seen":"2026-09-19T18:35:44.650553Z","last_seen":"2026-09-20T10:45:32.448141Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/js/lazy-analytics.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d27f3444071fb33d54a108a52e956af9","sha1":"f301401e1203543f7f85f2685389f52f2ea2beb3","sha256":"a4bccfde5a153a7ec568ab723a792a97d9bf2dff76429a7a0cc2cf3509025f9c","sha512":"f919fb7cccc4a9f34929d03da8ccc9a302a17d822b79da3352e18fe82f7742bbb08f79a4448893a0a136e2551d63b87c3ad7cf9587b00775fa3293c61ab2e0af","ssdeep":"","tlshash":"3b51bc096cbb643301b7e13dabafb109f5311607190598603d4d8309af68baf95aebcc","size":2476,"data":"","first_seen":"2026-07-05T04:52:57.876973Z","last_seen":"2026-09-20T10:45:32.457225Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/vendor/js/uikit.min.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"749a2dd79038dfbb16587c3067fb9291","sha1":"d1ab89b4fdace3c084baa45bc031ee29ca84a788","sha256":"9523eead7091f1929fd1c309a8df06cf02821bc7ca282f5d086d5ca2cdc164e5","sha512":"72b90e5809fba9e10b4cbfcf29656ed41a37ebcc674cd7b96748d84814a589ff1d64021a52d2928f8bf5a7c6a41041044606a1729a4b50b33e8170a93dc66d1d","ssdeep":"3072:NFR0qgTMS7E2qsR+0HWH83vagarqnlXN8O:NT0t4So2q4+MLabrW","tlshash":"0ae30a9733a5b02543e742f510ab4606f3395984b80b84dcf67caada3869849727ff7c","size":146716,"data":"","first_seen":"2025-04-08T10:05:49.344419Z","last_seen":"2026-09-20T10:45:32.466278Z","times_seen":2908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"92f998a876b9f93e6d638e674280268c","sha1":"6cf674eda5300b0e385ea4b9de0849b2072ff6e0","sha256":"41c69cc10fc84f376127f2d66509c591898105a2ca959bd49832a91137dc47f4","sha512":"8936550c1d91e274c28f62c0e560520b973020879d81cd1b91d946c2989392eadb51078f76286c6a9caa62ddc865db10f81cee3a73e32ead86c727b69f9e18f6","ssdeep":"","tlshash":"bf519896f340a47046a9d1d3d529a453c304a9d8dacd59fd3cab91dc97ce0c2e4ee732","size":2883,"data":"","first_seen":"2026-09-19T05:04:00.910743Z","last_seen":"2026-09-20T10:45:32.513906Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/ZKk0q2WCjH.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7c6afbf30e80e41b5626d4a8d1d7ec2f","sha1":"84198f518f6104587df0e435b1e3a605259927ed","sha256":"c55ef9506170b50689a65af4552df712b5fd4b48be434347cf45da577abbdf5d","sha512":"843768a74a9e8fba46436f63af11398d2562741d34886a09796fab104aa54692852fe29d8ff37b84fe9ee662ac716e92c4a9e21f3794ea90e8cd1c6cf588b05d","ssdeep":"","tlshash":"7841bde337b62e326ae4d0f9ad196a484307714181c9480d707eddc2a29fce1f475b75","size":1941,"data":"","first_seen":"2026-09-19T05:04:01.046431Z","last_seen":"2026-09-20T10:45:32.50119Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/fRVDwUO_c0.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7ba172d3dc35c2ec303f736666d7de77","sha1":"5e24672bc69ccde124bb4061db1ffc104aa59c85","sha256":"4c245ca356601136e8e8ce0d5cc42df6513eaa573ed979ca27afcf602bc3080b","sha512":"22f724466ca023fa601c82fd2d30eeb7f627ef9d1901a3881a45c5a062651b5df34ff1384cd18f51695869e6626dd46c33243d1afa55de2ba2d777476d184b59","ssdeep":"96:0NikdVbkOWXGxy7Gf19Fc3JEU5oeew59QFtyC7cD0ex2CmZ62H:45kOgZqvFclrem9wtyz9U62H","tlshash":"48a140676305133436eed059dd185112e3243584794e42bcb96da9d23a8fecc3ae4f3a","size":5050,"data":"","first_seen":"2026-09-19T18:35:44.722595Z","last_seen":"2026-09-20T10:45:32.459835Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/data/geo-reviews.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f33490454a0f1b28c4dc27c1cae30c45","sha1":"0006496d1e433236d0374b966035d5dfe04b815b","sha256":"96a38ba5601f9e8d65a4a4604bdebbc730542b5dfda2cca9711698c06acffb3f","sha512":"da1f54309eeb9674523852658e077b1b5f46127dca639031d73f473747a80f371d73754f9d2cb0295d6bcbc7a427ee928eb760f76396c30cc0b9d40b2e6d21d8","ssdeep":"192:1FJZa8hVkOXmD8rbJRZhJ/Mcy6spHDFhd9x4LFCc0/rCRZcxh6Qhh2:TJZaSkOWD8HnaHD/9+LEcCmZ91","tlshash":"8542722ba19412075cb3d0352d1f9585f36923af1d84ed69be8f412e6f2d83d92b9dc0","size":13044,"data":"","first_seen":"2026-07-05T04:52:57.855391Z","last_seen":"2026-09-20T10:45:32.484174Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/RDMBUP1qX2.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"2e9ab9c38a4dc27bdd8cd2834a17005e","sha1":"88d30bc73d89e8c96d5d800ee1debfb8762867d7","sha256":"4d8bdc91d7646653176fd49cca6fcc1c79060ea4bf267478040c5ac35e1408ba","sha512":"853ccec9e650f2dacb18badae53655f75339e5e7aed23c913b2bcfd9630263aabbf05b89d8815982bd9004822e867c75021d3a76f4b5c59b8b6fea4c3a3671f2","ssdeep":"384:NJ+0Cvb9uCrMKoK1kvVrBfAeSQWkeXB8dk4XH0Pe0DpE:NJ+vbM8MKoKetrBfZSQWkex81kPeWE","tlshash":"3eb2b39233e9b4b347d9c1979c32451bf3527098382d442cb66978ff6468e82a1faf71","size":24933,"data":"","first_seen":"2026-09-19T05:04:01.080738Z","last_seen":"2026-09-20T10:45:32.488734Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/xime7DrNA2.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"677e5e1582c8a36c5cd06ef01acc2fc7","sha1":"141a5fe6910a2b2685249bbe4f09b7a2c68a9fb9","sha256":"94e0cda99b1acedd72ff5b41137c7c9f0217cafe4497a02ed1ccf1831486067d","sha512":"abefb3a0afac1cb9f7b22a62ad59ca0e4d35c35ea5b9e035d26171f4f7d5c8adb423102197068b0737daf3787f14de3082dbca29136ad2e1a9e734c3c366ed03","ssdeep":"","tlshash":"2f41c502ba13e4f60a471172c476a1a15b268a4ceb55c0a8fc4536f41b8f1d4dc7e73a","size":2062,"data":"","first_seen":"2026-09-19T05:04:01.070933Z","last_seen":"2026-09-20T10:45:32.480229Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/data/geo-leaderboard.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05769b815234d8341d08014f54aa32cd","sha1":"479cc98195f7000aed1e3b50e7493a3763b79385","sha256":"0303cff23bc2411575b5b2238e83c72bd9625545dc86d4302c628b6701ea8a3c","sha512":"061c86dee9242897f6eac96b28d948b0ae1e8c91dbcd96a06e5c81766eed5f478a19a3dd2d5f151de9bfdc8b8a4aca3061ab2bba822fa5908153da39611a6c09","ssdeep":"192:nbDUJ/iQhpeGO2iySLSm38jcRpuXCJBXii:bDUpiypbO2+LSmsjuuyJ9v","tlshash":"c52276f27042f4e3d034c4752dab14b692bd0b9724e6979a3bce013e7b0c85e91b6d96","size":10837,"data":"","first_seen":"2026-07-05T04:52:57.92269Z","last_seen":"2026-09-20T10:45:32.473097Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/EBskeJNhq5.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"69a51e5fd5a8394742e7ac9da280f2ae","sha1":"4901a3dd571f2c635cae88ba1bfa675ec321f800","sha256":"0c167cf0ab9db11fa3fd5a5187db03da3df2d9ffc7f0526f6f63a352a41d5787","sha512":"a3b79abaa583299908032c764378c6322db4ce8a3e9a6a18f4a8b5f7f5d775c8aef6c81ccfd2bc6b6210a754b43c6dbdaf8b3e7d66c130928216f0064cff2915","ssdeep":"","tlshash":"14512011b707f471056b41a6c866e0e6b7229354dba9c05cbc243b6016cfad9ddb833c","size":2905,"data":"","first_seen":"2026-09-19T05:04:00.889018Z","last_seen":"2026-09-20T10:45:32.468856Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/js/main.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6e97c33e3977867f6cce3a575efb79cc","sha1":"202dd19036905d3ab521f3265dac7eeb3bd21012","sha256":"9843cb4e8bd3b56db36e9b269e39f65fa1ca788fa1d6000ac0ceda78e6276d79","sha512":"38599c1f81bc978842afc18675b19755e2a94d501dffdaab0d5c6b56cbe692ae5d149059d541413661ad6f3abee182f5abc2e4036976ee0cf010e54fba7d3ab4","ssdeep":"","tlshash":"3a315e6ef5bd293204fba7b622dfd678766100436448ce013fad86c04f919b499e3cd9","size":1509,"data":"","first_seen":"2026-07-05T04:52:57.889989Z","last_seen":"2026-09-20T10:45:32.448709Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/Ac8Zi1vSod.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"088bf341db755e467e9d0e88bcf412af","sha1":"4628d3fe9b5a7ca5ca772f9eb75d49f48aad9ac9","sha256":"1146d160f945eee5185f9663c4216a535739b6f422db184869c6093d50b0c69b","sha512":"9b2fa0112f977d472d154abae4704228ba9384f13d97351d5572068a40d538f4cf3797aceef484a2020b4a49b3e6498577f537675718003511c134d1da51e55d","ssdeep":"","tlshash":"a6f0ac393291a37577b585ca5d400896a295609141ed920db6bc20f263eb8d2a4bef39","size":590,"data":"","first_seen":"2026-09-19T05:04:01.079123Z","last_seen":"2026-09-20T10:45:32.444989Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/KhDm81ntxc.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"7394a24ea309a65d6e303b3b9058b496","sha1":"68df89c6b31b07ecbbbb9d4820f72da713731496","sha256":"5707cdcdf71851146fec9cabd5ff553d1be8a05db5b704c6a0a51636df60da3f","sha512":"16763f5a4bb5fc3d42ffcd2e6a1fbe4761193d6279a7b42f4b0106f0a9cbebc8614009d2459c10ee1f3514e953a39006da475a34913e14304e076f9e6ac1354e","ssdeep":"","tlshash":"b9e0a2ee73873c70232700e18093a149bb39be80b60e8a009495e68aae70474c23ae08","size":390,"data":"","first_seen":"2026-06-24T17:21:49.725855Z","last_seen":"2026-09-20T10:45:32.45422Z","times_seen":79,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/calculator/calculator.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d23244a364e86a8c7dc36dfc7bb090ee","sha1":"16cdf90219917aeb698bac52e0b1571ffd04459e","sha256":"a4e5b5c20c88bed23776399f679a2f1718faaaf45fb4bb8a02e19dfb430c5969","sha512":"574194bef9a6c139265a4c13e9269d885f01622870a9744d7507f843d2b4e700c8f9fbf7e8b39a130a39a57c628e58e6d15dcd0547b83c95abb000ba124373e7","ssdeep":"192:T/wWJFhsV4KrZ0dNJDraU1K23Mufj35SoE:T/wUFhGefljJc","tlshash":"f622c7594ee320a36473e27bf7df98057365620b00a5ea00be1e97952fd84444367bfd","size":10544,"data":"","first_seen":"2026-08-25T03:41:53.630491Z","last_seen":"2026-09-20T10:45:32.458612Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/AaOX0epfMT.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"f2b81d3df2e3caa5a3c38b6d3496f930","sha1":"ed520ca1fd3a4ad590621af983288462eaa59ecf","sha256":"1afe938446879409c91d00bd76384ccf3aad441dd850e46589ccb027269bc07c","sha512":"4ad2e9f75ef072175b3826a10f341822541cf92324fb51300ca2162bf64723912bae6df7a32f481d2be9ae2f052fb70f94a205067d5e1cf634565e5a306a2fa2","ssdeep":"","tlshash":"b631ee133a50c23af892d24b5d6622458346b608d5b6c4fd7b9cebf20587eda3a6c734","size":1833,"data":"","first_seen":"2026-09-19T05:04:00.874152Z","last_seen":"2026-09-20T10:45:32.495105Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/script-top.js?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff9de0a537f4370a36e90bcd10c38883","sha1":"dfc082f41110018c4f519b70cc753e4e457b5ec0","sha256":"51d2ac650d126800a65ca5671d2551e51fdcdb6e2e7759b65b7c59171d4dd1e9","sha512":"6a35bea85cd99232674c4efc94cb9e0030cb7420ced82f7b5a626279530f653db447374e3a8d4fe1455bafe14335c34f309b9b307ebe7ea929c9be7c69c3c48e","ssdeep":"96:ikRO4HzxYresL7YI6wNvBo1v8HCGiGxHLG+84CSkfkVuvaatTaP1Ro/0KbF3wrIY:BzClL7H6eH9jnESk8VuCatTe0bF31A62","tlshash":"02c1fd0925b370728653209d5edb528cb631a0173249eb4a7e1ccb805fe657b86e3f8a","size":5960,"data":"","first_seen":"2026-07-05T04:52:57.857195Z","last_seen":"2026-09-20T10:45:32.496216Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/office-flags.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5525fc56ffadad27a827337249d56eba","sha1":"bc61271717fd9922fe356282f869c279402e071f","sha256":"3e44929987f063235c56f06423bc367370ae70e727a409632c9ac71607abb97d","sha512":"5181e65bd61f29f1d344c670841670e5358aa9edd22b1dad6f939bc5a0e40a5d7d0a9e4ed1b4e2b17ba3446664bc7f1f5ed05e723ffb081ca4572ec21e744590","ssdeep":"","tlshash":"c541802e6ae6303b1c2b42ecaa5f5087333a74a7100bdc04388e836c6f8097562e06d8","size":1887,"data":"","first_seen":"2026-08-25T03:41:53.433022Z","last_seen":"2026-09-20T10:45:32.460444Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"c2b4fb6466f3847a8b03d8bbc1f135f7","sha1":"b8d538a583cf84a421dbd4fb53a2f5f265cb1d47","sha256":"7107c92b0e060e08264494aa58fe33c9f28f62412325c5be5641d1a78d5c3eaf","sha512":"f9105cafce33f68e078ef9a298dfaca6f14fe7cc9421260054b88423cadd7be15ef7fa24f673c8b48505d3f94499c41ed7dad7830cfba68775cef930db8eb7bb","ssdeep":"192:muNt6dYYPrIsjKDEgGSLLUKATm2mI2EWeHgGl6GlxF9feCsTlYmGIdX2MMZRmLZs:nv6FKLLVATm2mI2EWeHgGl6Glvo3ZGIo","tlshash":"3602d912f9d1b1769ba242328e37181d5728db18e22681fcf4d5c1f4038f6d5996df3a","size":8268,"data":"","first_seen":"2026-09-19T05:04:01.052001Z","last_seen":"2026-09-20T10:45:32.495641Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/252X1Ocy0-.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"ff8576d1f74e3701ffdae7068a0c3260","sha1":"006d446cdf43cec3d4c7a0826f9017f9ec643a68","sha256":"dcbfa56b268ebe03f3e6f1e05c3bafa3118cf1cf61debbf6dcbddda5b3f95698","sha512":"a2865dbb223cf027dc1a347ec24d19f4ec6aba4e932ad5e8c34d1f931d21be6d6f3405bac72d8c4d94b051bb51fe9b3b15920004083cf19e10d3f300a22c067b","ssdeep":"","tlshash":"a5311547f031e270be7545a28054263baba9b8715a17916cf71448d0b75a8d37e3ef31","size":1722,"data":"","first_seen":"2026-09-19T05:04:01.082148Z","last_seen":"2026-09-20T10:45:32.480735Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/vendor/js/jquery-3.1.1.min.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","size":86709,"data":"","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-09-20T13:09:26.871544Z","times_seen":167634,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/vendor/js/png.js?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"54ab5c4cfcfe16c2e795964de121a0d8","sha1":"19556801cc6b68f0e11081a07c6781924bc0bc65","sha256":"30625e824b8626a4aeac6ebcd2ea16de8353a851054e7d522edd590e7a531835","sha512":"4e6700c168994ca42148b7b76c05a612a025db7baab9b6700e02232a839ddf97f5c164b4834f83280e90aa7f257e891e30296db0f57f7f45863af34529909453","ssdeep":"","tlshash":"24e04f610085801f5ed00cb931ba1ba4c792620e8060c2ad38ea8e69fea0ce0303aca0","size":358,"data":"","first_seen":"2023-03-10T00:04:39Z","last_seen":"2026-09-20T10:45:32.504924Z","times_seen":925,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"en","filename":"https://zephgain.org/script-bottom.js","line_number":25,"column_number":11}]},"http":[{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/es.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.113Z","timestamp":1789901076113,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/es.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-1b6bf\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=o61ujJoSrBbepBBVTl%2FkoI6SGXhVJbfDEBd8WYKI22hWHYXJ3yMa3gqdsKz43LeVtNN0HMiTqgjnt%2BvVDdrAEmfdtv1hRJ6c5LtfhwmswxD6%2F%2BjIoJMmSa%2FX5OG3G6A%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dbe94b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112319,"size_decoded":74811,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e00ce59428927284366e58e96c8cbb11","sha1":"b8c9416c9539405dac43f1f84dcce1d6ffc1684b","sha256":"8144a4ab1822dca70e28d9dcf496a12beaf292cbeb009d37208c4ed15f14554f","sha512":"854003116025b2f29e4bab106fede048b7535d0006ea352bf57b6e078898bb5dcf28817b28f15e21dce4444db2b7301ead096b707d8336d7f715aa2ecbde0f96","ssdeep":"1536:tz7F/oiKGLFL/DWApNvWmHUvsHifhbOI1FnX1J3WIZtMfav3wYXiXq4/+SYqyfJY:t3FTxLyApNaUCb3HlAILlwWi5x8J4Lr7","tlshash":"4fb39eb1c28e77f9ec75fcaced489d034c094882a15ac5cea949d3b2177b8a94c0ed75","first_seen":"2026-07-05T04:52:57.843594Z","last_seen":"2026-09-20T10:45:32.437797Z","times_seen":18,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/shape-01.png","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.148Z","timestamp":1789901076148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/shape-01.png HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-82f\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Iodk0najfQMbWEZgkvnrA1joA4CdWhUJMO0PtBo3e8aT9nLik5zEELBGuxo3Lnw3aONukTJ3cAmkYFVIJkHJ%2FrV2tRfB8PHIHKJVc4d7XAqF77uhiP5FND1PAYkKH8%3D\"}]}\r\ncf-ray: a3e03c5dfeb2b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2095\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2095,"size_decoded":2846,"mime_type":"image/png","magic":"PNG image data, 135 x 135, 8-bit/color RGBA, non-interlaced","md5":"97f200d647fc0084df2e5f2693808ab0","sha1":"b89bbd2efa3d8420d003feddef25cdba90944013","sha256":"9b2db7e9abe44409d5e2e26da4340428646b53007ccbc5019ebc7e1eb64182ce","sha512":"b08bfd95747458100d88d4f28a7de11c46acccb813a2b891a801c8b323e25ead16f5fe60dd7e289d02b51e22db146ac7c220e356aed607d3ccb0c4c976a46485","ssdeep":"","tlshash":"82414cea01cafd0ca1dfdf3c82a23095747cc99d4e13e51ad40da71b22b02c4e91b904","first_seen":"2025-03-03T22:55:46.451256Z","last_seen":"2026-09-20T10:45:32.438532Z","times_seen":2894,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/vCoMkKPzt6.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.286Z","timestamp":1789901078286,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/vCoMkKPzt6.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 424\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\netag: \"e0c99434653df073e7081baf93b17498\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177623\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: J8TZzp3w7k1BoxnpGa-bsc8gMbedxFJoehjoo4FZ3P46UVZ6PuC-QA==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":424,"size_decoded":1238,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (424), with no line terminators","md5":"e0c99434653df073e7081baf93b17498","sha1":"200676c012dcfcef57b5a6cc760ae68eaf8eccd4","sha256":"5a56942211e534fa71a928eee3cdaa5b195296bc99ddf9afa023b3c46af30ace","sha512":"8023d98ddcb7e4f39b7c381d879b838512d929c7c5e6ee69331549907deb11ed824bf7f8221c7a21fa0ea0b2251e398aac2cd8c2af8bc418e9793898e086bd32","ssdeep":"","tlshash":"5de0ab0517902ab8b9ddc7c43c58420116d330488949146c3618f9f0d5f3cee32ff032","first_seen":"2026-09-19T05:04:01.069476Z","last_seen":"2026-09-20T10:45:32.439123Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/vendor/css/flag-icon.min.css?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.061Z","timestamp":1789901076061,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/vendor/css/flag-icon.min.css?v=1785822802 HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-7e34\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=81znNJDohTFhy8PIb1hO6LAWyev9BUmm0PDpvNQ3g%2BGAzJaOQnCb%2FPHKVv8RaeQKf3Aec9bIdXNcTiydx6KQBWqgw6U48aX93HRs%2BJ0NKCPMSy%2BtMkq9jwJVs6KWhGc%3D\"}]}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d6e6db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32308,"size_decoded":4013,"mime_type":"text/css","magic":"ASCII text, with very long lines (32308), with no line terminators","md5":"c2d430726aa37ee31208421f7f842b9a","sha1":"4fea60dd95385b9eeca5803a59ba0e503fc15024","sha256":"4b16ac67cea474949eeae632d6762640fca93e106a18a04f5a3c1f8b996eb7be","sha512":"fe9e3b9dff151aee1c8aef29b58832c67d69b292c902ddf6257a09043f2d1d3ccbbe95157dd00244a67b9042756e1badda8157d56965ef87c1a30549221d8a37","ssdeep":"192:s1m67y/Ffi/UWOsWwK0Un6+PTl10N9bgU8Qm6Qe4jSLW5b1Di:smJi/UWOsWwK0U6+PgN9EU8sQe4EWZZi","tlshash":"89e2ea12da83e21f36074a737a36252da70f2495fb855f3b24af56f161b82483436fb1","first_seen":"2025-08-05T12:36:31.298367Z","last_seen":"2026-09-20T10:45:32.439679Z","times_seen":18,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_2.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.135Z","timestamp":1789901076135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_2.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-54a\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WSOiXIIvi8pPCXwgy8qHaAZSbvdE%2BB6oAhAb7JnQRXSvkVlt2AgEPldmmXhPyXfQOCRr%2FL8HrDp12kaOkUJHKBgmL9ZUbgeG%2BJXC2ZTs8grPIgsN5iyW08FN%2B9PXWBg%3D\"}]}\r\ncf-ray: a3e03c5ddea4b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1354\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1354,"size_decoded":2112,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"339a7cd4d46995c96be88bcdfe4e4bce","sha1":"3e8331c7641584a933fb73490b8f519b6ab4f77e","sha256":"e3dcd25054d389bb6cda29ea0391be62039d4456ea9d533c0e63f8a63f88a4cc","sha512":"a6e5e8ab37d518617698787387e18b4c37917b6b9ee1718c40cd524b84be9bfbea9ecb058eb3011adf6533d38e885332f50982091e9427dd9816434a95222c4e","ssdeep":"","tlshash":"af210e51a23212f7053dbf09ccc43d95d30711656c18d06cec7bf55c650d938fa25283","first_seen":"2026-07-05T04:52:57.886988Z","last_seen":"2026-09-20T10:45:32.440236Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/geo-flag.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.390Z","timestamp":1789901076390,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/geo/geo-flag.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-47b\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HRb09IDe6sEbLCmVBzBvsZD3aP%2FgWj6tmlcrYMH3KJnUArWJf1sO2C2tt844JIh2PJ%2BSf4BH2%2Bqvpd%2FSFNEk4HXQdVp3y%2FIdVGA3yI7U3dhs3PsiCcQ3klq18RoaGFg%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5f7ee8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1147,"size_decoded":1340,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4356e963f78e4937cd1e0dddcbbe5997","sha1":"bc8d412d4608c04ccb9dcd7780875be304b5e3b7","sha256":"3af01327aa9b196c1313f25b4bd7aaac0511d84867a9b9fef0c84320eec69d52","sha512":"808952959c8445ad7ed1f15deac91987a299eb39d6a058b6df7bf835f10ec67e8660e5ec3750977b2c2f9732cd535b173704a8b1f253bbff7bd5bbe4014f0c62","ssdeep":"","tlshash":"0821af2dbce3247a8917f17824af404972b52023110ddd057d0d85589fa95384af47dc","first_seen":"2026-07-18T04:13:48.526404Z","last_seen":"2026-09-20T10:45:32.440954Z","times_seen":11,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/geo-flag.php","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.625Z","timestamp":1789901076625,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"POST /module/geo/geo-flag.php HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zephgain.org/\r\nContent-Type: text/plain;charset=UTF-8\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 6\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"flag=1"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=3600\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sO6yviqYxcm5L2Jw4%2FCC2upNPzlA%2FviBFIyTp%2BNjdgxO%2B54vdt21LSMyLJY%2Bx2CHhQwBQI8JkLUvBFUdNvaF%2F0BnbpH0YGV7O0fh1ju2G67PfnrYTAeRwdcxvdyqTac%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c60ef0fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":800,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e3cd8e76a5e65d2cf628cd4a4ef078bb","sha1":"4ca39515670a7c180669f926c5ffd364a0e6943a","sha256":"62066eed681df125545919a4f0a5f3b03a5b83007bebcdefbb6aa37c6844556a","sha512":"5f16fe7eed47b9fe71f363f7bf3af49082077d5687184ae9d533cc93aee3bac83111953ce3576786bcefdca98a15012faaeb31d44dcd8b4db3dc8b3c7cf349bb","ssdeep":"","tlshash":"738000082a220a2aa8288308200b38000a8c8a00a2020002e0c83b08c2220ca2000088","first_seen":"2026-08-25T03:41:53.390114Z","last_seen":"2026-09-20T10:45:32.441751Z","times_seen":7,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_3.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.136Z","timestamp":1789901076136,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_3.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-4b4\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PHL9c0phDXPe4Tk2SD0CIJAXRY8GUjvI14H2Ojekb5hRe3JpWvpeu4UX4Y4uleqJjsuQWaQy%2F9%2Bh89xBv%2FMZFKEScG%2F%2FCX9oeh4D92XVBV%2BeCSfottRBMmrVr%2BKhWjE%3D\"}]}\r\ncf-ray: a3e03c5ddea5b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1204\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1204,"size_decoded":1968,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7f85a762233c0e709070a6cba7547add","sha1":"ba34b26a1fed5b6cafbaa5ba31615dfbd6af3d2f","sha256":"b7560d59c0782d46fcd215e6bbc045ce0af02faaeefdf428893f02ceb6de625f","sha512":"68c3fdc307208686203835eac6d22076a7e709a1e99bccb5da6b47f49332995237a4a002d1ae08d0b69817325f68ee6194d86fd6caf067efe3cfb291a75a2fd6","ssdeep":"","tlshash":"d821b7a667f287b0442adc2e23e4270ec7af3a18545ce81128b2ef640f8d894958044e","first_seen":"2026-07-05T04:52:57.848184Z","last_seen":"2026-09-20T10:45:32.44256Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_9.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.143Z","timestamp":1789901076143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_9.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-47c\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6U8QC7oReQcNb9TcxZSyCEZmiW7gbjJ8E05X6g7k7eNtv05IK6Loz%2BGyx5mx9hBwJDFpmO4JBaA%2FfJpjTkwkT5u%2BVLBNcROWKln9m12AcWBFvMZvvbUXa8kc0lEVW40%3D\"}]}\r\ncf-ray: a3e03c5deeacb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1148\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1148,"size_decoded":1904,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"df1cf5c97ea74c10df631dc6c45ad841","sha1":"0971b3c0ec2a7813e3951bdcb998f5bc860700e5","sha256":"cc8cf46f1b2dca6a3c57e411b1be7758ddce86140add1f97f0eee5e88459b3a7","sha512":"405136330f336cc8f64e5a248063b3e7bc1193cfb4903afce2e153bb055b2f1293537ca5b84e905e95db046d883a2725493ced3b1a9ffa2bea8e5113aaa8f527","ssdeep":"","tlshash":"9121c6cb79ca59ac94284489638c1b96e2ef366b41245902c3f06ba644f8ec4b9f2d18","first_seen":"2026-07-05T04:52:57.916752Z","last_seen":"2026-09-20T10:45:32.443596Z","times_seen":9,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/no.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.915Z","timestamp":1789901076915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/no.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: MISS\r\netag: W/\"6a717e52-1a8\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B8T1aBo%2FVy3bUhdFKOX%2BH8G8n%2Bm6vzfFPzHpSfh4n%2FRgTcYckmuACjT4A3SzLEa3ZnGRcbdja9i89cNjhaNX8Z8ZN%2BgluL1i16%2By8%2BXUIQc5Nzw2S5htyd9h4tNJKn8%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c62bf34b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":424,"size_decoded":1020,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ebe2b7f4aefa3c8869fa9f0a402210bb","sha1":"dc0ceab0f048a8c8ac97e3277f2ed237b974f005","sha256":"7021694edfe47096e0aa9a5ea85a6851181f723ae3a8806779a8e01702325804","sha512":"f176bd1aa2416960b0eec285da0b91e983a162a1d475bac76786b33ab0aede45783d422ce4d909b62ee6e6ba1fa55bf5b6b6ffcdf2463e305941e2d804073da5","ssdeep":"","tlshash":"d6e0e5809b9d1a6da91283a41ddcb885022b70e6328c0ced658dae987f412eaf466264","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-09-20T10:45:32.444319Z","times_seen":4790,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/Ac8Zi1vSod.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.284Z","timestamp":1789901078284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/Ac8Zi1vSod.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 590\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\netag: \"088bf341db755e467e9d0e88bcf412af\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177623\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: 9JqFXUjJrVHCFY63Xs_Mul5lsbjUT2XEUjb20EfZ4m5D7KiushfCKg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":590,"size_decoded":1404,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (590), with no line terminators","md5":"088bf341db755e467e9d0e88bcf412af","sha1":"4628d3fe9b5a7ca5ca772f9eb75d49f48aad9ac9","sha256":"1146d160f945eee5185f9663c4216a535739b6f422db184869c6093d50b0c69b","sha512":"9b2fa0112f977d472d154abae4704228ba9384f13d97351d5572068a40d538f4cf3797aceef484a2020b4a49b3e6498577f537675718003511c134d1da51e55d","ssdeep":"","tlshash":"a6f0ac393291a37577b585ca5d400896a295609141ed920db6bc20f263eb8d2a4bef39","first_seen":"2026-09-19T05:04:01.079123Z","last_seen":"2026-09-20T10:45:32.444989Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/css/custom-en5.css?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.059Z","timestamp":1789901076059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /css/custom-en5.css?v=1785822802 HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-c83\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SfcSxszGTDgiQNDCC31gwOwD63RSY4wzYk30DHKR%2FclV0SgSeaZAuIu5JQ6LIjA0%2FuhC9SBfLjRsOWETitZc9EYiXPvBdoAWPrToqQSiczkoGdk86EDwvNILDyQNQhA%3D\"}]}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d6e6bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3203,"size_decoded":1760,"mime_type":"text/css","magic":"ASCII text","md5":"41d1afac5fa631d57f6ea119ebd68b27","sha1":"6dad5c66f435f9db4cab35dac283684c1e3084af","sha256":"99cf145b0c121f46b468814fd3e08c59adb07b83d554fb3301f92c8236d8c4c7","sha512":"3ae6d522d86fe8eb6191217abfb5466b1588662fe420bf286451bfe728f8de351cd0cf73bc0ccc2ae36133bda26ca10b360c3f83ac075ac0243720f941f3ea1e","ssdeep":"","tlshash":"f661fe8226633404b40b54bc37daa629213dc043922ece5c7a6d72ac9f5d9f16b73bcd","first_seen":"2026-07-05T04:52:57.909734Z","last_seen":"2026-09-20T10:45:32.445616Z","times_seen":13,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/hr.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.115Z","timestamp":1789901076115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/hr.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-dc0a\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iN50s4Bkp9u3pGAGftzVPQmXWbKpdJAFCq%2FeiWBUZ2nz%2BUXOYSQsgaOYnROJPA2gcYB82JqIHo4Ru%2F040W1Itr3EWYpbG9hkENCvNxGfMQSVZcPVcyrs1wKF%2BFC35UQ%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dbe95b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56330,"size_decoded":36389,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f2d6a01e6484d4a56335187d802f957","sha1":"1bba652beaea5493033e9fcd7035f4196f6499b8","sha256":"e3ade1edd7a8e12d0720f44984473f91007891fe9ae39c85457749f8a0e612d1","sha512":"cc2849c96299b1c1c08d46982bedf102d90487a2824826658165646b61b11a9e4c5c46ba4ee31b3aab45d1a3cbfe5e7810aaf172403c0f2fa85055e2d7287644","ssdeep":"768:dU3BB/dxVkvqkeZM9QpYEYoUuUmi56+CMkMw//mYaylsP+ihMPpG227+:q3jdnGP9AYEW0+CMkD/ay4MPp6+","tlshash":"21436a39688ead2e3376098ecf12117d9dda65dff24486cf688f31edc33a4154a21c91","first_seen":"2026-07-05T04:52:57.902436Z","last_seen":"2026-09-20T10:45:32.446213Z","times_seen":17,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/background-2.jpeg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.436Z","timestamp":1789901076436,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/background-2.jpeg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/css/main.css?v=1785822802\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-13300\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7OqHJ7vbGy5NxyB2efnHQOcUzx%2BXtT5j4BTJrn8mDiBju9VqAS0d7ZiCAxYn2fDaIu1gIOTej9UsXt6PjTrX3keh%2Fo41UeRMokF6bAQ%2F%2FfSB98i564NFrNBiA%2FjK8OI%3D\"}]}\r\ncf-ray: a3e03c5fbef4b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 78592\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78592,"size_decoded":79355,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1280x675, components 3","md5":"2a4552b1347988124cc84773c1c4d366","sha1":"8f07060e12843f32dd3aa2b5f2039a44dc3a8d7e","sha256":"3ccb544dc9333afd9463709c4b1bd20ff1d6873a98bf791e20bfe86a5a4d73c9","sha512":"d94f5c0e1756eb9f707c42fb34b1b1b8d18386073aa62b24324f15513a1d40b7d4cb6fd8a398cad405938e951b1d08fc467b066d7dca0b5ee33b368967992bb5","ssdeep":"1536:F+lJyh2rIOwBR2A5qdDwfS6alb/wclZTYo/icgll0w+w/ysSqBNXAvPr:iJhkOy22quaoo6nl0w+ls/ij","tlshash":"ac731219974160fb5c128d29b55a8b86aa4d04c1346d300df870e3af8bb66f8b796f73","first_seen":"2025-03-03T22:55:46.451962Z","last_seen":"2026-09-20T10:45:32.446767Z","times_seen":2899,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/calculator/api/geo-fx.php?lang=en\u0026mode=geo\u0026_=mu9ovxmoc4kqqzr11t7","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.493Z","timestamp":1789901076493,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/calculator/api/geo-fx.php?lang=en\u0026mode=geo\u0026_=mu9ovxmoc4kqqzr11t7 HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zephgain.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=3600\r\nx-cache-status: MISS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L%2BAIvj8K21vRmG5P62y29rUd%2B4hYU36VVkdCe%2FsASn%2F9LgR5YwaDY4d3vKl6FDbIA5gN2Bn6O9vfuAtUvv1YgwTR8dCGdbb1uSjKX0krAc%2Fi8QAYILcDHWHKpnEFkNQ%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c601effb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":167,"size_decoded":887,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ebb9fbac2e83a2f58e478ef560ae7846","sha1":"ca44d082fdf97674311ee65fdc15604d86bd6430","sha256":"00935123f9f9cec033259246673377311efddebcb9217f2a807d333f3c1b83c9","sha512":"2e46194a6834d872dd2355976a5a3025776c88ee30c5a041f6aef61b5caf61f9d501bed9bf862ee889162129354ef1138ae1d348400343cf4ad4ed766e576e7c","ssdeep":"","tlshash":"99c0800a14544efad128d38238235d8188d4513589678c41c3fc7f5cd7cd1dd004a61e","first_seen":"2026-09-20T05:20:50.508208Z","last_seen":"2026-09-20T10:45:32.44753Z","times_seen":5,"resource_available":true,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":244,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/fpEnGU-zjN.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.404Z","timestamp":1789901078404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/fpEnGU-zjN.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: 50IBtx7EzI8orsjytOeD64l6uGKBM3Fv-5bYtcFrYQwoy-x-Bn56JA==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"a345630707375b10bd468d0124170d6a\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177621\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":4660,"size_decoded":2335,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (4660), with no line terminators","md5":"a345630707375b10bd468d0124170d6a","sha1":"46485dd37720694809540d1a85814db2a0e82e2d","sha256":"4226ba6f0503776efd546e5f371e14f7c5cec9f3188304a6b03ad68c63eb8b93","sha512":"2c69d0d2adbe2d01b6e959e2cdea26c5184841e0c3c66bc932632ce283a36ca98eff741710eb13b179f11ac0a89010b8bc73dfc1916aecfa639ab7b199236bce","ssdeep":"96:ml79PtyPCP8aOWr8s70Wj7xystaSa6aqWQ1xqs5NEVt/Ef:m5WaODsQWj7Is8Q1kKNe5y","tlshash":"7da1a615d282533a0cef105ece2028638335b488f9c6d17dbc7aa5eaa48b5dd3f96735","first_seen":"2026-09-19T18:35:44.650553Z","last_seen":"2026-09-20T10:45:32.448141Z","times_seen":5,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/js/main.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.093Z","timestamp":1789901076093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/js/main.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-5e5\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cmWQWjGJQ7WJ%2Fm2dvuIbw4xO5qIWLIIPLI2rgkXFWii2yE%2FmAIAAmNW3q88xfHl09TtXwYwQ1wcMfjhAWAfIFIOUhyhidnAJ5XXXq7qMImtfgwZpXuPtIG3pW8BimaM%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d9e85b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1509,"size_decoded":1323,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"6e97c33e3977867f6cce3a575efb79cc","sha1":"202dd19036905d3ab521f3265dac7eeb3bd21012","sha256":"9843cb4e8bd3b56db36e9b269e39f65fa1ca788fa1d6000ac0ceda78e6276d79","sha512":"38599c1f81bc978842afc18675b19755e2a94d501dffdaab0d5c6b56cbe692ae5d149059d541413661ad6f3abee182f5abc2e4036976ee0cf010e54fba7d3ab4","ssdeep":"","tlshash":"3a315e6ef5bd293204fba7b622dfd678766100436448ce013fad86c04f919b499e3cd9","first_seen":"2026-07-05T04:52:57.889989Z","last_seen":"2026-09-20T10:45:32.448709Z","times_seen":11,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/geo.php","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.630Z","timestamp":1789901076630,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"POST /module/geo/geo.php HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zephgain.org/\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=3600\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a9wD7qUbNF61xIuKxFlKusFC8gs4S81Nvg3hiuNrA9e12G0fjAwM8TuC5ct%2BvP77Dm7BEvClNKljKLBbbyvF5dh%2BAnWRnPJQXX5oO8OFEthPpvv%2Fnzor6p2qTXu76p0%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c60ff12b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":856,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8b344ee449545a64b071d341fc7f1fc6","sha1":"332a87c571b83193bb34bfbf316eb47183f865e6","sha256":"a8ccb74e4d79e55ecf96ee4d7b6f3335f2a81011c47248689bdd95e3548a0047","sha512":"594caac697a4d9f559dc2ad758158c8efae171ed8d9f4409ef99df33060cd37aa5933d1770d0411261a45c68878dd0bfc8d88940c09946ae064d5c700e4b0483","ssdeep":"","tlshash":"83b0121524ac4f34ef54c157408164ad4f7f42d11203dd47c9fd3e08e2013d5448eb8e","first_seen":"2026-08-25T03:41:53.435Z","last_seen":"2026-09-20T10:45:32.449338Z","times_seen":7,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/br.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.119Z","timestamp":1789901076119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/br.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-13ae\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BaNUqL3uQ9ov%2B%2FxLq5QX2hS28AA%2F%2FDe6fZ0tSybdp8RR1C4cF7JqSxcvwirHtWyYtwOb2Cmfnxk3Pxb8FNpnXSgHpY7UOOAKdgl%2BIA%2FYueoqsdcdL0G3F8mwbqsDvIk%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dce98b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5038,"size_decoded":2198,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"aa1e61dad0a31deba6b118583bcbfbbd","sha1":"9c5b1347557dd57f308fbd4495b1935a89aeefd8","sha256":"6379aeeb756c0b62f4d676e74821b6e4a97652f51fc690ede2a77c7dd48c96e5","sha512":"44380a2f94d762471184e808018ce7050c96b3974f2bdc504d312eba16fd92a650e730da2a51e2602bc7ed2f156d3609008d2e98882ab41f85f849746cf1b826","ssdeep":"48:cg7m1DF+vSogV8XhxbCzD9iW2TLzLaLtLbLHsuNTZTWgUXgJQpO+uPz1QRF4:T7m1Dkvl+9B2TLzLaLtLbLvTEiz1R","tlshash":"d0a1ca21e02e153f592973ccf1edafcf970b8a637203195fa1369dda837ae12c14a184","first_seen":"2023-04-05T13:19:11Z","last_seen":"2026-09-20T10:45:32.449946Z","times_seen":33,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/ae.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.129Z","timestamp":1789901076129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/ae.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-143\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mXcJ3iNjtz5HKgXd%2BWYXyyyxFW6AcA73Gcj0oQD3n4x4zzSncdoBJNeCXl0QTleVuLf2JQPfRWN%2BJAY9Rfoacxd3K9LC13CPTY11WXx1GYh0KsAEEpCeLrBUOXIjYX0%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5dde9fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":323,"size_decoded":927,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bebaafe0fcb225e1823c39c8e26112b0","sha1":"e91118af6e217ac2fd4d26486ff392c7b59c0f0d","sha256":"2eb3d53df8f3f845dfafff448fb165647c8e3ed2b2f08296af1080fece92ad35","sha512":"5c2519bcce972784f3abf09243249f764bd0a3a607f03e84e4b2f3e251301f535c3633a4135364e31abd97175b0e617bcda1a80e01d3b0459d6b4b3d3585ebef","ssdeep":"","tlshash":"dee08c71a2cce408d6009a9a1b5898982263f09ab76a0105efc03e31517f9e7fc2427e","first_seen":"2025-05-28T10:50:35.838657Z","last_seen":"2026-09-20T10:45:32.450537Z","times_seen":16,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_7.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.141Z","timestamp":1789901076141,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_7.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-464\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aJMTBd42HUo0iGEh4FpgbC1fGLLvTdLAsRHBDIN5k0VRz5Tj%2FmVqmUNf5Nc3hiS6yp2ujz7wL615A5p9m71aCiOOqkDAXGPoYsF%2BbxH0kEjoCTp%2Fzv5ibRN4QWfcFQA%3D\"}]}\r\ncf-ray: a3e03c5deea9b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1124\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1124,"size_decoded":1880,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"430e25dbe072ba942900a8fc3e3b1864","sha1":"240ff52c2b34306b179cedc6e099d5b905796898","sha256":"697d699670ed3f44ba1594002fca46ff56afc7875bc8f4f47b6f923ad03db211","sha512":"d4056480993fca9fbc7b9904c019788140cb21fcf252c63d71dd28ee535109747fbbe9663a8c02db22d488424d052cedce727a391a25eb5d957f8198cf55c2d7","ssdeep":"","tlshash":"01219623a1bb5ae04a64fc90bbdd599cc393408d42fae20950f4e4d4276bec14529c46","first_seen":"2026-07-05T04:52:57.801938Z","last_seen":"2026-09-20T10:45:32.451179Z","times_seen":9,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/partners/kraken.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.315Z","timestamp":1789901076315,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/partners/kraken.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-636\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KNTHPZh%2Bup1SAzKrNG09c0Vvlfv2ssFrn3w%2BnEAx48A90o3HnNL0%2BPcRP6pCdXlsGeSiBn08A7SIb19y9cRJuXwh1thccGP9V2eqgUydqctP7gFe9fYVlYBPPCc4Ulk%3D\"}]}\r\ncf-ray: a3e03c5efed5b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1590\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1590,"size_decoded":2346,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0afdc2fcc4d3117f15070de6c9f39062","sha1":"55b0da734de86f1b1e9e5682b4c06c514979729d","sha256":"0bc625005f415337a55465de37c57b1b112bfcd55c780c62f81ca54e6fbb419d","sha512":"a16e01a6302b232beae338cae80e0ce01aed2350d2e1bc11e9ff7e1dc81698ba81663047412d9ce22d1c40ba6c28088f6168cd267762d2ff2abe11d8acb56451","ssdeep":"","tlshash":"72312a8285664ccc661410db074b52c00ec68a67a4653b32b93acfe3dc801e96e29a50","first_seen":"2026-01-19T22:26:53.623858Z","last_seen":"2026-09-20T10:45:32.45178Z","times_seen":14,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/global.css","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.070Z","timestamp":1789901076070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /global.css HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-1e2c\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=83no2SL6%2FRHLaZIghdvHU%2FFrBpPIF%2F0z2cFRKaEc68laHnqRgMCgnXituNTl%2Fub2RfvLSZ929hgL%2FZMxJHhoLHdHHjA7LplEz5jsYMmmEy7hmfw4yPrRGH0e8DllIiU%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d7e72b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7724,"size_decoded":2366,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"a88608ef6b9e05ca571a550a530865e3","sha1":"9b727dc38374927eff9b0e68a75777327c0d7541","sha256":"506bca4be8d8a74f887eda650782272818bbd5f59f2315f7937f4b6f086a7ba7","sha512":"a7c33d11dc5b7e8c38ed69a98e4876375eb4c937018e33abfa6ade570d4a8bb91ff9d8e573eae50444f58720bfca4264a87a591784c0e11b4b6c43f4e9ba81ff","ssdeep":"96:onj/yGIyNf4WJ42XMPPDIyWqW8SO+qo0M6Cnzqdtdt9s5WVFQd9OnCARgF:onLgShXGPDIynPR5XM6CnzOr9uWVs","tlshash":"16f1ef53fdd20585b052835926ab3bfcfe7d88224b09ae397b5933745f8b3e38960548","first_seen":"2026-07-05T04:52:57.827843Z","last_seen":"2026-09-20T10:45:32.452399Z","times_seen":15,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/calculator/calculator.css","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.079Z","timestamp":1789901076079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/calculator/calculator.css HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-25b8\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tr0BMQlfh7UNmB%2BCFHm80A923iZGiQ0xa4xYeCld7kk8Ug4YMt3R6pC9p6zMj4bNdns%2B3AivQWBKMeEpYAMn2py3%2BVXCM%2F%2FBTQcoJodeRXsbcAU4WprzreciYg4BAIk%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d8e78b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9656,"size_decoded":3520,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"860da5fb2ec77fb014d1bdb13678596f","sha1":"c1e0aba596f53745751c2c0d24423dfa65c7549a","sha256":"3f1e7b346a53f613945d70b7af448ab075d0ceea0b8e19839fd999d6ac2baa48","sha512":"ccd525db723a1af59833d49bcbb4c312c8f4d2b5fad0f6f09b4b09b0f532eb3edff250da5c461c65f10fe2616da1782756f39168a96e450c517e7ecdfd8cb549","ssdeep":"192:DPCsyJYEKqdMYaPFfjVdWJXX+8leIrrxEDCC+27LKegyCn1Eh8R8kjvMCiKmjY:DPCDJVSswPkHX","tlshash":"731273136bbb12b1641b81193bd7874a222cb3a7d409dddc3ff7750a4f8c1d496e268a","first_seen":"2026-08-25T03:41:53.394468Z","last_seen":"2026-09-20T10:45:32.453012Z","times_seen":4,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/geo-ui.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.094Z","timestamp":1789901076094,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/geo/geo-ui.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-94e\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sP4GdcLGnuI%2FmayvGynesJc%2F4RXycKREwYp%2FJETaw6zHxupY%2Bs%2BsoH0NabcXD2pX1DCTILEAnpoj4O8%2Fgc67nV3WUPGQmk1N2B4cCkmqsB070BbzOGp2RRl%2FqZceplI%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d9e86b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2382,"size_decoded":1838,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"e142db64dbbcad95397fd35f58bbc147","sha1":"210cd1466174963714945a32fb74107ad34b9126","sha256":"7a18ff50b54c6772c1725069f56b4b3ba83dbad4592362fe24a8b860efac822e","sha512":"ec3a8671aeed193e0d41f283b7cf8bf6bfc0d3d3b5e24311a4275839609db9fd0f90b2cfc0594ee05487986998a6e09a109e814f753b029bf187604a042f9390","ssdeep":"","tlshash":"c741201da97224668d63213d53eb960c73b260036602da083d0dc74a7f98c3396acffe","first_seen":"2026-07-18T04:13:48.60616Z","last_seen":"2026-09-20T10:45:32.453593Z","times_seen":10,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/KhDm81ntxc.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.325Z","timestamp":1789901078325,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/KhDm81ntxc.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 390\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\netag: \"7394a24ea309a65d6e303b3b9058b496\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: zacYJZj64YoIS9SM1Oqn0tsLa9P2hSjuYT0mPJRIZRLo0SlnnEjI1Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":390,"size_decoded":1204,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (390), with no line terminators","md5":"7394a24ea309a65d6e303b3b9058b496","sha1":"68df89c6b31b07ecbbbb9d4820f72da713731496","sha256":"5707cdcdf71851146fec9cabd5ff553d1be8a05db5b704c6a0a51636df60da3f","sha512":"16763f5a4bb5fc3d42ffcd2e6a1fbe4761193d6279a7b42f4b0106f0a9cbebc8614009d2459c10ee1f3514e953a39006da475a34913e14304e076f9e6ac1354e","ssdeep":"","tlshash":"b9e0a2ee73873c70232700e18093a149bb39be80b60e8a009495e68aae70474c23ae08","first_seen":"2026-06-24T17:21:49.725855Z","last_seen":"2026-09-20T10:45:32.45422Z","times_seen":79,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/?action=get_ip","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.512Z","timestamp":1789901076512,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /?action=get_ip HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zephgain.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=3600\r\nx-cache-status: BYPASS\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DXhS%2B12ADL5qoqBicXMfOFI80Wl0OaBn553S%2BMOb7F6Wv5GuFm9orCZ7H4UPx%2BTCFypO%2FIu4gKb92cnZmR72bmKakPljGZGmjcgCNVVadAGrTYIBLwFXJ2zqsRZikyE%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c603f04b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1039,"size_decoded":1266,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a7042dab341b3b4ac786dc530808de04","sha1":"513c9e2f8ddfca3275d3535493d638e0a9ef5081","sha256":"bed9c74d5d91ef50aae87983a78b84a7f56dba6df486dbfe4aff8fcf77642d69","sha512":"ec367582eaf6412c8fe09776857708303641c9194da6a3c9ec232818d4070ac6b7a1005daf48c8722b334605a033e6fc5afc98bea4b072b3a3cf331b51e4fa43","ssdeep":"","tlshash":"0c111fbb42689f198e4a01c3344abf6a16de405de3cc6e83178a8f1091eb25d281517a","first_seen":"2026-09-18T08:26:26.689926Z","last_seen":"2026-09-20T10:45:32.454809Z","times_seen":7,"resource_available":true,"data":null}},"time_used":250,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":250,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/GhTKbY-38R.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.328Z","timestamp":1789901078328,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/GhTKbY-38R.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: P7RNp4TI1GdE3ihNEVU_MlhOKdn1EEAcUayAsQtMSddkF97esqVxxw==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"f5e02663bb95adb27758fa28db2c2182\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177623\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2715,"size_decoded":2065,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2715), with no line terminators","md5":"f5e02663bb95adb27758fa28db2c2182","sha1":"c846afa84199374079d2ebe4697f0db17ecd58e6","sha256":"b8c91e7202e35a8fa9c7a3e7c0188efa096c323b2c8f9100d05541127df3d38e","sha512":"0c5d7ad693f9c9d942b3eef75ea9a242c5b7f5f932127c4530e8e1dc89eb216bdc0d663146a5079647c1ce95cf3c20827f8f929e466e336f4d892a782e897e02","ssdeep":"","tlshash":"2551b7ada255c47ccee6b01606a48a4c931d245cfd668a7dfa9ef1f007c3be40c92338","first_seen":"2026-09-19T05:04:01.038921Z","last_seen":"2026-09-20T10:45:32.455442Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/sl.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.121Z","timestamp":1789901076121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/sl.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-651\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GNS40uMV7x3xlxVE00PM4UHoyS559xJyE9UPjanrIUX63f1sKeTCsqx6%2FqnmV3eZUNRxJJ2LgqqtkmLpJmpX3Vl1aWJ8FD6vGNy9LpX4OroEVJewQMQmBd4evi11jd4%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dce9ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1617,"size_decoded":1418,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9b4bb3b189e8285e10fc2637df225958","sha1":"e303bd704bf87d97b874f4c34e1877aafa7eda33","sha256":"aa4fda18694f1e60c937933eebd752cc3ed0701652f0dfca84677c3267b26db9","sha512":"c49b5bd7f995ed7610e4290785f8e53552991cfee1d04db7b60180f93de9f3c51a67739024c539f78e2809128f46bdc6f0a1d2bcde129bca788c2007d3695ddd","ssdeep":"","tlshash":"6d319bb0719d104f662f8b4746a8aca0c76e24fa711100566e1d33baaea3fd2df43960","first_seen":"2025-06-21T07:33:55.796421Z","last_seen":"2026-09-20T10:45:32.456024Z","times_seen":30,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto/XTVCBTC.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.782Z","timestamp":1789901078782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto/XTVCBTC.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 10:44:38 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"107060b925841745f310697bd9f1f83d\"\r\nlast-modified: Wed, 08 Sep 2021 09:03:52 GMT\r\nx-amz-id-2: XShfJvXDn5iEsvwKLt2RnohekGb5k5p+7oLBmgyOJLsFnd98e9HJEUVLmg35nNDNV10hQsXCtLFwCnilNqy+PDBNTkKIJxth\r\nx-amz-request-id: 0BHM8WGXST7WMHG6\r\nx-amz-meta-hash: 107060b925841745f310697bd9f1f83d\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.62\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 08/31/2026 10:43:23\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 018edd0b89705875035330f6082856d5\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":801,"size_decoded":1408,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (801), with no line terminators","md5":"107060b925841745f310697bd9f1f83d","sha1":"40a2e01da20c164a3c3f774a72f3feadf17cafa2","sha256":"4dfca512e957e14f05da07751a96061cf4bfd5df438504f65287fa0a8c3cadb6","sha512":"fb7b987074d4701281c49fee08b1d44f2be2b3aa9ecffd0a88a6cc682aac06a6cd823598c8c8ba5ad43f8f1430a73c814148dea60d5740162cc41af7da324c76","ssdeep":"","tlshash":"24011ec55310f6046ec7c09dbf74a9e4110f60ae14a6c7dcf2c89f0835aae8ba614d48","first_seen":"2023-04-21T01:30:48Z","last_seen":"2026-09-20T14:27:57.417998Z","times_seen":6944,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":3,"connect":2,"send":0,"wait":5,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/js/lazy-analytics.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.066Z","timestamp":1789901076066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/js/lazy-analytics.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-9ac\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VL6NI8rn20IzUiPDzN42hURXbRWs67%2FyALrldrboD5OeR%2BOJtZ%2BKMS%2B8R8sb%2F3hFP7jTDX1lc2ZcoKYTFAICG0ldLbvNOuFwygw6tRIuQx2BJ8WnN%2BIpXsjtBCaEF0o%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d6e6fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2476,"size_decoded":1785,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"d27f3444071fb33d54a108a52e956af9","sha1":"f301401e1203543f7f85f2685389f52f2ea2beb3","sha256":"a4bccfde5a153a7ec568ab723a792a97d9bf2dff76429a7a0cc2cf3509025f9c","sha512":"f919fb7cccc4a9f34929d03da8ccc9a302a17d822b79da3352e18fe82f7742bbb08f79a4448893a0a136e2551d63b87c3ad7cf9587b00775fa3293c61ab2e0af","ssdeep":"","tlshash":"3b51bc096cbb643301b7e13dabafb109f5311607190598603d4d8309af68baf95aebcc","first_seen":"2026-07-05T04:52:57.876973Z","last_seen":"2026-09-20T10:45:32.457225Z","times_seen":15,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/calculator/calculator.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.081Z","timestamp":1789901076081,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/calculator/calculator.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-2934\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TPNFyyw9pkaOJGBZQNpf%2FkDdQVLeqAGTt%2BdlOpjKw1PtWFPgfpLHZ9G79XwVZJCYn8Bt8%2Bk%2F9yhFzpbNnWSY1xLOrNGYi%2B2l%2BiZ9Uz1Vv0Ir7f6ilL3r58vfa2yKZxE%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d8e79b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10548,"size_decoded":3970,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"d23244a364e86a8c7dc36dfc7bb090ee","sha1":"16cdf90219917aeb698bac52e0b1571ffd04459e","sha256":"a4e5b5c20c88bed23776399f679a2f1718faaaf45fb4bb8a02e19dfb430c5969","sha512":"574194bef9a6c139265a4c13e9269d885f01622870a9744d7507f843d2b4e700c8f9fbf7e8b39a130a39a57c628e58e6d15dcd0547b83c95abb000ba124373e7","ssdeep":"192:T/wWJFhsV4KrZ0dNJDraU1K23Mufj35SoE:T/wUFhGefljJc","tlshash":"f622c7594ee320a36473e27bf7df98057365620b00a5ea00be1e97952fd84444367bfd","first_seen":"2026-08-25T03:41:53.630491Z","last_seen":"2026-09-20T10:45:32.458612Z","times_seen":7,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/en.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.108Z","timestamp":1789901076108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/en.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-20f\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBjeTLQJWvLdRiCH9AOL9y22Bp5DSB1HglbpJVZGkhl%2B8WtS8o1Rgsnq2B9q9NGDG%2B6PRAtI88d5l6hSOBS%2Bocga1xC0Ob%2BKFhCFCi3RkU%2FbbyXhye8ObQPvqe0ENck%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5dbe8fb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":527,"size_decoded":998,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c39480d514fe1af4c7e5f62a3ac53b67","sha1":"80a3f070bc7a8b0a8edafa1927ee65b2a3a30b42","sha256":"910e4fa63fb7a23d30d59dee2feb08da51a405eb06b38a7e12d18d9b504d13b5","sha512":"353e7893f13756905ec7612d0c2411231450b2d11781131794c45668f281a7c092acb8cdbfaf8e5809cb5bdfe89860ccdc339a54cad35544ce58e28403abb479","ssdeep":"","tlshash":"4af0b45d22695966e21b8364dfbc74b4013f24dd2288204db8453378c51a37f79bbae8","first_seen":"2023-09-12T12:51:11Z","last_seen":"2026-09-20T10:45:32.459253Z","times_seen":2743,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/fRVDwUO_c0.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.484Z","timestamp":1789901078484,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/fRVDwUO_c0.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/fpEnGU-zjN.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: Qkgsoutd5oH0DfRHnja4uIBClu0Kj11UhgyYbKhlxWUoj59MJnuBxA==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"7ba172d3dc35c2ec303f736666d7de77\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5050,"size_decoded":2724,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5050), with no line terminators","md5":"7ba172d3dc35c2ec303f736666d7de77","sha1":"5e24672bc69ccde124bb4061db1ffc104aa59c85","sha256":"4c245ca356601136e8e8ce0d5cc42df6513eaa573ed979ca27afcf602bc3080b","sha512":"22f724466ca023fa601c82fd2d30eeb7f627ef9d1901a3881a45c5a062651b5df34ff1384cd18f51695869e6626dd46c33243d1afa55de2ba2d777476d184b59","ssdeep":"96:0NikdVbkOWXGxy7Gf19Fc3JEU5oeew59QFtyC7cD0ex2CmZ62H:45kOgZqvFclrem9wtyz9U62H","tlshash":"48a140676305133436eed059dd185112e3243584794e42bcb96da9d23a8fecc3ae4f3a","first_seen":"2026-09-19T18:35:44.722595Z","last_seen":"2026-09-20T10:45:32.459835Z","times_seen":5,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/office-flags.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.096Z","timestamp":1789901076096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/geo/office-flags.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-75f\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hqsemkRDBsRko%2FYU6h28LruOyYbJtInhl0PkPqtlm4aAjODhHN5YraDU9dr8riNr%2Becf62lyQYJwqwaAVwxaVcZ6H8guJPvwsQHvSIQSHsEcLWHtcEHeHwguPHPI1DU%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d9e87b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1887,"size_decoded":1641,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"5525fc56ffadad27a827337249d56eba","sha1":"bc61271717fd9922fe356282f869c279402e071f","sha256":"3e44929987f063235c56f06423bc367370ae70e727a409632c9ac71607abb97d","sha512":"5181e65bd61f29f1d344c670841670e5358aa9edd22b1dad6f939bc5a0e40a5d7d0a9e4ed1b4e2b17ba3446664bc7f1f5ed05e723ffb081ca4572ec21e744590","ssdeep":"","tlshash":"c541802e6ae6303b1c2b42ecaa5f5087333a74a7100bdc04388e836c6f8097562e06d8","first_seen":"2026-08-25T03:41:53.433022Z","last_seen":"2026-09-20T10:45:32.460444Z","times_seen":7,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/review-photo_3.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.152Z","timestamp":1789901076152,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/review-photo_3.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-a92\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=brticTVn9CYp6eIqYbe6AVaK646%2FP4fjqVxH6cjBhI33EzTXdadoKVbREbVoaaXJ0GTzpBLpZFgRpEv5rfGrgrTG4Fay3rZi2rYnZORMOhRMD6f9HSeh3jffdUVcx4E%3D\"}]}\r\ncf-ray: a3e03c5dfeb6b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2706\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2706,"size_decoded":3458,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"0a4f69292e73245827ddffc3cc0ffe5f","sha1":"c03102a94a6ee036287ed0820e427bcb2f3c5dd0","sha256":"2c74520fac201aed4fbb92c5ff0dcaaeb082bd0c6f034b34261c0b66aaeccd8a","sha512":"6567c917e83748e703f562f465d6fbbbddd31c5c2e850be80d6d9ae62ec8bc08981e324befb2a7b91c8237df6346c6210551f616bdf9a7691d8e30634a19d801","ssdeep":"","tlshash":"86515cc1960334d5f3c9dab750d83655e215229f8ca2882cf77250ec928992cf7648a0","first_seen":"2026-07-05T04:52:57.853747Z","last_seen":"2026-09-20T10:45:32.461333Z","times_seen":10,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/5os7DfMwMH.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.326Z","timestamp":1789901078326,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/5os7DfMwMH.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: 4GynccskYNJ2SCeI7OA-CkzL6bDBGHTK30R4Z8aR6yn1AHIwhhX7zA==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"f1c0baca66076e22c96a6d7cf455dbdf\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3593,"size_decoded":2409,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2596)","md5":"f1c0baca66076e22c96a6d7cf455dbdf","sha1":"eba4a34e73fa6ba016f2484d2f7a7471d8637f88","sha256":"9869fa8c89bc1e03444192e15016b67423eafa335b0477f181a0c20fd58253ae","sha512":"b70dc5933c4c100016ef86502ecd91904fda8457035944a03b5eb7384ad81c390800b24783b583539d131f93c27e81e41bc0c799249f0fc9c3f40d6611e5ef37","ssdeep":"","tlshash":"4a71c667f21ad0799fa781098b2d593c170a61dcbbcac1f8b92ea6b101d30f94547e34","first_seen":"2026-09-19T05:04:00.939265Z","last_seen":"2026-09-20T10:45:32.462649Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/jp.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.118Z","timestamp":1789901076118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/jp.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-901b\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3%2BsJVK6P2yhNXKK4RBboS7XCEUmLHfxVNZO6uo4lksHdfM32KB%2FzVpTEZXDMED8yiTIqMff5B3mtr0%2FJQj7sAONJ7SDYr6iD92L5mjTMib%2FDHRpFeHoYFfswFCaJ%2BsU%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dbe97b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36891,"size_decoded":22741,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f9c5d0ee149b9697233a5b43dc7d5979","sha1":"b1416f3100db98b6ab12aaeb4046f570be1ceb85","sha256":"479c75516e07475b26c2969163ab7918284e95601a1c453b0fbfaf867a51d02e","sha512":"6cb6cce62de2255385bf8260ba19d5abf45808d6a34032ea66923e05d263a2a231d76a3eebea387013481a9a48c9d7e00893e47fb20700f643051eee8634f89b","ssdeep":"768:G8PP5jE9ZLrbellksEdmPN5zWt+2S9raY6EtR:0FrbeljNE+z9Gho","tlshash":"0af218295c0c6f0e33321c6ecb17157e3e9aa9ed734991cf60cf75dec26a450aa20da1","first_seen":"2026-07-05T04:52:57.884902Z","last_seen":"2026-09-20T10:45:32.46349Z","times_seen":13,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_5.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.138Z","timestamp":1789901076138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_5.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-43e\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPhsc9iDSLXjhOSQUIDS1%2BcNrJLu7Ax3c%2F3P0%2BGLwU9c2cu%2F87OPyMKIwNDU91kC%2Fz%2Fql4%2F2htPcUWTx6DfH4YAVmXbgS7eJNEe4puoWcM1ikKi2zXcfa%2F9bgd1YSmw%3D\"}]}\r\ncf-ray: a3e03c5deea7b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1086\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1086,"size_decoded":1852,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"868e5a26a7951f3b16f373d82724a6d4","sha1":"546df151c5730855e0522720c21efedcd19d33bb","sha256":"b5e9b8c6e9d5cd429501e85d2c1730a924e737b810e8915096bbd998d755d882","sha512":"3529d4e16628484665ec153178d8bba29a2c1aaa67a9af779fd7a0aabbc87ba353188197aade684835020d869d01f9154913b40e9803ff34c646ceebcb145efb","ssdeep":"","tlshash":"3011b9c2d17988220c9047192dde4375c1870ab9816bee0569fef9528b2c4646391ee7","first_seen":"2026-07-05T04:52:57.862002Z","last_seen":"2026-09-20T10:45:32.464111Z","times_seen":9,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/tick-no.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.146Z","timestamp":1789901076146,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/tick-no.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-108\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eVjb9vP5YbR1ioTj2IoZ5hHzPx7z5k5xSKaRonsbgmVEYUPaHZoZTc0AE0RjfjxT%2Fk4Rb5fwED1Y%2FL6cEm5vrl80ZbuBYUBjii3xIXrUwZSSUZEzVF8b2XV2a0j7iPM%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5deeb0b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":264,"size_decoded":933,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3020386d269073e8046e4f67b499f157","sha1":"3e7ffa54153bd61cb83e4dc6f584d843cf0adf0d","sha256":"feef125d94c5ea4bc9f236ea2b076764be56e3cb5d7c93feade572663d3296d7","sha512":"73a5c9391a99206c3a893f8e944cf9b560c4c15b27c2835efac58225267203bf5d9a3448b5c5c503b13938f4f09485543056a86fd5180c1a174db21fe4cec020","ssdeep":"","tlshash":"2fd02e8aab0c0a3ca26e8910ea28ba3400a97223c20f100a88f701709a0d16d3876ac8","first_seen":"2026-01-19T22:26:53.613845Z","last_seen":"2026-09-20T10:45:32.464646Z","times_seen":19,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/zfMORx0xp_.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.327Z","timestamp":1789901078327,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/zfMORx0xp_.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: s5gzTVIcFU6BtgLN3W-Anqb46tTWHXXXWnLRP0qisntA4jPz2klncQ==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"1e62f54c468ff00b14f0402779ae3f0e\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177621\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3380,"size_decoded":2098,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3380), with no line terminators","md5":"1e62f54c468ff00b14f0402779ae3f0e","sha1":"854d71ecd32e630fbf3b43364c5d5558909e4192","sha256":"c2f9463f02c09d02dce53cd44e137737eff5efa9b7111bfb10e29030a95cbf99","sha512":"19ce1f67e482cca331e49e31b4c5d56805bdb1c961fa0bb2c4285d82b3572d5c48088e8e337069c8cb3f1ff0a5726274fd7bbdf01e486c52a4f3b3befdf70035","ssdeep":"","tlshash":"9e61b817f02061b0fef604628104292a2a7ce5dae51744bcfb5ddcd0a7ca4a6b60ef73","first_seen":"2026-09-19T05:04:00.985789Z","last_seen":"2026-09-20T10:45:32.465663Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/vendor/js/uikit.min.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.090Z","timestamp":1789901076090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/vendor/js/uikit.min.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-23d1c\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SxeZnOMnbv%2FHPzsahEu1k2lX2x78iLvKH9MK0Csixz%2Fx3EzPdUr3uYzbFF2joLNR3d0WS8NFCTCSRTktCnc2NTnXFHtNSJ7gWgcrwLLlTC70cym%2FKHdtM0J0Wdj1gio%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d9e82b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":146716,"size_decoded":51559,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"749a2dd79038dfbb16587c3067fb9291","sha1":"d1ab89b4fdace3c084baa45bc031ee29ca84a788","sha256":"9523eead7091f1929fd1c309a8df06cf02821bc7ca282f5d086d5ca2cdc164e5","sha512":"72b90e5809fba9e10b4cbfcf29656ed41a37ebcc674cd7b96748d84814a589ff1d64021a52d2928f8bf5a7c6a41041044606a1729a4b50b33e8170a93dc66d1d","ssdeep":"3072:NFR0qgTMS7E2qsR+0HWH83vagarqnlXN8O:NT0t4So2q4+MLabrW","tlshash":"0ae30a9733a5b02543e742f510ab4606f3395984b80b84dcf67caada3869849727ff7c","first_seen":"2025-04-08T10:05:49.344419Z","last_seen":"2026-09-20T10:45:32.466278Z","times_seen":2908,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/hu.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.116Z","timestamp":1789901076116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/hu.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-167\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rkdxXt22n49p4xTMQPt6Wjx%2BZYLj%2Fjeu%2BT87feBn6ZfZQmAFH9Mq88FPdmja62T9Jny4GoBrEMNlLBd%2F89AfyDEDVDlbIlNmqLidKg4tfUwhsTCf5JAdH%2B1QdzyCWt0%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5dbe96b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":359,"size_decoded":984,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3621c5eb449691cbe1d3bc8757c831a1","sha1":"e7e3674fe42359cc9a376e543d7548418071aea0","sha256":"2c1380bd6fb1a88cabcae439eaf960d4dffa929a74cfe3d44f7552084fc1150b","sha512":"7c66bd80019b994685400d020e37d38ba3c45ee3cec449b83bf8a2e8d08d346e03d6245e81f9b868eab42325782107cbf837f3c057efb2c83a5151b22b1104c7","ssdeep":"","tlshash":"61e0d8caa9e9c90e9a1947694eed71da416270cd21cc01fd71843528fd4d3ef2411764","first_seen":"2023-05-29T23:05:28Z","last_seen":"2026-09-20T10:45:32.466966Z","times_seen":5281,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_4.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.137Z","timestamp":1789901076137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_4.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-408\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNJVsvXhXncpuBvd%2Fuh4eI%2BNRPAy3adAui3jRs5LcU%2FXz78vqXX3MuuD4GnrkTxce2%2FwYZt%2FohW9B3tG5VQ0eekl%2FkFnuYLVy0GezP4YuNBfcS0QQc%2Fo3He%2BiNTCH%2FQ%3D\"}]}\r\ncf-ray: a3e03c5ddea6b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1032\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1032,"size_decoded":1800,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d0775d67b5db6dbecc012d809084498d","sha1":"5c50d1797335a56ffdecd39085eeed289801e8e7","sha256":"823f547321c4fce9c5160473ec26aa452620623c00ce5e28770e66cccb2a2bd7","sha512":"c40f981519632a15185f59adec1480f265457b9c2432ab79f360305ab72b4c46aea2dead30ee116138b400b70ff86a79ad36fb7bc4c4a4f999b9f8f7191773e4","ssdeep":"","tlshash":"6311d83373552df1cc325a066d0d0abddb764e6c805853471877b94042ff420b7408c2","first_seen":"2026-07-05T04:52:57.919999Z","last_seen":"2026-09-20T10:45:32.467607Z","times_seen":9,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/partners/coinbase.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.313Z","timestamp":1789901076313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/partners/coinbase.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-54c\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cV09Po60kkaTNAlS7hsctx06yc10lKrfIkZ07yCQHCQvs48bdDietdbttwYiCnC90Tb7RBxhLiD45S6BXqOIgCEYAEgjuzL9gUr72ufQTScfOfR2tuVKRV7K7Ll%2FZ%2Bw%3D\"}]}\r\ncf-ray: a3e03c5efed4b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1356\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1356,"size_decoded":2110,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c55fbfa4c4289b81564b2dcac669cac1","sha1":"a62322024e85d8e83a4ac27cfa0953d968a19110","sha256":"e2505bdc2eb7b30b095b8d5c2861295dfff59fd6ed1920fbec963160cfe2ce34","sha512":"ede1fdcf5d846f6e85ee976bdfe6ab94d65465952bafb80ebd28a9ac973b59c71dcf5f408c1d1939a8b25af1381c2c9e53154be10793611f0b1f893819c694cc","ssdeep":"","tlshash":"c4210b4b23f36543f8a42b630d240729f856c8863383695e13d3db7190f1779c229d9e","first_seen":"2026-01-19T22:26:53.605039Z","last_seen":"2026-09-20T10:45:32.468246Z","times_seen":14,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/geo.php","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.629Z","timestamp":1789901076629,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"POST /module/geo/geo.php HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zephgain.org/\r\nContent-Type: application/x-www-form-urlencoded;charset=UTF-8\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 0\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=3600\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gkmo0zZC4YZD8Y21Np6a9FIVrpHdMJyafXsTLanYNww6Tde6yG%2ByWgKRScXKSli%2F4jVAYnsSoPdMJs04XcWjMbRiLoQNnA8HFbeUbnIi0EdnoAZvzzwmXKBXdPn1js8%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c60ff11b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":854,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"8b344ee449545a64b071d341fc7f1fc6","sha1":"332a87c571b83193bb34bfbf316eb47183f865e6","sha256":"a8ccb74e4d79e55ecf96ee4d7b6f3335f2a81011c47248689bdd95e3548a0047","sha512":"594caac697a4d9f559dc2ad758158c8efae171ed8d9f4409ef99df33060cd37aa5933d1770d0411261a45c68878dd0bfc8d88940c09946ae064d5c700e4b0483","ssdeep":"","tlshash":"83b0121524ac4f34ef54c157408164ad4f7f42d11203dd47c9fd3e08e2013d5448eb8e","first_seen":"2026-08-25T03:41:53.435Z","last_seen":"2026-09-20T10:45:32.449338Z","times_seen":7,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/EBskeJNhq5.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.289Z","timestamp":1789901078289,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/EBskeJNhq5.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: gwZcNPs6hOda7FF5vGdENOV0ozYXnGmM9fTXYDueGfvBIC4573QUuA==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"69a51e5fd5a8394742e7ac9da280f2ae\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2905,"size_decoded":1704,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2905), with no line terminators","md5":"69a51e5fd5a8394742e7ac9da280f2ae","sha1":"4901a3dd571f2c635cae88ba1bfa675ec321f800","sha256":"0c167cf0ab9db11fa3fd5a5187db03da3df2d9ffc7f0526f6f63a352a41d5787","sha512":"a3b79abaa583299908032c764378c6322db4ce8a3e9a6a18f4a8b5f7f5d775c8aef6c81ccfd2bc6b6210a754b43c6dbdaf8b3e7d66c130928216f0064cff2915","ssdeep":"","tlshash":"14512011b707f471056b41a6c866e0e6b7229354dba9c05cbc243b6016cfad9ddb833c","first_seen":"2026-09-19T05:04:00.889018Z","last_seen":"2026-09-20T10:45:32.468856Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/scale-chatbot/assets/chatbot-script.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.089Z","timestamp":1789901076089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/scale-chatbot/assets/chatbot-script.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-1235\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VBoXnMXqR6GKNVBgm%2FBBkyO3aeNYa2sa%2BsOjSxSE9hK9cYkVUXXBuCyfHKSaZepN1cf1nW7MiZwcmPnp6H3wFrn7ZXap3EuVv0AcH3Y0T0yoZYv4bknXG2U%2BcepeZx8%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d9e7cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4661,"size_decoded":2134,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"2955cb87e1f9bcf63fd0ca7b267cccff","sha1":"e2eeebd5d2257da1ea94fb5909372a59bd349ea6","sha256":"60a23c832135d335f18c6dce43401c6973d999009a648e078bb1a65c5683a84e","sha512":"ac73ea57bddf27d609f3775b5663c890460b4fc319f55d87b34d14ff1cd6ef9cd5d0b09b0b562e2cf3052394c262d7e31242fb4578b65ad946df6361ef5432b4","ssdeep":"96:ba48+/JNZO4sDnWoi2x5PBibNXLS71iGiEDBzipiooGbqcbQTt6xHB9OlTipiUif:bj9cDnWoiwJBidL6iGigipioqcQ6xHBG","tlshash":"f2a152a762f32232059f092b998667597674404b180fe9163c5cc1f40faafe057b1ba5","first_seen":"2026-07-18T04:13:48.610409Z","last_seen":"2026-09-20T10:45:32.469475Z","times_seen":6,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/au.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.130Z","timestamp":1789901076130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/au.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-51d\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KbwxrCNLXH9hrBRK%2FZVAiCR5BzUdzyey3R%2FRhc5RuzkbXId2fwwPyIHntOB1XjkeIRmjVxjElqx13ZvCKe2AbtqvK7q6p4MlGioqGieHwaiAf5NoggTw0f7wB5lUGuE%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5ddea0b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1309,"size_decoded":1339,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e875a51ef2beb891fd6f4b9e117a243e","sha1":"05cb38963205e49302ac3fd2da65a7bc241db521","sha256":"bd6f1a9373e02ac0f0ae46622e60e752b408a2183d7ea40dd575f901e869aed5","sha512":"2b4a86a573e4858d0b3a4527c4a666323e5b97acc84942e519a1d3c13367748eaba4e1571bd7d89f20c4c1e62d855d0b6897aaee328de7e5a8758ae6eb0ac3e9","ssdeep":"","tlshash":"2121015481394658464983f8d3f9f4e5813f7097b10b29aeb0003775803e35a29e6286","first_seen":"2023-07-17T08:17:34Z","last_seen":"2026-09-20T10:45:32.47016Z","times_seen":2396,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/datafeed/tv.html?page_url=https%3A%2F%2Fzephgain.org%2F","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.378Z","timestamp":1789901078378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /datafeed/tv.html?page_url=https%3A%2F%2Fzephgain.org%2F HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html\r\nx-amz-cf-id: w2sPEHOPaySSXUysm3QbK0qKbStwdm_JlasZCnA8cDxuxAe2hiCKvA==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\nlast-modified: Fri, 18 Sep 2026 09:23:08 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ndate: Sun, 20 Sep 2026 10:16:17 GMT\r\ncache-control: public, max-age=1800\r\netag: W/\"630d74ea055bc6fb6d3f218ab101ccc3\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 1701\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\ncontent-security-policy: script-src 'self' 'unsafe-inline'; style-src 'self'; connect-src 'self' wss://*.tradingview-widget.com wss://*.tradingview.com https://*.tradingview-widget.com https://*.tradingview.com; default-src 'self'\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33912,"size_decoded":12014,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (33698)","md5":"630d74ea055bc6fb6d3f218ab101ccc3","sha1":"06f3d46a807bc11c9f01842e40c0a83d2efd93b0","sha256":"85778bc759dd5bf5316f2ed5768615e288753ffe9ff4bb64161cbe94917c78cc","sha512":"1217d8b2d11afa1366513dfa83b4300984483d683166601ecb9ae782e311f20b8eda410f5619db5ca80ef2608d78bb0595964126ec14d8c3bf972f1612085480","ssdeep":"768:pIqKKVpV5q460CJgqQ5iF5ECTDgHTfIjYltEGwwMWYfKV2+wLu8jSEI:ZeSeETfltEGfOrLJjSEI","tlshash":"b9e2d76773567123b3a4d2675c290101e329a4853849843cb27cbce7ab97dc67af9f38","first_seen":"2026-09-19T05:04:01.097146Z","last_seen":"2026-09-20T10:45:32.470723Z","times_seen":9,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/css/header-banner-top.css?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.058Z","timestamp":1789901076058,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /css/header-banner-top.css?v=1785822802 HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-4f9\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SSkGfcm7x51vn0%2FbzFa%2BoIDsf6mObSab7wsuvauASRqPnYzOaz1%2BWz0CmE%2BaRlqVDjRb8Dbsdv0j39E9upjHtH%2F2YrYOfC5Tb4N9sY1A4FU%2F78NQwBPu0EqtgTqLRlo%3D\"}]}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d6e6ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1273,"size_decoded":1248,"mime_type":"text/css","magic":"ASCII text","md5":"d26cbf932bca4869426dad7f9faed726","sha1":"4e3dba1d1c006630dc8b71d6316e72001fdc3a52","sha256":"297fd1945b4ef7b56e20108bb4cf64c06a12dd9c0ac56e758711f475e196027e","sha512":"22594b5876ae8c0e3b92e2a7aed65fd37bb8bee875199464b28f3cf22f769b135efa0ea0bc4c503fafe40606110e1260238e4877312d05ffd80e991de8d836ca","ssdeep":"","tlshash":"3c2108338f18a144711855f8ada23fe2621e8007e6586ef8af90812df348555ee607ec","first_seen":"2026-07-05T04:52:57.79447Z","last_seen":"2026-09-20T10:45:32.471341Z","times_seen":14,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/lv.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.125Z","timestamp":1789901076125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/lv.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-8a\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3SM3WY1kbDzpfB7lZajrHoDgdeXNMd8aXnb%2FT3xGyDk970OU91eob5l8q%2FJv6qbAyww%2Fy8Th91mK3nuunVh8YiAEgoRpTfp3g%2BNvuieOQAAxwPbVaLN2FMqdTLUMs70%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5dce9cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":138,"size_decoded":861,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"12cebcfb5d166f7cd2b6a3fb48c0924d","sha1":"388674b2cf8c8c65742d9dfbf128aaeef6bb87e6","sha256":"442240b6d0d4290a8a5bf289beae6d52665dc71f7cb529034682c8fdcf313bb1","sha512":"af40c36be143cb5c528c23d6503d027587931611d0b2a00ae2abd1484b2bd73d16d7903a78d229850e83f116c7b7e144d1547b15e422832e646b2a4761ac2b7c","ssdeep":"","tlshash":"b3c02be4807c0f008a1887f19ded31c14069308a309404e8f6d1353221023fbf482d31","first_seen":"2023-06-02T00:03:05Z","last_seen":"2026-09-20T10:45:32.471967Z","times_seen":103,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/SBGFACmfhF.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.287Z","timestamp":1789901078287,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/SBGFACmfhF.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 100\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\netag: \"155c016fcc3e5a8e644c5169ff366d20\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: mVDpvP9kuelFD9zQgfKOUxLe5OsFdcpSoEaNzY-qJZHoBKzhmWcRDw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":100,"size_decoded":914,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"155c016fcc3e5a8e644c5169ff366d20","sha1":"1095f9d51f242822223c9666c1da9b890289c141","sha256":"e35cc840386d90627bfb3368e48e7e995c3aeb9a05e6831d345c2c8b60c36b61","sha512":"661b4889c7bc950e75e29d7f7df54aace341973936d4f0ff4a7ef2fb77d454c62a36d03953c26edf247786d81660335b498314374f2addeb7180676e1e427124","ssdeep":"","tlshash":"ceb0120107bb44f04206e245c01f40919512f24fbf2cc2e871086712c3c70c09c0d930","first_seen":"2026-09-19T05:04:01.100684Z","last_seen":"2026-09-20T10:45:32.472529Z","times_seen":8,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/data/geo-leaderboard.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.097Z","timestamp":1789901076097,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/data/geo-leaderboard.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-2a7b\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uznlmQwuMzKKLslRV25If%2FL0gWcHQ4BfGBlgLDD09lBNOVe9vGGp6IVMAnpeZvrBr14Tm4WxFknTP13dVJbFUoMhtiuYz2SYHrJjvjnOxxQhPAmVcwr0QmZ6o2B2cBg%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d9e88b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10875,"size_decoded":3062,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"05769b815234d8341d08014f54aa32cd","sha1":"479cc98195f7000aed1e3b50e7493a3763b79385","sha256":"0303cff23bc2411575b5b2238e83c72bd9625545dc86d4302c628b6701ea8a3c","sha512":"061c86dee9242897f6eac96b28d948b0ae1e8c91dbcd96a06e5c81766eed5f478a19a3dd2d5f151de9bfdc8b8a4aca3061ab2bba822fa5908153da39611a6c09","ssdeep":"192:nbDUJ/iQhpeGO2iySLSm38jcRpuXCJBXii:bDUpiypbO2+LSmsjuuyJ9v","tlshash":"c52276f27042f4e3d034c4752dab14b692bd0b9724e6979a3bce013e7b0c85e91b6d96","first_seen":"2026-07-05T04:52:57.92269Z","last_seen":"2026-09-20T10:45:32.473097Z","times_seen":12,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/background-4.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.104Z","timestamp":1789901076104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/background-4.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-16746\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=itx%2Bu8PDHxvMMvUCA8XIdsjc5D%2BNpWeLP0%2FqY6ljQrimRr8taiv4O4RNMJxg4eTCN6ta2VqAMDHOVRIP3cV9BlEA7x9bAHtmRoJFwXrOHWV4Ewk%2B3QB%2FE2oz2NsStak%3D\"}]}\r\ncf-ray: a3e03c5dae8cb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 91974\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":91974,"size_decoded":92737,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1500x830, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"2bec0269326b7161c9ac1631856ab2cb","sha1":"b736c25cac58c51ea7306fa896bb52379a9269e1","sha256":"e7c58f49c178ce2a879e0d9a0bf8fa0fa9247a779c7bdb27520274f996abc767","sha512":"3c1cd777a3219f8224d93a9245c3e1926452c721cb9c8c9bbbb691966dfe9fb13e0c776b00d26961373affaa91fd6a8265d0080a7bccdbed628b9ceb0afccdb3","ssdeep":"1536:db7B6JbB+lYUO58qyYa9n1wiGNYaT1e3u4QI4frYcDt72nLstqc3s7mhVkLnwnEQ:R7BAMzO5gTw15Tc3VQlEcF2Ls3HVkEnz","tlshash":"0893021fab9e75fbe1c3aae238c1e484667b865370d05d340943e461b4e639df5438b1","first_seen":"2026-07-05T04:52:57.810207Z","last_seen":"2026-09-20T10:45:32.473687Z","times_seen":13,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/review-photo_1.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.149Z","timestamp":1789901076149,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/review-photo_1.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-b46\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6XK%2FpmTruYea%2FubVNMpT55%2BthstAMDNjBGMV55tESfKCEuN39jPRFMNQKU%2B1udVxL8mV1g9xKcH6qlWW4KHIXcNPp4vgRsLLr%2FCnoUpfjYLkr1C310jm8JjIatDQTbI%3D\"}]}\r\ncf-ray: a3e03c5dfeb4b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2886\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2886,"size_decoded":3646,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b8851d9ab560b99549c4efa0056dbafb","sha1":"29719fb0ee3964922358dee5814bebdff91762fa","sha256":"fe092ec438117be86c2432cca86c374acfb13ab59a3631212b38e6a34e6b2c0d","sha512":"600601c50e8099a5e0c0708976070fbee18357068ac833e2889c2033f43f9b768546f932ec777d8fd2b5e506765674e90afd760287ea99be36909e7c1ccbc7e1","ssdeep":"","tlshash":"0e516e8043984dd6b8041231f263fed4d3f1b83a826a18baac2c1075ac925ed975c62c","first_seen":"2026-07-05T04:52:57.821906Z","last_seen":"2026-09-20T10:45:32.474294Z","times_seen":10,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/review-photo_2.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.150Z","timestamp":1789901076150,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/review-photo_2.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-8ee\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ri4vUf405WmuYLoh%2FdqU1BsS3%2BEfP8DuUx3M9hR6nrf4kaQmMdzRr428SXLOiaHeh9dyss%2BP%2FTQDh5LqwUXjHOyX493LOIiR6eGEVN4Gt8tEaaP83AUeXXvW7aWQVy8%3D\"}]}\r\ncf-ray: a3e03c5dfeb5b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2286\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2286,"size_decoded":3044,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"556afeb9ef73e21d7f8195a15a126382","sha1":"de2ebccc9e3e93eef358832a4863e5a10aef7730","sha256":"786fc354d23d807d145f2151761f82d2e8a8576a925ea8d7c73edcabbd8dd94c","sha512":"075728cd27c3c95c8c6ee80b88934aa73802087d1d8edeef23d51589e6bc29d19dcef4ff007f71e2cb000a3c7d5155072f87885b219b8dffd40177382406b9c2","ssdeep":"","tlshash":"5c414b80f1a26581ccf5977a9a7830d0249a4c1b206f33bf759790c9d34c0698d8bf51","first_seen":"2026-07-05T04:52:57.8746Z","last_seen":"2026-09-20T10:45:32.47494Z","times_seen":10,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/004-e17180211726581.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.154Z","timestamp":1789901076154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/004-e17180211726581.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-51d8\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=REiqoMmqJ87JRsB%2FnmwH53Qsh%2F%2BqI2BQv9ioSKITJsX0bAdHLVOJrKsQ0q%2BLzGUw7bqNs0WE%2Fpb6dKWB0FYTnh0yrDdV5Lce4IgAaJbAuW7D5wc3w4MeqaOkc3hh918%3D\"}]}\r\ncf-ray: a3e03c5dfeb8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 20952\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20952,"size_decoded":21714,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 565x498, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6dd76aeccd874f7b57a24baa35d8f17a","sha1":"fc0761d2732ef8c130b5e1eb03a5698292ae95be","sha256":"9ed0ae8b4eb978d6b480403809f3a75155f96aed33c39ce445bf2a2de39abb4a","sha512":"2a834789f3cea500aa0e48536ea88498ef157f25d464276b6dd6dd4be84021ce5fc9cf2bb17dff900772c3725f117c8e94d2d1bed818491fa90a08d69084361e","ssdeep":"384:aJoH9y+OCiWt4vFcFvLYCjMN9S81nat98JRX7gijUM/SG1VfC:GapGv99N9S816mRXCM/SYVK","tlshash":"6692d03ff86668de1e195008258ec9b1f2116dd12dca4251be8b827cf2bb117d56bd3c","first_seen":"2026-07-05T04:52:57.80856Z","last_seen":"2026-09-20T10:45:32.475604Z","times_seen":10,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/scale-chatbot/assets/scale-chatbot-cta.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.157Z","timestamp":1789901076157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/scale-chatbot/assets/scale-chatbot-cta.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-7dd\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mm%2BTAC0t7h3rix3U6gVyklBV%2FtUmoWOtXhyg5UOUuo%2BE5T4xIKE8H8h9W9EFb3vktp6FJz6htb97xMsmqUEqN09faqF0S%2BBUyTAvUAtUeDcQToDxJZWKjnvnK7Momhg%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dfebcb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2013,"size_decoded":1730,"mime_type":"image/svg+xml","magic":"SVG XML document","md5":"46f9b8736779116e6770f696f02a1b36","sha1":"6ecfcb800c16bf9345d63253146745d997c700ec","sha256":"9f0de41afcea5b90f60208613a2c3a29c9dab802260e93c3b596f8ff0d6dc03d","sha512":"a6da97a4f55627938d4b8796f1068297e203c8e7d501332708574eac14ab613e0de383ce29899c4b8327ce3233daf3d8ccca2ff9dac0f59148a939bea039208d","ssdeep":"","tlshash":"f94124985b8124f8624143e0db11a2703fbb543f2b6bdb45c061d770f20989dc97bcd8","first_seen":"2026-02-27T20:54:03.329765Z","last_seen":"2026-09-20T10:45:32.476231Z","times_seen":31,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/partners/bybit.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.312Z","timestamp":1789901076312,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/partners/bybit.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-36e\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fp1hyUo5u1aQTlOWkFJICL5PrdJO3T1LUngAeXcLaD2QyPUv1Kfda%2BfQHZGJb%2B5auCSusVajEhtmFoVqHWbYyPUFvZkbnBomN5X9iAproowPs%2FSckyBKXN%2FPqUOmUU4%3D\"}]}\r\ncf-ray: a3e03c5efed3b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 878\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":878,"size_decoded":1635,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"344f740cfc665391f08aef9724ad3138","sha1":"f7a5c6aa735e57a9c04b9e1d3443c2b9eb5953cc","sha256":"b7954ec621582949bf9b2949b96606fe81af5b68f9e3fee983ade87f50df6688","sha512":"b7c918dc1fd6ffdfe109b4a617ecec4b7eb8d9cf0f4ac17e674c274d9b847889d3d3fbab157a1b631c2da7378f9263a0a82e952bee2b88577ab44357ad7c4fc8","ssdeep":"","tlshash":"681196ea26b628a1701404f304560e1f9de701100d189a6b3dbd86f4ede1d5f4fb65a8","first_seen":"2026-01-19T22:26:53.626375Z","last_seen":"2026-09-20T10:45:32.476778Z","times_seen":14,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/zh-TW.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.127Z","timestamp":1789901076127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/zh-TW.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-1a0\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5nhZDLsO7aLo4S4IQdkZtGigPRdv8qdJAJidOd0Me388gqn3Zf1ZCO54mQHt7dZcDYpO923lojEmROhOqdxU%2FBXzO7QIYZxdOL3akPlwryeSLWqVBiIV2Ic2W%2FHrWSU%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5dce9eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":416,"size_decoded":1009,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c3088980d12a3e9e5253e803cf348095","sha1":"54aaf5c117de313a17930d3b0f14c12d1b6aa776","sha256":"ea364b17f2d75dc89cbbf3ed7739639bb26971258462684c2344f7016ed3f353","sha512":"c8747bef4ed3aedd00e39fb3b01881fdc2dc15b89a9ce2249ff65bd3ef1b190c33020504fa34ff2d97d940b37d3a0e35bed50d5d97458044b3582cd7467ca00e","ssdeep":"","tlshash":"b1e0e5ac19081c19cf80d370d68ef8ca129bb18ea25302baf2057427124396f29ca215","first_seen":"2025-07-24T14:35:25.12448Z","last_seen":"2026-09-20T10:45:32.477366Z","times_seen":32,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/partners/coindesk.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.316Z","timestamp":1789901076316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/partners/coindesk.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-676\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i6YPxMiilFWxkU74X2LhwGPp0%2Ffdlfe4feguGAXdUVVJml3QEJPvsJbZjKyPfCVjBKWiNenMgoLxrmJzKu%2Br4NKZvdzM57pfYny31yf08sFqN%2FAMspNJMeQWOPeIdzo%3D\"}]}\r\ncf-ray: a3e03c5efed6b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1654\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1654,"size_decoded":2410,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"94c33a1c5520402e77914d33b2ec2e82","sha1":"16c41c9592d1ee9dc90cac1da835760096c234ab","sha256":"9d91b23191df2b57524e5f6beb5294104ff356bb934e0e80f45eaedb00dcb49d","sha512":"127bc669e88d19e468601d9f4ba06e73f9310866408b70bf251d576a01900849164e5ee215515df42cf0248f43afb0b2efbcb226a7dcf1f9000da1e8ea5b0b48","ssdeep":"","tlshash":"7131d8e0812e88c3d4cb856340f6ad86945560dcb4206a69dd0faaa4480bb20ba196ff","first_seen":"2026-01-19T22:26:53.622263Z","last_seen":"2026-09-20T10:45:32.477975Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/0ORl1h6uuG.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.240Z","timestamp":1789901078240,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/0ORl1h6uuG.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/tv-ticker-tape.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: bLYbS5kz3HsgX5vsjDlSRRKfkbghLGMwqx3pNteOryJ7UGRUJhOsDQ==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:10 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"713533ba9d1cd0476bfbf6ab5c8e4720\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177623\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2429,"size_decoded":1987,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2429), with no line terminators","md5":"713533ba9d1cd0476bfbf6ab5c8e4720","sha1":"6572b30e2e45c43a3c5f3edd9448db89f4d4c485","sha256":"373c9f5dc789c5e52f8b1bc3d615d6af748de3b073e68ef3cd54c5b11ed8f09e","sha512":"135d1c2c7a84f8534fd8df59dd7f8a48c2a334429e20c76776913fc2fa7fb0b42dcfb59d7bba8ed774c14a02b35318acf42f812f817339cf285c99fe1d17497a","ssdeep":"","tlshash":"fa41b78c3253fb7c926d737ce0f61a0792fa29a072dcc142a35c6f942652c44c85de76","first_seen":"2026-09-19T05:04:01.067181Z","last_seen":"2026-09-20T10:45:32.478569Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/reg-form/reg-form.css","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.077Z","timestamp":1789901076077,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/reg-form/reg-form.css HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-790\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sqTdHOqVHOBviRUisieDfuAFtm9Z%2FjFhN9YIdSX%2BHbPfSV8eQ6balaLS8MM2ejz3YduNCmTgVN8N%2BVOiPKEnqQsIhOyi4ecFRekrzS%2BcetGapBba66NsljMknRw8TY8%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d8e76b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1936,"size_decoded":1516,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"63fa3816b55563b3add8ff7279775a7c","sha1":"7c882c0287f5a3289e433b10c4453e7cf17beb74","sha256":"5e14f9312126b7b1685896b1343565c531be9e5dff18eaabe7d8fce3623f024b","sha512":"e1740b640e7c91bb6fca84573ae102daad7368051f68113b40cf4c1eb84f9a7e0ca989ab2338264a6f9d632a2bdc54c37554b73da53a3080ebddbdea7b39f219","ssdeep":"","tlshash":"79413fa2c5b30d54305341a967f693793b8d45039b8bea74bf9473588f893e1a2607dc","first_seen":"2026-07-18T04:13:48.559954Z","last_seen":"2026-09-20T10:45:32.479141Z","times_seen":12,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/5mqIaTwOe_.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.238Z","timestamp":1789901078238,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/5mqIaTwOe_.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/tv-ticker-tape.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: FRwMWyKIxr4qe_kwWlKAgsHt1ZcRicUJrged9HOwygigAGRjEySoJA==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"cb3d7550219724bed0efb817f4f01545\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177623\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":72467,"size_decoded":21832,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (50880)","md5":"cb3d7550219724bed0efb817f4f01545","sha1":"3546ab2d13a8d1954aa4ab9f6201e2b9d05df9bf","sha256":"aa5bba780b4373693ea509c7d47b5ef1e8467d2e574debd103ac1f596ce03802","sha512":"70154ff7f45db2b9ff9ba4c8486077632104649b8b67dc9f8f55ebb6646b6e580e92bbcfe8d84198e00d37f80f31077852c249faf341d544f7a78bd06dee6494","ssdeep":"1536:mus6ZA7FXkY615eVap4LtC24vBCQvd+9g:KUB5fp4LtC24vBCQvd+9g","tlshash":"1f63d596b352f233bf8aa26b9e5d4108e708b4c0ac48807db558b4d925c3efd1175fb9","first_seen":"2026-09-19T05:04:00.8846Z","last_seen":"2026-09-20T10:45:32.479682Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/xime7DrNA2.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.291Z","timestamp":1789901078291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/xime7DrNA2.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: VYyUTxz5AI_rQmWS1Y0yenD7qFEUFHhK6uqLli3OL8sG92sPQ3-FDA==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"677e5e1582c8a36c5cd06ef01acc2fc7\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177623\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":2062,"size_decoded":1741,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2062), with no line terminators","md5":"677e5e1582c8a36c5cd06ef01acc2fc7","sha1":"141a5fe6910a2b2685249bbe4f09b7a2c68a9fb9","sha256":"94e0cda99b1acedd72ff5b41137c7c9f0217cafe4497a02ed1ccf1831486067d","sha512":"abefb3a0afac1cb9f7b22a62ad59ca0e4d35c35ea5b9e035d26171f4f7d5c8adb423102197068b0737daf3787f14de3082dbca29136ad2e1a9e734c3c366ed03","ssdeep":"","tlshash":"2f41c502ba13e4f60a471172c476a1a15b268a4ceb55c0a8fc4536f41b8f1d4dc7e73a","first_seen":"2026-09-19T05:04:01.070933Z","last_seen":"2026-09-20T10:45:32.480229Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/252X1Ocy0-.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.329Z","timestamp":1789901078329,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/252X1Ocy0-.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: Ru7DYRcgGBPXbM60pj5vy12XV2Mi1O5JUOxoZYhR1EEyy-UVj-YyLQ==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:10 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"ff8576d1f74e3701ffdae7068a0c3260\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":1722,"size_decoded":1610,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1722), with no line terminators","md5":"ff8576d1f74e3701ffdae7068a0c3260","sha1":"006d446cdf43cec3d4c7a0826f9017f9ec643a68","sha256":"dcbfa56b268ebe03f3e6f1e05c3bafa3118cf1cf61debbf6dcbddda5b3f95698","sha512":"a2865dbb223cf027dc1a347ec24d19f4ec6aba4e932ad5e8c34d1f931d21be6d6f3405bac72d8c4d94b051bb51fe9b3b15920004083cf19e10d3f300a22c067b","ssdeep":"","tlshash":"a5311547f031e270be7545a28054263baba9b8715a17916cf71448d0b75a8d37e3ef31","first_seen":"2026-09-19T05:04:01.082148Z","last_seen":"2026-09-20T10:45:32.480735Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/a4MGWLHy7a.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.353Z","timestamp":1789901078353,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/a4MGWLHy7a.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/zfMORx0xp_.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: QLM-hwyEAWhG8iAn91MgaKJiu_EzJyyr2CLhyKIdM-fwGbJ00OF5YQ==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"754034716e1c55a52ef1693b730da277\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2435,"size_decoded":1878,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2435), with no line terminators","md5":"754034716e1c55a52ef1693b730da277","sha1":"6fb7a6b6da9a7b6912bf38229611f3b4e0b683f7","sha256":"323f16cfc7c0895ebc233e19410f1cf1d31b508d86a454b3ac92dbebd20b7418","sha512":"9d99c3ddc6545dbf6886abc0d04d0fd5f844bdcff9e8869cdfe9ae4053075d514e056ade7d0bb53a3874b30a2576bb6392f6e941a054a4d93b3ccaf212dae4b6","ssdeep":"","tlshash":"814132a1338267563bb241530c668346b32d1c93388d153c79acadc72a679e9b0eab75","first_seen":"2026-09-19T05:04:00.998099Z","last_seen":"2026-09-20T10:45:32.481249Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/geo-flag.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.075Z","timestamp":1789901076075,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/geo/geo-flag.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-47b\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b7qfsh7aAsdWgv3IsymI45ErfIpWZLGd4GmyQXI1Yu2lOEQKg89%2FDlz7fdLLgbfUI4swVieGompQoyRscc7SGuePSrjc5jF%2FVwiRJZQXV5dBBg5Ve5e6rCX0853lUTQ%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d7e74b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1147,"size_decoded":1334,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text","md5":"4356e963f78e4937cd1e0dddcbbe5997","sha1":"bc8d412d4608c04ccb9dcd7780875be304b5e3b7","sha256":"3af01327aa9b196c1313f25b4bd7aaac0511d84867a9b9fef0c84320eec69d52","sha512":"808952959c8445ad7ed1f15deac91987a299eb39d6a058b6df7bf835f10ec67e8660e5ec3750977b2c2f9732cd535b173704a8b1f253bbff7bd5bbe4014f0c62","ssdeep":"","tlshash":"0821af2dbce3247a8917f17824af404972b52023110ddd057d0d85589fa95384af47dc","first_seen":"2026-07-18T04:13:48.526404Z","last_seen":"2026-09-20T10:45:32.440954Z","times_seen":11,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/ch.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.112Z","timestamp":1789901076112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/ch.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-14466\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bpLGTHdSr6QYUg7wJ18SuegPg1iP6XPIRDdWOx1nGGVj4GcJm9quxqopZ9xzw4zRQ0GtH7RApvsWAKMsXL3Tb2h6mPb66qfKOq7p9wQu1MgQMXHK7TAqxo491%2FBTqg0%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dbe93b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":83046,"size_decoded":4010,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fc0a75295cf31768787fb267ac590167","sha1":"4120b02953956c141dc9ab6d3062914fbaaf226d","sha256":"a06b0fef95c11010ccbcf40ed08c635db3a40dc91b3970245426961840e2a38f","sha512":"ee1cc9b7bb437c94fddd1c3c69abca703f28edb2bf4413cf2792ebd699340f1cc4a509e6fd989aac4a17caf4bd5e1c4c180a1e3810f48d6935ebfcc67586c415","ssdeep":"768:jZZZZZZZZZZZZZZZZZZZZZZZCDDDDDDDDDDDDDDDDDD7flflRAAAAAt1111117N:EDDDDDDDDDDDDDDDDDD7NNU111111R","tlshash":"cc83822e1c4daf5e37361d6ecb03207e6e8664ecb20985cf3a8f35edc3224519661da5","first_seen":"2026-07-19T04:12:11.624021Z","last_seen":"2026-09-20T10:45:32.481748Z","times_seen":15,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/lt.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.122Z","timestamp":1789901076122,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/lt.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-b2\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HZcodnp3GVXaDelJW4U%2BG26XMDcR3CNYJtL19YwsdvVU39KRLh2hF1g%2BZ0A36xm2MbMfh%2FQ1CiYQntoxZtx2xnJPJHaH%2FIXqHpR3OmQMe6RyTXn3dkz8eVvjFJI6VXg%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5dce9bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":178,"size_decoded":871,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"60ce52ef375f0a7bf84149719ad6a8e2","sha1":"3d701e7b8bfe1efd9007a8923a5840b8980f156e","sha256":"429d40e370103a47cb2fa03e143136308ce0ad387fc05acfff349d40406440a2","sha512":"5a8069085ac543465be7b60127e2496c665a2c131f92ca40c3012e38f5d5525ea8bdb9bf3e78d0660907ecd3a59f7f142ac038d3424c3106f914413525932664","ssdeep":"","tlshash":"80c080d5507c6d404d1043735d9c30cb51c720d7309401dcf0c41528234d3cb7d45d51","first_seen":"2023-06-02T00:03:05Z","last_seen":"2026-09-20T10:45:32.482236Z","times_seen":87,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/al4F_m27lM.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.301Z","timestamp":1789901078301,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/al4F_m27lM.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/5mqIaTwOe_.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 227\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:15 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\netag: \"46c570dc92d4ba8631e4aae3b2597896\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177624\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: Pic02Ml4BnN6oV7EsRCnxfqpwTZaoyZmcyLQfxTqOifQ2mmXxE-ovg==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":227,"size_decoded":1041,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"46c570dc92d4ba8631e4aae3b2597896","sha1":"7e52f007d3f85d7e81f36b2630703fc49d0c1ed2","sha256":"f42a7e25f42fd00b0935f3a7b06f4429238b50b6798b53c273e30d7095f9e94e","sha512":"874252ce33742c45f4d46d341eab150b2b52ddaa1b61ccc5e8847da7d8238e3e985419568809378ee86d2a63dff9e7be06e37412741b467e281d2d09e4cc4eb9","ssdeep":"","tlshash":"f9d0a7572250b6d8139685825b0dc182a65418f5a9fd91e4f6bd4b1620800c821d5f2a","first_seen":"2026-05-11T09:26:45.785238Z","last_seen":"2026-09-20T10:45:32.48277Z","times_seen":127,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto/XTVCUSDT.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.800Z","timestamp":1789901078800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto/XTVCUSDT.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 10:44:38 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"bbb4f6e32f1ca29b50e4d51d2ff90533\"\r\nlast-modified: Fri, 18 Nov 2022 08:44:56 GMT\r\nx-amz-id-2: 0yh3bnqw5rUJD40/e/LsBf0RNpPCuu8PmhwRzvcQXNy5ATgVHmaethCtwwYHLJgISppH1v8qUS8=\r\nx-amz-request-id: 0BHP531VPKBRK5DV\r\nx-amz-meta-hash: bbb4f6e32f1ca29b50e4d51d2ff90533\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.62\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 08/31/2026 10:43:28\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 1071b0b2141bb5182ce7da298de3f933\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":456,"size_decoded":1208,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (456), with no line terminators","md5":"bbb4f6e32f1ca29b50e4d51d2ff90533","sha1":"91813b2f633589f1a54acc07e079f5fb16814ab8","sha256":"c44cfa6a107ce04e8893a36785ee019b6c76f20c03464fc5f652004ba7513f0a","sha512":"6925c29399407f316cfa724f7cfeb17e8ba499ae75288ebcbc16e4b221ae9427474c8e2d0c3e6b23e64f0afbd1205c827414b8ff1442dd90a387794e4535fd24","ssdeep":"","tlshash":"0ff0d46e9704d9cbc504826ae77c907619c620d5f28e1298fca15b5034877db2a04cbd","first_seen":"2023-05-02T00:43:59Z","last_seen":"2026-09-20T10:45:32.483298Z","times_seen":2078,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/data/geo-reviews.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.099Z","timestamp":1789901076099,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/data/geo-reviews.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-3308\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=orlx3KGrsxUk7TqoF6lGzhfU8baCLK%2B86INrleb3CcsLRr%2F%2BNO5itNGnnKbmmLHCCH2DSh3oQmBrZKIz0W2Ejr%2FAnp3JlHA%2BQyQgByYZvArcgvwe%2FCiFsPBj3ykSqzI%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dae89b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13064,"size_decoded":4448,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"f33490454a0f1b28c4dc27c1cae30c45","sha1":"0006496d1e433236d0374b966035d5dfe04b815b","sha256":"96a38ba5601f9e8d65a4a4604bdebbc730542b5dfda2cca9711698c06acffb3f","sha512":"da1f54309eeb9674523852658e077b1b5f46127dca639031d73f473747a80f371d73754f9d2cb0295d6bcbc7a427ee928eb760f76396c30cc0b9d40b2e6d21d8","ssdeep":"192:1FJZa8hVkOXmD8rbJRZhJ/Mcy6spHDFhd9x4LFCc0/rCRZcxh6Qhh2:TJZaSkOWD8HnaHD/9+LEcCmZ91","tlshash":"8542722ba19412075cb3d0352d1f9585f36923af1d84ed69be8f412e6f2d83d92b9dc0","first_seen":"2026-07-05T04:52:57.855391Z","last_seen":"2026-09-20T10:45:32.484174Z","times_seen":11,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/ca.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.131Z","timestamp":1789901076131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/ca.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-9258\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vMTO2SvIoZFW%2F%2BHeo1i7EPdScyAUbKiIRTo%2BojKrvveQxUYyxOg4isei9AlTNlVBACLX0ijY0JT6G1leUW0BHfY7PsmuOpgvmOLrJjEN2dbtbTiZvu5u4mazwqv2BZY%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5ddea1b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37464,"size_decoded":26105,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"82aa56b4cab5f3fa77c6df190e723c29","sha1":"f3042ab8b4e3205ac0e832f68167a354b8272728","sha256":"065d6deb0eefa2e3662943bfd1b49beaa8ae3931b01de129218f9743e7b55398","sha512":"8542d614ebe33230c9362e598452cdb7178a1875539880fa9216c07fe1f338cbdbb1237e6818b8513e9d4c523f7227d8e9df2154beccf7c897d737b9cb98adcb","ssdeep":"768:PkC6QnHwTjdGKYkgq9gMaD84niAV27mTPOd8sH:PkC6QnQ/dGpL4gM28Ix/5U","tlshash":"77f28db6861a7ab8bab6ccbc49080c675c1c18c59160d5deed4ee3f68b7a5b08c4cd74","first_seen":"2026-07-05T04:52:57.868625Z","last_seen":"2026-09-20T10:45:32.484749Z","times_seen":11,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/tv-ticker-tape.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.063Z","timestamp":1789901078063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/tv-ticker-tape.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: NS14xCXs-oOTSZrIou3GOBfYx-aEFhekMHyPtYRjYueOKbtSyfMNRQ==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\ndate: Sun, 20 Sep 2026 10:40:22 GMT\r\ncache-control: public, max-age=1800\r\netag: W/\"4f1a880d1837e98b43994d85d3c7ddd2\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 276\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":6264,"size_decoded":3153,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (6264), with no line terminators","md5":"4f1a880d1837e98b43994d85d3c7ddd2","sha1":"67f65c4b99269e91816cc567e490dc672fff969a","sha256":"89644a97eb7d89796754d1e805eb9f55659eb2c47f24971a3adda00f782077ae","sha512":"6ae5ee94b0968451382a734fad48b9e01d9746f015b4d06621cd40f1b4f6a6adc4633c8a0bf7615fa7539d816d66431caa52e8db1739dd4d86de971642161aa1","ssdeep":"96:2NJEfwrRPus/OsDOjrrczx1nAem6ILyNhuQMzsVLUbN4eAR//Mk8atw:2bVdPus/OsDOjEyem3WjNVLUbN4z9/RA","tlshash":"85d19453b350b9327294c112cf5a06a6c3244019d90c847cf6e9d9e95acbadd3bfdb36","first_seen":"2026-09-19T05:04:00.996142Z","last_seen":"2026-09-20T10:45:32.485391Z","times_seen":8,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":0,"dns":35,"connect":17,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/scale-chatbot/assets/ai-chatbot.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.438Z","timestamp":1789901076438,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/scale-chatbot/assets/ai-chatbot.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/module/scale-chatbot/assets/chatbot-styles.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-ccc\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9BmETJXvPckiE9XBC0GG%2BjsdNMvbMZC0p6qESlqsmrUfE0GMVfpV4oFDP1AaUOteaKd%2BTrFVEGdkvb7O4usnHTVvYC2KNajQQkeU29h9QpbMSEVcuzNjbyyDHsO6wFg%3D\"}]}\r\ncf-ray: a3e03c5fcef5b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3276\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3276,"size_decoded":4030,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"b545da3ed40646ad60ae699214797f67","sha1":"faa83e13fa662f37af955c592a335c7a4406b7fd","sha256":"1edb4f3a7b4c3c57581c49074dac4e8f6ea8c5a57ffbe5b1cf89db533758d21e","sha512":"fdb1dd1821c9c8cc120422500898a5cbb4941c4386af2f428ee888eb6480c4f82022f3a280fac8ea5c60b0c791d202c25915608c6e1f218304929c5f4809bd2e","ssdeep":"","tlshash":"77616b3089063ace84715206164be937808f2c32a98d99a5cc46bb524e4c87bdb5b23a","first_seen":"2026-01-19T22:26:53.605808Z","last_seen":"2026-09-20T10:45:32.486004Z","times_seen":22,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/calculator/i18n/i18n.json","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.492Z","timestamp":1789901076492,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/calculator/i18n/i18n.json HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zephgain.org/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/json\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-1c44d\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=3600\r\nx-cache-status: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vIX%2BiIk7yTzw5M9KTKJvjpG5VRBqPgNuM%2BbtnncPggVJz8V4Rw9%2BWZB7%2B1ipUBOdUhVVqI7G6jmWqk6FTUGY1Su5ElKedbGxqeGALy9KAw8gpr89Ksj5xN17IJp2fUw%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c601efeb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":115789,"size_decoded":33199,"mime_type":"application/json","magic":"Unicode text, UTF-8 text","md5":"efa06f3d66cabaaff2ed1475e3f0e858","sha1":"7fc615901c5c040b00388e6ce4a8c7e9b6ad70f9","sha256":"ac2cf84e6b37d8f8215d00640bab615d767d66c1a46fd167e99eea88ea98532d","sha512":"9795af87afa0ef9b63340997f164dc77d8e4f675aca1f72518abb0292a9684435095df0d96293f2aacf67710d752e935a89739528011df64199744c9ae28df2d","ssdeep":"1536:LCXWf6bavknCPzl6PeGoAmKdrs9WR4duE3QNyOhhB2cluy:LCXpwl6PeGoArTyQNyOhz7uy","tlshash":"49b38468cc70cf638248b2957196962651b4062b2e49765df74c6f8e1fccc6fcbb821e","first_seen":"2026-08-25T03:41:53.678512Z","last_seen":"2026-09-20T10:45:32.486628Z","times_seen":4,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/rAeTivbriV.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.321Z","timestamp":1789901078321,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/rAeTivbriV.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 945\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\netag: \"7bd82aae0f45a7b8dea3bcf35407e72e\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: 9-haodCcIZXVJfdpUlOCyWqWGZLVsx-anriy1bqvilyh1AwfL8wtRw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":945,"size_decoded":1759,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (945), with no line terminators","md5":"7bd82aae0f45a7b8dea3bcf35407e72e","sha1":"b32e06aa58cc9bf4edc88f5346230faa204c0e65","sha256":"65cef6e9f657a75e60a2cbdd508a0f6637642c44234f92946939c33cad872480","sha512":"1b1a26cc94a8cb32fde7e6cef24e782a4cb1a567fb16aa768c78ff952829f79332d9154367af3cb68bf8a8dc4808f8a0e8a737294a0f073d4b289dd84e244034","ssdeep":"","tlshash":"de1121e275c26108878b12b0809a4c89f064cce3c82f6e74b609e1333c7081796bdf98","first_seen":"2026-06-24T17:21:49.777484Z","last_seen":"2026-09-20T10:45:32.487414Z","times_seen":76,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/OnMUZouvDW.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.482Z","timestamp":1789901078482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/OnMUZouvDW.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/fpEnGU-zjN.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: yOJ3-5js3mvsykWHvnYd9HktpVl5uaNfT0Ie-2suDLpyHzdoQftI4Q==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"b7592c8a64512312aeea65f01c2af171\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2695,"size_decoded":1818,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2695), with no line terminators","md5":"b7592c8a64512312aeea65f01c2af171","sha1":"2a236fe524679b319db4b2fca164b08a43860b92","sha256":"c96677b8d073e3f0b1f12960cb21c78ef55344cf55a4b89ceea9e800b2fd9bc4","sha512":"1bf835ed0f6806f94a2d10a65ccdfe57f852c3ea5d0b3823195cf8fa4440a03c5036412052f8e2a2ac0abea5c43efee0ac30e51e8330ed67b0b6838a4fba73a5","ssdeep":"","tlshash":"51511071b2a9a269f3e441614c3d440332197483bd89052cf1e958ededebcd97abc63d","first_seen":"2026-09-19T18:35:44.59071Z","last_seen":"2026-09-20T10:45:32.488114Z","times_seen":5,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/RDMBUP1qX2.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.235Z","timestamp":1789901078235,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/RDMBUP1qX2.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/tv-ticker-tape.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: kfs58pt2SBUEq59VCKRf2c7yfeY-MvtDM_4w_w1jpxT82Nb6ZIzLcw==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"2e9ab9c38a4dc27bdd8cd2834a17005e\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177623\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24933,"size_decoded":9619,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6724)","md5":"2e9ab9c38a4dc27bdd8cd2834a17005e","sha1":"88d30bc73d89e8c96d5d800ee1debfb8762867d7","sha256":"4d8bdc91d7646653176fd49cca6fcc1c79060ea4bf267478040c5ac35e1408ba","sha512":"853ccec9e650f2dacb18badae53655f75339e5e7aed23c913b2bcfd9630263aabbf05b89d8815982bd9004822e867c75021d3a76f4b5c59b8b6fea4c3a3671f2","ssdeep":"384:NJ+0Cvb9uCrMKoK1kvVrBfAeSQWkeXB8dk4XH0Pe0DpE:NJ+vbM8MKoKetrBfZSQWkex81kPeWE","tlshash":"3eb2b39233e9b4b347d9c1979c32451bf3527098382d442cb66978ff6468e82a1faf71","first_seen":"2026-09-19T05:04:01.080738Z","last_seen":"2026-09-20T10:45:32.488734Z","times_seen":9,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/1_mm97losW.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.479Z","timestamp":1789901078479,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/1_mm97losW.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/fpEnGU-zjN.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: FkBbpR8aSMfma3HvHiCyGIp7UtUtlQ2I2cCVuw9-DDB8kOburN7Gkw==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"71ed594bdd01b5726bbfc10389df6a18\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":170272,"size_decoded":53405,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (56642)","md5":"71ed594bdd01b5726bbfc10389df6a18","sha1":"47a0bdc7a7a106ede206d6f42b5837c3d42c981c","sha256":"eb2c59d4c5f77ecf6337dedf06f2f4d31f77e5846ef983d8f0bcd313e36e0b2c","sha512":"847dfba4bde13ce46a6c3e82f875b93ffbc9fbeeba84ec1f9f5344746bffd42026d81d30e5bc5339a0def703e316bb2eb5b5eb9a59941022f55daa00b4e2f8b1","ssdeep":"3072:bxLHBfv7EgZ1UdH4RhPta+XzgJBUN3DevEtoI1:bxLHSgZ1UdH4RhPtxXzgJBUN3DevAh","tlshash":"02f3f9a533aab4635399c2ba54350042f32a78c52d0e052cf57dacdb3da5d09b1faf74","first_seen":"2026-09-19T18:35:44.696278Z","last_seen":"2026-09-20T10:45:32.489337Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widget-sheriff.tradingview-widget.com/sheriff/api/v1/rules/search?origin=https%3A%2F%2Fzephgain.org","fqdn":"widget-sheriff.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"143.204.238.21","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://widgets.tradingview-widget.com/datafeed/tv.html?page_url=https%3A%2F%2Fzephgain.org%2F","date":"2026-09-20T10:44:38.598Z","timestamp":1789901078598,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Sat, 27 Dec 2025 00:00:00 GMT","end":"Sun, 24 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"0A:93:73:BB:95:EC:D1:52:11:5B:CC:2D:92:43:D4:FD:5A:2E:BE:A4","sha256":"70:E8:96:A5:F6:09:13:92:CB:0D:3F:A5:37:C4:A1:0D:4A:F7:52:C0:C1:B6:21:DB:D5:92:33:3F:B5:7D:EE:0F"}}},"request":{"raw":"GET /sheriff/api/v1/rules/search?origin=https%3A%2F%2Fzephgain.org HTTP/1.1\r\nHost: widget-sheriff.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/\r\nOrigin: https://widgets.tradingview-widget.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 \r\nage: 1872\r\ndate: Sun, 20 Sep 2026 10:13:26 GMT\r\ncache-control: public, max-age=3600, s-maxage=3600\r\nserver: tv\r\nvia: 443, 1.1 2a1f7d47d7641ae8baf84743cec275d0.cloudfront.net (CloudFront)\r\naccess-control-allow-origin: https://widgets.tradingview-widget.com\r\naccess-control-max-age: 86400\r\naccess-control-allow-methods: GET, HEAD, POST, OPTIONS\r\ncross-origin-resource-policy: same-site\r\nvary: Origin\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: SMAYd31UArBA_FBip6UvzKHzVjdqvIOy610_afvWj351lhcN_1mzTA==\r\nx-amz-cf-pop: ARN53-P4\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":0,"size_decoded":539,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T13:41:55.768983Z","times_seen":18568611,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":0,"dns":44,"connect":16,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-20T10:44:35.624Z","timestamp":1789901075624,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npragma: no-cache\r\npriority: u=0,i\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=3600\r\nx-cache-status: HIT\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=N24KM%2Bj2XMllAFjLqSBhQfoUcOwV9n3Zt9k8iAnNCvmubtBcyglkvDAteA%2BD0Bbi839YQKQI72qyB2sNjM7E610AGmr8dGhqpHHGDGVQpefNaIsrfdmlkixVJa2fzWE%3D\"}]}\r\ncontent-encoding: zstd\r\nvary: accept-encoding\r\ncf-ray: a3e03c5b1e06b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"UIKit","description":"UIKit is the framework used for developing iOS applications.","website":"https://getuikit.com","common_platform_enumeration":"","icon":"UIKit.svg","categories":["UI frameworks"]}],"data":{"size":1463582,"size_decoded":346092,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (15997)","md5":"dab515cd287a1dbbea4a5672064bc06f","sha1":"4ea06f584d0e8d908c67160e350cdbfb0f694d6d","sha256":"282888eb7b515e96a983dcd8410629baa2a79aa175830ab1856bc058fe58726c","sha512":"6280213a8e028576c181e0889a8c919f9878d3d567679899adfada97053be38d88329f7701a049bc50bdeae13bcc5c5b6d790b86778eed1c7f058c75ca437c04","ssdeep":"24576:dehUbC6YtP9TLGhje+hs/R68EhASKdhchRRhMJLdhIHl9hAaFE:deKuJ+hs/R68EhASKdhchRRhMJLdhIHo","tlshash":"af359d1712fb043b1753d0b92287b6157b6c50235246cce5baac8718afcae45e6b37ec","first_seen":"2026-09-20T10:23:25.909764Z","last_seen":"2026-09-20T10:45:32.490577Z","times_seen":2,"resource_available":true,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":51,"connect":16,"send":0,"wait":170,"receive":127,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/partners/binance.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.311Z","timestamp":1789901076311,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/partners/binance.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-452\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ABNsPjtFaY3avdUOJ3fcwvFHV%2FnlJ3t%2BPSKiZTx%2B3YsayIkCWzei7rRv4t09yzTQwNPWTIxxxFn7jx18F9W4BjY9N1Hffop1%2BtXukecIGj%2B8uA1hOPaADX4CCKbggzo%3D\"}]}\r\ncf-ray: a3e03c5efed2b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1106\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1106,"size_decoded":1866,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"5649e49167a96b5305d1b8303d3c6d21","sha1":"457bad7d6c006ea8d8525c77bf827cc2ac5457bb","sha256":"8db35427570a8e2fc0b3ba1cca4f80b34edf2c652ed62d952a35d9d0979ec7dd","sha512":"7875c76da845964a64b6a9b0ecbc6a38f660073cd2abada9482223903c76744f50cf891b8705e9aed0d6f31e80096d221d10da6db0aea3f34a7f27246a120cab","ssdeep":"","tlshash":"3a11ec4c4b67074d962fb1fd04f421649d73d0a9c07e4b15d1e9715c351f8d136a8061","first_seen":"2026-01-19T22:26:53.613067Z","last_seen":"2026-09-20T10:45:32.492092Z","times_seen":14,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/vendor/js/jquery-3.1.1.min.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.091Z","timestamp":1789901076091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/vendor/js/jquery-3.1.1.min.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-152b5\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GLJva8%2B3hezs23u49VJ0bq8aRtPsSUPXi9CILVmztKZRPz3p1%2BQ7KAxrxKnsfg9iphTB0PBDY2cOzprtm%2FJ1KPjMKYYudDI77%2FfwwBuaZIzpKAmL8gPXiOhr35Mgt30%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d9e83b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86709,"size_decoded":30915,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32030)","md5":"e071abda8fe61194711cfc2ab99fe104","sha1":"f647a6d37dc4ca055ced3cf64bbc1f490070acba","sha256":"85556761a8800d14ced8fcd41a6b8b26bf012d44a318866c0d81a62092efd9bf","sha512":"53a2b560b20551672fbb0e6e72632d4fd1c7e2dd2ecf7337ebaaab179cb8be7c87e9d803ce7765706bc7fcbcf993c34587cd1237de5a279aea19911d69067b65","ssdeep":"1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5","tlshash":"3183d5d9b2c670529b7730b850bf450bb17a98dab44c8d60f058c5d57eb8a8e507bf2c","first_seen":"2023-03-07T01:02:34Z","last_seen":"2026-09-20T13:09:26.871544Z","times_seen":167634,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_1.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.133Z","timestamp":1789901076133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_1.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-436\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAePm5mYrxV41R0nUSz4gX3xL26d%2FMT2kqeJ%2FSLlgH9VsUB45KiFrFPppCI7Twnsy3PkybCnE1gvV7EzjzYYHZhr9GSi4TDY6guWzaCs9hnl68yx9%2F431NcL%2Bf1ICF0%3D\"}]}\r\ncf-ray: a3e03c5ddea3b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1078\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1078,"size_decoded":1836,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"4156499b01aecbaf49c4835b456d324b","sha1":"c93a6e331c914e8b2035e7e301ed6dfae1ed4f7b","sha256":"6906fb05dd8c75e589869868896acf85159558ede84ddf6ff33d995f25225696","sha512":"6e2d623114bf5533858e3fabd097751de4ce75e93a5d62e784cacca095997ad927359fb586bfae9e5dd6388c21380ba95c3a17af44246e952d52e672cfae6409","ssdeep":"","tlshash":"8911e98753b08aa1bcb47e229f7f5a1cd35b0d3f932cd256943a25de0a4b3004762cb1","first_seen":"2026-07-05T04:52:57.915144Z","last_seen":"2026-09-20T10:45:32.493302Z","times_seen":9,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/Ve4UPiMhwl.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.241Z","timestamp":1789901078241,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/Ve4UPiMhwl.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/tv-ticker-tape.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: MDFHcqxWcL8aQ4qUzeivirFvncpH7yXTqnRoCc6ZKKpFklWg-47Fhw==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"05ccb3f082f447ff567986684a5a8bfb\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":4097,"size_decoded":2744,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (4097), with no line terminators","md5":"05ccb3f082f447ff567986684a5a8bfb","sha1":"809ce44de377548581fc1bfaec93efc7d33584a1","sha256":"075bb85c4da0ec09940c53c622a286136bae69afd7667eaeb45b66f237819042","sha512":"e9130826f0d9aa798402f451217e1bc5ec4ef57781e98cb03e9c404e3d0d8aed7df10b2ffb5987370b1c5126041cec4badc798d945cf6fe73bb353a2f7f03a00","ssdeep":"96:2aOevHifa3sK5xx3jbf9f4Gyn4Oz4clfYNYtx:2xwHB3sK5xNr9dyvJV3x","tlshash":"728185954300d0ac8817a815df1e59bd175fa8f37f8e06e4e067c67491c36d9dd57038","first_seen":"2026-09-19T05:04:01.098825Z","last_seen":"2026-09-20T10:45:32.493894Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/bWymo0P7bz.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.282Z","timestamp":1789901078282,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/bWymo0P7bz.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/Ve4UPiMhwl.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: DKicX6cZULkSkZkOEOWOC8I4RPgUXmuLdv6qGkeYHgxfteAg4cGMfA==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"8487d79adcef133ea8ca3f29bd7dfc2b\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3235,"size_decoded":2216,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3235), with no line terminators","md5":"8487d79adcef133ea8ca3f29bd7dfc2b","sha1":"972a9471eee02857d2eb94fe7968f765ca38f584","sha256":"102caf937f0d4128dfd86d86af463e91b7167f3a3058b66667d8a74dec7e8602","sha512":"e757e53e3eba335ded356672acde48b25c5cd26076adba513722994a0cdb682e29a45b91d18a2f6a709a7766e4cb7fbb01ce3617bb43eaede8685c91c8170ac9","ssdeep":"","tlshash":"b661b6daf044e372fe07e955478a174c522030020e5e587cf4ba93f112ebbf52876639","first_seen":"2026-09-19T05:04:00.956527Z","last_seen":"2026-09-20T10:45:32.494512Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/AaOX0epfMT.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.292Z","timestamp":1789901078292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/AaOX0epfMT.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: Ggt-7hEbXTbnM1A_YjaUpcIsSo6J7ohuMM7yBNsm_tY0vFAinSd9GA==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"f2b81d3df2e3caa5a3c38b6d3496f930\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177623\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1833,"size_decoded":1581,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1833), with no line terminators","md5":"f2b81d3df2e3caa5a3c38b6d3496f930","sha1":"ed520ca1fd3a4ad590621af983288462eaa59ecf","sha256":"1afe938446879409c91d00bd76384ccf3aad441dd850e46589ccb027269bc07c","sha512":"4ad2e9f75ef072175b3826a10f341822541cf92324fb51300ca2162bf64723912bae6df7a32f481d2be9ae2f052fb70f94a205067d5e1cf634565e5a306a2fa2","ssdeep":"","tlshash":"b631ee133a50c23af892d24b5d6622458346b608d5b6c4fd7b9cebf20587eda3a6c734","first_seen":"2026-09-19T05:04:00.874152Z","last_seen":"2026-09-20T10:45:32.495105Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.294Z","timestamp":1789901078294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/hTu-gZx3Bs.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: iY77D74XiMRbTqpcgfCUXmvYikubd2q442ckHlDp5P3KYCW3WR0pcA==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"c2b4fb6466f3847a8b03d8bbc1f135f7\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":8268,"size_decoded":3616,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8268), with no line terminators","md5":"c2b4fb6466f3847a8b03d8bbc1f135f7","sha1":"b8d538a583cf84a421dbd4fb53a2f5f265cb1d47","sha256":"7107c92b0e060e08264494aa58fe33c9f28f62412325c5be5641d1a78d5c3eaf","sha512":"f9105cafce33f68e078ef9a298dfaca6f14fe7cc9421260054b88423cadd7be15ef7fa24f673c8b48505d3f94499c41ed7dad7830cfba68775cef930db8eb7bb","ssdeep":"192:muNt6dYYPrIsjKDEgGSLLUKATm2mI2EWeHgGl6GlxF9feCsTlYmGIdX2MMZRmLZs:nv6FKLLVATm2mI2EWeHgGl6Glvo3ZGIo","tlshash":"3602d912f9d1b1769ba242328e37181d5728db18e22681fcf4d5c1f4038f6d5996df3a","first_seen":"2026-09-19T05:04:01.052001Z","last_seen":"2026-09-20T10:45:32.495641Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/geo/geo-flag.php","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.627Z","timestamp":1789901076627,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"POST /module/geo/geo-flag.php HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zephgain.org/\r\nContent-Type: text/plain;charset=UTF-8\r\nCache-Control: no-cache, no-store, must-revalidate\r\nPragma: no-cache\r\nContent-Length: 6\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":6,"data":"flag=1"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-content-type-options: nosniff\r\npragma: no-cache\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=3600, s-maxage=3600, stale-while-revalidate=3600\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bzKbBjxtEAIOKkMZaRXaiiFNxnKQzcrN9mdkwyTlQ%2BtrvdPFWTwoAI9hZrbPnkXtSQNREy8GkvzCV6khkWEOD4VeqwEzTZeejoHxRJNLM0dFV8wGp8m0oqvQrhgIolQ%3D\"}]}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c60ef10b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28,"size_decoded":790,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e3cd8e76a5e65d2cf628cd4a4ef078bb","sha1":"4ca39515670a7c180669f926c5ffd364a0e6943a","sha256":"62066eed681df125545919a4f0a5f3b03a5b83007bebcdefbb6aa37c6844556a","sha512":"5f16fe7eed47b9fe71f363f7bf3af49082077d5687184ae9d533cc93aee3bac83111953ce3576786bcefdca98a15012faaeb31d44dcd8b4db3dc8b3c7cf349bb","ssdeep":"","tlshash":"738000082a220a2aa8288308200b38000a8c8a00a2020002e0c83b08c2220ca2000088","first_seen":"2026-08-25T03:41:53.390114Z","last_seen":"2026-09-20T10:45:32.441751Z","times_seen":7,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/script-top.js?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.052Z","timestamp":1789901076052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /script-top.js?v=1785822802 HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-1748\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kKkF%2FpNF2E9w6iY1mXge6QQjCzWUPAJ7HGjSlGkjH%2Faa%2Fj%2FojwQh02NAAFyvBrs%2Bbm%2FHuBb6P7O47P4nKvRRoXsM4nmkrMe5%2FHvtvO5Le0YMS9OUOIgTn6UNOqg5JyE%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d5e66b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5960,"size_decoded":2535,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"ff9de0a537f4370a36e90bcd10c38883","sha1":"dfc082f41110018c4f519b70cc753e4e457b5ec0","sha256":"51d2ac650d126800a65ca5671d2551e51fdcdb6e2e7759b65b7c59171d4dd1e9","sha512":"6a35bea85cd99232674c4efc94cb9e0030cb7420ced82f7b5a626279530f653db447374e3a8d4fe1455bafe14335c34f309b9b307ebe7ea929c9be7c69c3c48e","ssdeep":"96:ikRO4HzxYresL7YI6wNvBo1v8HCGiGxHLG+84CSkfkVuvaatTaP1Ro/0KbF3wrIY:BzClL7H6eH9jnESk8VuCatTe0bF31A62","tlshash":"02c1fd0925b370728653209d5edb528cb631a0173249eb4a7e1ccb805fe657b86e3f8a","first_seen":"2026-07-05T04:52:57.857195Z","last_seen":"2026-09-20T10:45:32.496216Z","times_seen":14,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/module/scale-chatbot/assets/chatbot-styles.css","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.087Z","timestamp":1789901076087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /module/scale-chatbot/assets/chatbot-styles.css HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-1f83\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J5Yi2TjI7sVl%2FYQK66embCpM2G%2BAiRJLCM9BJ36uBfM69Qs6TQH09i50MZdfsU7AB9a0XMuF5VVSLz1mDlZ4RD5%2BfQ%2Bo4586OU6hwzvhB1AfP2PIxe9ALnAqNImavv0%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d8e7bb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8067,"size_decoded":2825,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"d643b16eec20b01935054ffd7779640f","sha1":"ad7f453f74b6c62a746112bbeec70043f9366b99","sha256":"573126d4d77769aa01441f195f6c2fb8a7008b9feeefc2a8b1eed576ef1e136e","sha512":"4718e7b39cab8e4b4c6bb04e4e94aa025d4bb193e0fff259adcca1ae3de0dea879e9070e5592262be0c6a220bbd9f974bfa5123656876a29e7cfe23cf5e3d89e","ssdeep":"192:GE4cUNESEdsgn1/2eh8LixCagnCXZc/44NfX:GtcMESEJthVxaEOnt","tlshash":"abf103d227662108ba5b845379d2bbad731c8482910fdcbc67e1506c9fc62ed24f6f4d","first_seen":"2026-07-18T04:13:48.594404Z","last_seen":"2026-09-20T10:45:32.496782Z","times_seen":6,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/bg13.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.106Z","timestamp":1789901076106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/bg13.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-11b92\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t7qWKD%2Bcflx%2F0VSPIcuxGZzz6SJdq1AUmtzhkU80J7wq1BopvycTbakslhPpF0LS6JXBWNZmRAROXdNEE%2BQciUKJhbnNNQQXGDiyunt%2FkoEXy76jSpc0HoT2rFlWocU%3D\"}]}\r\ncf-ray: a3e03c5dae8eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 72594\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72594,"size_decoded":73355,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"95f3ea1df44c0fbe9c394e251ddf8687","sha1":"c73aa0d3861ec6749a872034d6a561259f44e9e8","sha256":"c8c965d5e4f11e901a0e586b260bb2911c85d7bb2b62aff3f4d397bfe1eeaa02","sha512":"a4c373c96c7a56cbdfe282ad281c4339ebb3d24dc322948da74ea99ca9f9879b601c0ab5d06874e88733c506e351263c2d0149a34b807fd26f39c07bbd4b3471","ssdeep":"1536:PkesWYOmIiunU/B4FAObBtcbOcVQ0+VDTSgZWJPu:pspvoUJ4FA/OVD5klu","tlshash":"a06302ea61cb46af57893d2fcd9740dd9411820d31083d523063bfea6e8c67991bf0c6","first_seen":"2026-07-01T01:34:34.071717Z","last_seen":"2026-09-20T10:45:32.497368Z","times_seen":14,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/ar.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.109Z","timestamp":1789901076109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/ar.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-50bf\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tbV%2ByHjyiCO%2FDIgCGzlimzvijf4%2F4K8xK%2BL4SUlJdm%2BIo2YcibuOEuIhRFjUn0fE5k9hdZF3JZq83OpoPvdIvWge8vobjPf4bq5kLZzhszs8mBC7GueGTkcokFhwM5w%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dbe90b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20671,"size_decoded":9202,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"943cf6263106fc466d3288777a0625f2","sha1":"47dd4e94013129b22457fc5e9b5517c9c595c0c0","sha256":"e07786f2d467b66cae6e9bc096ebd887fa35daa4bc5a8dced89f0f6d7a2efaf3","sha512":"44a153af3abfb235a16844680ebcb00e9eb983c41e67f74e1d6123b5515cefef0673e09fa2e7e186b931f6b892b54464ee9180f11e449c5c6b6a7b209a5e8913","ssdeep":"384:pvVc3AEs8OEB3KeGVNeHu8DM5xsbiB2UmRQvvKJwPHXcz/CIWgO9v1Xg:pvVcQEtOEBIgtDS34iH711Xg","tlshash":"519297eb2770e1ec99c74b9dff3298996b4d90ff7ab185d0867eae6454835c4d206c00","first_seen":"2023-05-12T00:28:41Z","last_seen":"2026-09-20T10:45:32.497976Z","times_seen":83,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/tick-yes.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.145Z","timestamp":1789901076145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/tick-yes.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-f8\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rFaHihg3qaSQqqy9Dzr56CgV18dox4v44idnY9CnEEi%2BX9WSb0pQyjRoqSFFkNPrzbctIFB2mk2wAYda85sfhvHwVEcnjaeyBy5JhWV3n7HKH3bHLv1yFgRy73ymk4c%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5deeb1b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":248,"size_decoded":920,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"47e8b69d29a2d39d15c543e2b20123d3","sha1":"a3a7603dcdeeda7262c5d106cb1e6c920dee4e94","sha256":"33638a4183a499e8ba07c74b76598fa67b5d061c7211229d8c53714aa682f634","sha512":"d2acde711866819e07776e7a87fc903702c128846bea561818bb70b4728618cd3372eddeb7c844383aff86cfb19cf435f94aa7370454914bcb9d0d5ee163cf9a","ssdeep":"","tlshash":"10d0a759531c1c3cfa264614f72cb7751069a2c1864d1159d473653061149df787f5dd","first_seen":"2026-07-05T04:52:57.790234Z","last_seen":"2026-09-20T10:45:32.498527Z","times_seen":11,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/stars.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.155Z","timestamp":1789901076155,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/stars.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-30e\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BXbLTewvoOBHoenuLqsd7t7BkE5cl8OSKGG4O4%2BNpojrAB0JI0HeJ2VZmzQzJuLAp2j3TozreW6o0m5G3Z8Wjrl9qfs45CIxGcN9P1fZYI0hRPhgBxICd454sT7FYLI%3D\"}]}\r\ncf-ray: a3e03c5dfebab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 782\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":782,"size_decoded":1533,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 115x21, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3b26fc674403283590246955e6428dc2","sha1":"065b27005f2ce7bb9b7328834e4ae2297f17fb73","sha256":"a3fd948fcf1640ccf4548a6038c62d5eebb5d15c51b0556bc589c7c55f83fe31","sha512":"6088551a95b45c5cc945064a8ecce7dfbbec3959ef069a35da15eb30739d7795265a6004b5cbe1572662d0d0aeb70787167c09904676fa6f4f11a974eea1e9eb","ssdeep":"","tlshash":"2d01ca0434a71c16523430d41da9c43b43cd7127ffd5c64e81c59c9f1c93028b393827","first_seen":"2026-07-05T04:52:57.918719Z","last_seen":"2026-09-20T10:45:32.499156Z","times_seen":10,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/sv.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.126Z","timestamp":1789901076126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/sv.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-d8\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5SyKPgbEXsaB2JOOG95vPev%2B9qlcrTGQPzbC%2FPOieU4K09lrryolS0M0Zqfrl3QgWfBWIf5r2KuiNDAjO6ch8hWLUAiI6jCJ%2BOZOEzf%2BkHTWJpx1T7O%2BTrqhWOU0DE4%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5dce9db500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":216,"size_decoded":883,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f642770ccba1a8f5948ac69923c15ba","sha1":"2ccce0709119188a1cc30358bcf197415c812abd","sha256":"1d7c3fc0594c8fb856d9fd0a13a752dfaf8643c8b073582909c88be24e7e416f","sha512":"a590463aca1346a92e76bca94237dcb8b5b636aa4ffc87d5d109f7eb752b7c6231e9e095c7f901f58d5ff248b9f1924071cc66707924bfc40cddbd3b547a5540","ssdeep":"","tlshash":"f4d0a764718dc10886004642061414c51287d0ca531d0110fecc3925b04e9fbfc702ad","first_seen":"2023-06-02T00:03:05Z","last_seen":"2026-09-20T10:45:32.49965Z","times_seen":178,"resource_available":false,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/partners/blworks.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.317Z","timestamp":1789901076317,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/partners/blworks.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-5aa\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K4ZEc8nSbLMwY6L%2FaKyu104C6zCzX%2BFt108WaUIk6L%2Bl8wRmYVSJQr4a%2Fbe3TB5ERhaym8mQR9p3fr5fsGJr0NK%2BO4BfQx857A6rFIctYmx%2F8VlXoU66NxgAwlmku0Q%3D\"}]}\r\ncf-ray: a3e03c5efed7b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1450\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1450,"size_decoded":2212,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"3544c3d23c40f37f844f808bab09f022","sha1":"5fabdc66019f24e76aab34fcb60d01c96ef68c26","sha256":"28f6f7d3a57c1fa4c99486d4d2881a0c54c1dcee880b863faa6879c7111f8b9a","sha512":"a39c4abf61d0c58f81cb5cf049efd3641c85aac7566cec8b2314b42aab0013c649ad9bda0f8b8f1cfbffc3c3ff8f604a49962254f4c3d9710aa3cc5a369c5b84","ssdeep":"","tlshash":"ac311b5116f1f4e8d60ecfb915a823554036f40b8bf86b76eb13782aa10632089c5fcd","first_seen":"2026-01-19T22:26:53.623033Z","last_seen":"2026-09-20T10:45:32.500172Z","times_seen":14,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/shape-02.png","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.434Z","timestamp":1789901076434,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/shape-02.png HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/css/main.css?v=1785822802\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-37b\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qhq8%2F%2BfgjtqLQ7QMKGIh0cK9yJv257TphyKQuV%2FSRsgvf5ZPvPZ%2F4PYtAWPDBQ6ZXCwOVbz3Bdpm5jGl6PNOPztoB5B9J08aCSYAVaN9K0AVVidXezHUhd2%2F%2FioKT00%3D\"}]}\r\ncf-ray: a3e03c5fbef3b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 891\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":891,"size_decoded":1651,"mime_type":"image/png","magic":"PNG image data, 259 x 259, 8-bit/color RGBA, non-interlaced","md5":"27e04debb85a890c4257f4f2191ccd4e","sha1":"09c62507cfbed0678cf5e35293277acf0511afec","sha256":"f5d4b2a6e469f0fec42efb17c82bad92760ebc401fbc975ebbb30972a3e90981","sha512":"2fe65a3be8b5da7aec3b2af4ff8f8afeec414c1bb138457151e006db73c0f80f3fd67c100d3e4675cf7c579998d0baecc19ff01c0320fcf0f860313489c2045d","ssdeep":"","tlshash":"011165c1a32d0c66c87b1c3c487c42e0607b4dfa4710649521a0ea24abadc60433cfe8","first_seen":"2025-03-03T22:55:46.441354Z","last_seen":"2026-09-20T10:45:32.500649Z","times_seen":2858,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/ZKk0q2WCjH.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.288Z","timestamp":1789901078288,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/ZKk0q2WCjH.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: vQhbFyVs8_WGTYTdxmdENpx6-_JYZc_q-G6S_LmNy7NVWL7xg3ijYQ==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"7c6afbf30e80e41b5626d4a8d1d7ec2f\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177623\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1941,"size_decoded":1527,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1941), with no line terminators","md5":"7c6afbf30e80e41b5626d4a8d1d7ec2f","sha1":"84198f518f6104587df0e435b1e3a605259927ed","sha256":"c55ef9506170b50689a65af4552df712b5fd4b48be434347cf45da577abbdf5d","sha512":"843768a74a9e8fba46436f63af11398d2562741d34886a09796fab104aa54692852fe29d8ff37b84fe9ee662ac716e92c4a9e21f3794ea90e8cd1c6cf588b05d","ssdeep":"","tlshash":"7841bde337b62e326ae4d0f9ad196a484307714181c9480d707eddc2a29fce1f475b75","first_seen":"2026-09-19T05:04:01.046431Z","last_seen":"2026-09-20T10:45:32.50119Z","times_seen":9,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/UEbs2Gh9MF.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.323Z","timestamp":1789901078323,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/UEbs2Gh9MF.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 130\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:18 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\netag: \"83ba9693202edaf7a394da98e62ac5c9\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177621\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: FShx2DY7GHSY0Mg7izWTUa8bvNN_22ayyUTh_pSNf6fzHkzsnqJK4Q==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":130,"size_decoded":944,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"83ba9693202edaf7a394da98e62ac5c9","sha1":"fcd3b9c775c697a3fd9eda7c7bcd1dc0268921c6","sha256":"56ce5ac5608558c67956324e045420fced2a4f32afd57db31da6d598ec978395","sha512":"8360413f9813bc783aa7286f099f8f2fd440936c41855cb6065e002e3f741c69b7cb52c9a8faf725693ccafd36ee0d7bda32aa9f4561938cb420af22d7ef237b","ssdeep":"","tlshash":"a4c02bcfb08733f841300097c61bb4484c8046544a080794c0c585d897550b46bb2f24","first_seen":"2026-06-11T07:41:30.973099Z","last_seen":"2026-09-20T10:45:32.501663Z","times_seen":82,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://widgetdata.tradingview.com/socket.io/websocket?api-key=tradingview\u0026ancestor-origin=https%3A%2F%2Fzephgain.org\u0026page-uri=https%3A%2F%2Fzephgain.org%2F","fqdn":"widgetdata.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"92.38.154.194","port":443,"asn":202422,"as":"G-Core Labs S.A.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://widgets.tradingview-widget.com/datafeed/tv.html?page_url=https%3A%2F%2Fzephgain.org%2F","date":"2026-09-20T10:44:38.445Z","timestamp":1789901078445,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Wed, 18 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"96:06:76:35:9F:2C:2D:1C:89:55:E8:92:7C:4F:4B:FD:E9:F6:FF:1A","sha256":"BC:FA:33:CE:19:85:7A:43:44:BA:17:CE:87:15:42:E2:02:0C:7A:4E:83:42:1F:58:8F:59:B4:20:BF:4B:35:00"}}},"request":{"raw":"GET /socket.io/websocket?api-key=tradingview\u0026ancestor-origin=https%3A%2F%2Fzephgain.org\u0026page-uri=https%3A%2F%2Fzephgain.org%2F HTTP/1.1\r\nHost: widgetdata.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://widgets.tradingview-widget.com\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: p4sLJ++nJqAqQcjL4CF2Bw==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Sun, 20 Sep 2026 10:44:38 GMT\r\nConnection: upgrade\r\nsec-websocket-accept: Q6Ikqqb4V6vHa62OyiG1BfBiBiA=\r\nsec-websocket-extensions: permessage-deflate\r\nupgrade: websocket\r\nServer: tv\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]}],"data":{"size":0,"size_decoded":224,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-20T13:41:55.768983Z","times_seen":18568611,"resource_available":true,"data":null}},"time_used":94,"timings":{"blocked":0,"dns":5,"connect":23,"send":0,"wait":23,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto/XTVCUSDC.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.798Z","timestamp":1789901078798,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto/XTVCUSDC.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 10:44:38 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"67194903ea5699ca4afca1755efe99ff\"\r\nlast-modified: Mon, 19 Feb 2024 08:06:59 GMT\r\nx-amz-id-2: 3J6Wu93eOjWuHjbidPmRCcHnnLSg0x0kx3jflxa38CLbblKjxuBVwtCbl81X/+Q3gjdNiPBVyH7JRrTrK6co7qTNTmjpJo69\r\nx-amz-request-id: T256ZN9RW662S2X0\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: 67194903ea5699ca4afca1755efe99ff\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.62\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 08/31/2026 10:43:28\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: acbe7334ee9dbaf60720f6e7bfadd17e\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1209,"size_decoded":1606,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1209), with no line terminators","md5":"67194903ea5699ca4afca1755efe99ff","sha1":"b999a1897b094d326f3982d5a25b971c56a463f8","sha256":"e0d059fd6b3f3fdec3289fc79109a3a076b5a4e7b9c8fc6fe497695ee6f8047c","sha512":"c14f54d5b6f8255b329c5495bb9042c6db57ff9fa7eed2a07e2144b6ad56d4e3bd93603d6c3a07021069cfd3f486e9cf38bff4264085c29707122e5123a2545e","ssdeep":"","tlshash":"06214d4a6258ea1c0892d78ecb7f6050334f60caf1ae99ec7ed787a5a40f6d9f505834","first_seen":"2024-12-14T06:34:42.716482Z","last_seen":"2026-09-20T13:19:44.034147Z","times_seen":334,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/css/main.css?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.056Z","timestamp":1789901076056,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /css/main.css?v=1785822802 HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-781c\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I%2Bn97hUp9FlS6ev%2BZaDUDO1PsNXZ7X3388Q9MNEg8wq6JeWcF5AKCbVdeRPI%2Bdg7orAkE6jT0svEgyaQq8JeBpSqbhjKfhK%2BkTTG8LUC%2FsWXsr4HfVy5egoKb%2FDFaQ4%3D\"}]}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d5e68b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30748,"size_decoded":6775,"mime_type":"text/css","magic":"ASCII text","md5":"fac5eb6bf99aabe686d7c0b506285b21","sha1":"b895d550056ae5d0ef34f96cdb9c8be5ca6466c2","sha256":"26807bb5c32612372184577593a6e62ccb394c968bd58d346235795c9f3c8e21","sha512":"0ed386abacf863e56b1f3a17c618b857a1fdf6e6e9c9fba7eb700a1f3e8713ded3e25d71459493b4e11bc2b6260088b03528726a4714beaa93fc4050b06dc3b2","ssdeep":"768:enYz6tNFBgF3i9H29EaQeOMjEYZETeJarRtZZrw2A08:83gli9H29EaQ6jbWTecrRtrw2A08","tlshash":"16d275a727b22904700b94692a677b65632c8003d60fcebc7ff5205cef891e56573b9e","first_seen":"2026-08-25T03:41:53.523617Z","last_seen":"2026-09-20T10:45:32.50264Z","times_seen":4,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/review-photo_4.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.153Z","timestamp":1789901076153,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/review-photo_4.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-b56\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QXypOEYyw0KWH5q%2BJ3N1szQA9ujPEy4siveWsrgQOZlm3rJ2nUjfb79N3iVpeyC4RdNhnw9wTslTqFUelg7OFvhLTsHORUlOktBcHfGFj2djPd1WV%2F1ON3Jk9fdW4SY%3D\"}]}\r\ncf-ray: a3e03c5dfeb7b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2902\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2902,"size_decoded":3656,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f4b961437f6e39e2017173a74a2bf8c5","sha1":"8d33e88a1bd17412e4293e0a0f15021750e56dff","sha256":"09e96d2636a4f80da55d5ad1f27f4e115169e96f5b672d6cf1f1a6e8ec994dcd","sha512":"d75ffde2c22746cb9e29bac27e78bcf14325d5423f46c0c2ae3a5f32175faa1f4cbaf8abbad17a43fb95c995831b176c0ad95ad56c2b256aa8aa8306d05ffada","ssdeep":"","tlshash":"34513b4433221eb2c4687df5f0dd59446ebd9f2b2a817768a43fa0f2fe84d103a9091a","first_seen":"2026-07-05T04:52:57.792768Z","last_seen":"2026-09-20T10:45:32.503217Z","times_seen":11,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/background-5.jpeg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.308Z","timestamp":1789901076308,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/background-5.jpeg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/css/main.css?v=1785822802\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-19e59\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7SKn7MW%2B8w4Ywv3A7hAVgHfS40JdIBypLPOwavsSU4kCsFfNXBqIx5jPwkZ9hvWqG1UywrFRcQWZV5rVSo2XbS9q9kpiczE9cTjZQ81UWodHaXfw6%2FVrnsBuo21SRZk%3D\"}]}\r\ncf-ray: a3e03c5efed0b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 106073\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106073,"size_decoded":106831,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x665, components 3","md5":"e25c00899aa5b1b8405e29563b32d057","sha1":"26b794fe18b74f663c0b67cba9839779ca14b7c0","sha256":"09ec5c19e3c258221a14db7cc27086b58aee6106c4252f444fe854d4b1a9f50c","sha512":"a51a5ee61dbde9a0890c92a21867989c66ee4898a549081cb01e5f3cc68e5b652ccfe90a4d3cd964b326b22b1453461aea08bb93b81db9ccbbf2fde3200814d1","ssdeep":"1536:pnEn1iVJZSBupSxQTfrVm07sIWy/Qytz200bvZu/u8KEVjXbpIS9bkD6Fh9Usd7A:Q4V1pfbf7sC/tCERKcjOyb1vUsdts4mj","tlshash":"dea312305d86885aec3d203a9202ddd6bf73f24709806bfb053b5363789814fbca16e2","first_seen":"2025-03-03T22:55:46.467168Z","last_seen":"2026-09-20T10:45:32.50361Z","times_seen":2857,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/vendor/css/uikit.min.css?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.055Z","timestamp":1789901076055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/vendor/css/uikit.min.css?v=1785822802 HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-4235b\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OoarRVNWKqONlxrzTPavm%2BpPZadN%2F8gFxv7CrXFFEHeh3yB6UaE3Zn47X24mySbF%2Fg490NP%2B7TC%2Byup2efEOU32bWbuV5WykqYfrgRR0rCYYuZ4FP0HpGUx8f2Un9eg%3D\"}]}\r\npriority: u=0,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d5e67b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":271195,"size_decoded":30960,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65532), with no line terminators","md5":"069dab2087cfe449dfab0443912c3427","sha1":"8de1ba9ba591cccbdcc89e4a3b909ba94493a03f","sha256":"14aad0bfb03b7a363818478e72ed1ae18a1f4e9ce89a4a4ffdc7e9c0b6e753ea","sha512":"ea30982d4bd17d1f189ed8d5a5abe5a4b215d5fbd401c0b64ad87d02434c171d0c8a1ea3c7c405983ac066a007920fcfb5860cfddbc8ce75dd124f336689c4a2","ssdeep":"1536:2OJ9WL6OOSnCEirktQ/22n9s6kxhoCror9ACQgv6:2MSnCEiC2nS6kLog","tlshash":"1d442094a24479fe8d37059b90a8b5fdf7998d01b23a2ef7b6ee82c14e457430135c8e","first_seen":"2025-04-08T10:05:49.34209Z","last_seen":"2026-09-20T10:45:32.504308Z","times_seen":2909,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/vendor/js/png.js?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.062Z","timestamp":1789901076062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/vendor/js/png.js?v=1785822802 HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-166\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SrERLeL9p%2B9hESchzShub65thU35mOi9n3qDTzAXFYG3BtbLrK2HwLuxJ0VCxtyQIfw%2BpDyOtCrk3nNZC9WSRRePHIxbuREoBQkb9PgW6mzM6EGySlq007G0hDa%2BIfM%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5d6e6eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":358,"size_decoded":897,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"54ab5c4cfcfe16c2e795964de121a0d8","sha1":"19556801cc6b68f0e11081a07c6781924bc0bc65","sha256":"30625e824b8626a4aeac6ebcd2ea16de8353a851054e7d522edd590e7a531835","sha512":"4e6700c168994ca42148b7b76c05a612a025db7baab9b6700e02232a839ddf97f5c164b4834f83280e90aa7f257e891e30296db0f57f7f45863af34529909453","ssdeep":"","tlshash":"24e04f610085801f5ed00cb931ba1ba4c792620e8060c2ad38ea8e69fea0ce0303aca0","first_seen":"2023-03-10T00:04:39Z","last_seen":"2026-09-20T10:45:32.504924Z","times_seen":925,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/script-bottom.js","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.086Z","timestamp":1789901076086,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /script-bottom.js HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-5bd\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FsGysROJ66VDivSqFOOl2fX7hONpj%2FbWERsfpomfZ5LesCKre5z90wLSf5RAFPHWYGD8OfI%2BdDmswCB4%2FUZCyckAzIzCG%2FP%2FZt3oTLvCO%2FCg0Ml%2B8mHWvsw6s1GE67o%3D\"}]}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d8e7ab500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1469,"size_decoded":1377,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"ccd6dc7549fed0a2f80a1bab70fac36b","sha1":"bf66d96ab89cee891c809c24c46595f549414d25","sha256":"9c7f2b0007eeca5197ef0328287d323b93c041e7a121315faa9936fb74e89d2a","sha512":"08319451276d65dfe20c89417d3789900f856bd4fa0cf3d45ecd6e091c9a02a4c13329d30f7973aabcded2dbaf63a5d8c46565cd83ead6abbf002ef24419e7c2","ssdeep":"","tlshash":"9931e03029f80172a037027977ee6fc4a5211872224cfc18b77f4259afd6ae04fa19c1","first_seen":"2026-07-05T04:52:57.89206Z","last_seen":"2026-09-20T10:45:32.506363Z","times_seen":13,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_8.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.142Z","timestamp":1789901076142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_8.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-3aa\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FD2zK2qFxQ%2BNIuuTV%2FvgfjEk4MuUggi%2BYc7oJoWPx0jvvPAsyR%2Fn6OAQ%2FKSjoKehI2heK8AnJax5OGL8lqn8uyWG0Yn%2Fir6LQbfp%2Fx6fad8B%2FaV%2BiCI7EjA8skjqxxw%3D\"}]}\r\ncf-ray: a3e03c5deeabb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":938,"size_decoded":1707,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"6018b3fc68511e6795630cf62a6a1b39","sha1":"6583d7379ff7dd9475d7326c11cbad12e2419888","sha256":"8dd2c4cdb331f78ac4648ddd5b152a214c4e9d5e1b5d0d6eb8f8d4639e2b2fc2","sha512":"5e259f5e7a4cd71c36a76eb88a4f792c51721530815a6f5aa6e30d9e89c2b7c9ee049dd80f86015f3a22fe4e3e6fa25c3af9871aec4d0de3e903685480e266b2","ssdeep":"","tlshash":"b911bb72f3700cb192b7b877bbdad467d643468494d64e1b4970f96220ddc148505ddc","first_seen":"2026-07-05T04:52:57.863396Z","last_seen":"2026-09-20T10:45:32.507006Z","times_seen":9,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_10.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.144Z","timestamp":1789901076144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_10.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-4c2\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h%2BRiBARhSknnG3MJSZluVFvVrbKa5vhfVcKVJNPx6byw4XcFKiwSVkNOsrB6ObQtl2OeyGzw60aW3MuBMe8MIW6XuTxDSJZJ4S8tUGTIbdSk9%2Fd9P9PcBT9%2BlKlCHzM%3D\"}]}\r\ncf-ray: a3e03c5deeadb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1218\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1218,"size_decoded":1974,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2a91b1e1fbd5d231f85cbbaef4caf766","sha1":"6fe8a7fd66eb89c62fa1802c19885b8d59b3c603","sha256":"76ad4f95be9b20bba7551d5d18d542a7eb7d4f68aca54c5ca260de9741183386","sha512":"67e1d1d4dad3be1b10069ed7bdf7c05029ac27fcb374df25877e20bf8f1ddc5d2501c287a8f20d3428b09e1b96fa901145ed8e0483206b9c913bb6a545b43153","ssdeep":"","tlshash":"b121172b07ba0cfc84b0fd0d2ea92b50c10b872c8c6e1b2062b842788762b502653cb4","first_seen":"2026-07-05T04:52:57.850699Z","last_seen":"2026-09-20T10:45:32.507655Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/cropped-Favicon-32x32.png","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.767Z","timestamp":1789901076767,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/cropped-Favicon-32x32.png HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-261\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zaB717GMlaxw0J8LQB73J1tomXfctl3CYNvDssHGY61cPC1FIhGc6MxAgUbzrXjfggohoER%2BTAji2HdukwbV%2BGrlok6JTEnkwMMxMTORpSLkVUKsWOqulK1%2F%2FGrPUDQ%3D\"}]}\r\ncf-ray: a3e03c61cf1eb500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 609\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":609,"size_decoded":1368,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"f17b2d52496a7b6283c91478bcb1d51f","sha1":"c497b97a94a45f2de7310d4722a10c6c54abfacc","sha256":"06a0640bb63a5e1ffb8e6204b8bc4b267997a6a5c0834d2e54cdc5cfe5c2d3c2","sha512":"22a93460f5dae42f5005a67ce62f2f46ab640c060b14a07819a84cc3bba6bb8a12a7cffbbe751a4f24fe32e27144739c7f4bd310d5513776d462f3d0637a08eb","ssdeep":"","tlshash":"3df062dd15d0280942e6e6f2db4f0467f887ffa102ca105cc1a07ce9f1868a174fab05","first_seen":"2025-03-03T22:55:46.45545Z","last_seen":"2026-09-20T10:45:32.508292Z","times_seen":3739,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/layout/css/main-unified.css?v=1785822802","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.068Z","timestamp":1789901076068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/layout/css/main-unified.css?v=1785822802 HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-3736\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ttlzn8t3ZcMmgAnEbirsgg83UchQlA4KDWaa0CgKI51ORWzgNz7Amsyw6O8cIQf5bRR9vlsfiVHF9kdmrm1xAwwXZKbJeBK1xtVGpi2nuefEsnnkGd9RzDTcShDTDcU%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a3e03c5d7e71b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14134,"size_decoded":3454,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"6f9e5a30c0f957da9c7385b0c69a53b6","sha1":"7a47aa1c512e18a2224144c686039377d9088ec0","sha256":"26b19947ba8009e5d8ba1ca90860e71d53f17380d441171084434c74902d8427","sha512":"c4f5dc27ea8274d13468c44c0580f7c6105887d71aee4351ab3d4a5f8e76c6de6b91001476d3089a9ad5ab6f3dd641b1c8391a973441d75ae2ea4cd02fa3b77e","ssdeep":"192:P4OBwMikJk95PoFUYu/SZJsPcBYF1fb93+e8EV1rvL/dlX7J78rDG1eFWniXAbin:P4O/FDEF35VXu","tlshash":"f352eeb3a7430508b516c21c67ab8b49637d710bb208f9687d9931588fce38dd856ff8","first_seen":"2026-07-18T04:13:48.586354Z","last_seen":"2026-09-20T10:45:32.509089Z","times_seen":12,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/IhikR6bCRx.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.283Z","timestamp":1789901078283,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/IhikR6bCRx.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: s7uD6QvAYDbXYDJ0WJ3LPUCjqS1d57O82tuOgg31VdRQhcn8FyGqeQ==\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\nserver: AmazonS3\r\netag: W/\"923274b24afc7cc4a36a779135ff25c1\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2184,"size_decoded":1716,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1194)","md5":"923274b24afc7cc4a36a779135ff25c1","sha1":"d7cabeaa43f9bc1ffde68aaaf32ef6519348abb7","sha256":"c3354f31c9f5c5e87f3e2d624803dd34c636334e1581732b6edd5fd55d7e2a0e","sha512":"5a041dfa597f43b39a097d44cc8cad53402026ac7548a00481e23872e4ca25fa3f57bfc4d97c727f2910db8d5011e3072db2967e85dafd6b6e5627650d79c540","ssdeep":"","tlshash":"3d41659737f32a32baeac099dc1198851751209444cd041c703dfde77297cd1b0b9e79","first_seen":"2026-09-19T05:04:00.886848Z","last_seen":"2026-09-20T10:45:32.509703Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/fwcPhstYIS.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.320Z","timestamp":1789901078320,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/fwcPhstYIS.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 261\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:24:17 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\netag: \"8411fcea91c12c717c5b37f39244a272\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: -KQ7n6L0ahmBbZGTvjMaxNoAZ1eI4-pn9ACf9akpsS62liqQjCK1zw==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":261,"size_decoded":1075,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with no line terminators","md5":"8411fcea91c12c717c5b37f39244a272","sha1":"03c3a044f9b1f626fe7b502e7e87e8e640478b7c","sha256":"4647cd2f8c3a50a575e9f93189f72e28d88429c68017f7bb41dbbd6b658be1ac","sha512":"4ced050e61bc5f420f32f569252c24159ab2453c8b031936919016ce8ce1df765a80f6d2b71a3717beca5d9b777f98c79150c6177eaa015625961620549145fd","ssdeep":"","tlshash":"d0d02e8326c2e1b2479121c1010a24a8fdacaba4004bf825f212e0e17891cfeeba5a41","first_seen":"2026-06-24T17:21:49.639017Z","last_seen":"2026-09-20T10:45:32.510328Z","times_seen":76,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/da.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.110Z","timestamp":1789901076110,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/da.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\npriority: u=5,i\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\netag: W/\"6a717e52-16a\"\r\nage: 1326\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8mc%2FAT8ygn0MR1UkIoSiFhI5iRx%2FQxpPoVJUMq8S%2F%2FqtEHmYojiAiRKYoO%2FaDM1TCMg2Y%2BxoE6KkZ6OyDCjKHJ17oTyf%2FOKbtIjwRwrA8diH14i2g%2FT2ekZVIu%2BjUlw%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a3e03c5dbe92b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":362,"size_decoded":1015,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"c4d7abcf4c21c729ea9aab45faa1912a","sha1":"6ecbf40cb392204b8c7af284352108b500111969","sha256":"33815e73a3d07b3ae77cec1fdc77a285646e4e730136632f0ff5de6f8697c98c","sha512":"6d928963ac9562306e34f006030ddb4430cf81f3e37d8a5d805f90d5cc89659457e9f98257a2ec971205cf044387b7c3e87847c85bf7760ecfa2b667bdab3230","ssdeep":"","tlshash":"f6e0c09260ae8a0d4e1543205a3c70e2526770cf218e04fcf0c13e28fd667ab3800f5c","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-09-20T10:45:32.511044Z","times_seen":5505,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/shared/images/flags/sk.svg","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.119Z","timestamp":1789901076119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /shared/images/flags/sk.svg HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: W/\"6a717e52-665\"\r\ncontent-encoding: gzip\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\nage: 1326\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=byrAR0YSWkyJFbxfcXvbi85mVgsZGPoQOqnX8gOvOnvoClTKUe0boL%2Bk80D7xX%2BW4UCueMn7%2BcwqdtgxL6VcjrNDGQeANw6Q%2BFjPS4EiZKs0KUpl92H2TPNgSOhRXTk%3D\"}]}\r\npriority: u=5,i\r\nvary: accept-encoding\r\ncf-ray: a3e03c5dce99b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1637,"size_decoded":1543,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6ed3cf547a2f8579e45330fde3095537","sha1":"dfc6023844bb5a110c3d9219c82dd326940ae055","sha256":"c1b338efd99956c2ae0c62fcf559b2d956fa11f71751985d62c9942b061dad6a","sha512":"4ed0e6912bfa55a7bee5b4f6318c3878bff3bf23d5a220225b5e19d207d7f55bd816f06dfb8daf8a5eb4c2e266d0fcce8f40d0f797c81d97a2517e5eba2a3be4","ssdeep":"","tlshash":"193176c55178aa4849c7a76fde7cb8959015a0fd21f940fd7a4a470c956caceaf00cb4","first_seen":"2023-05-07T18:18:54Z","last_seen":"2026-09-20T10:45:32.511807Z","times_seen":5285,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zephgain.org/images/Photo_6.webp","fqdn":"zephgain.org","domain":"zephgain.org","tld":"org"},"ip":{"addr":"104.21.45.123","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:36.140Z","timestamp":1789901076140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zephgain.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 07:00:14 GMT","end":"Sat, 12 Dec 2026 07:58:50 GMT"},"fingerprint":{"sha1":"C4:2B:2C:FA:FB:95:F3:67:B7:8F:2D:DC:F8:AD:2C:28:B8:8C:20:F2","sha256":"05:DF:1E:FD:02:3E:2D:78:4E:3A:4B:F3:E3:51:6E:AF:E1:65:C3:2E:E3:5F:74:3B:F3:7A:69:42:D0:BF:F8:88"}}},"request":{"raw":"GET /images/Photo_6.webp HTTP/1.1\r\nHost: zephgain.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 20 Sep 2026 10:44:36 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 04 Aug 2026 05:53:22 GMT\r\netag: \"6a717e52-3f8\"\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\nx-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 1326\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nnZbJRcSjnDjLYcokt45XNlX5mN1tQ2Q7I6zc4c6kwxDnHgd7NxX5iqW41DUk0WbEzXwAzgBFYKhMPkyQesFBE5FCcV%2FhyUBSqB%2BXku7kOMviWg0qukWddBCNx3I1kU%3D\"}]}\r\ncf-ray: a3e03c5deea8b500-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1016\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1016,"size_decoded":1770,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7c555395e4b717c774142708fb0a68aa","sha1":"de7a73b89a29b25affc2d8b9ab466e7373f2508e","sha256":"a726ace4f9882086c3c1d80767b188a2ee9a5a2c95bf6b8fc76bcc3e7135cffc","sha512":"ca79c1fd3f0fd7f6adc370ac5a701124e3d2259a4cce3dca5f69ecee08800e2801766add5dd0c04aeec2e2033f73f2a778f178cbb5234e8b113ca4d77c80c69c","ssdeep":"","tlshash":"7011d8167772e51079b4fc0f48582b0cd39e682dc3385a1fc0217da4123ae914981b86","first_seen":"2026-07-05T04:52:57.807233Z","last_seen":"2026-09-20T10:45:32.512476Z","times_seen":9,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-20","alert":"Sinkholed","trigger":"zephgain.org","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-20","alert":"Phishing Block","trigger":"zephgain.org","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/A7ILw-mt8o.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.242Z","timestamp":1789901078242,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/A7ILw-mt8o.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/tv-ticker-tape.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\nx-amz-cf-id: kVE6iARfm9ta216KU3bk9YGdKd7PR0FFYCzz6WiZ5QGq_1KAo3jn_Q==\r\nx-amz-cf-pop: ARN53-P2\r\nserver: AmazonS3\r\ndate: Fri, 18 Sep 2026 09:24:16 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\ncontent-encoding: br\r\netag: W/\"92f998a876b9f93e6d638e674280268c\"\r\nvary: Accept-Encoding\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177622\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2883,"size_decoded":2040,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2883), with no line terminators","md5":"92f998a876b9f93e6d638e674280268c","sha1":"6cf674eda5300b0e385ea4b9de0849b2072ff6e0","sha256":"41c69cc10fc84f376127f2d66509c591898105a2ca959bd49832a91137dc47f4","sha512":"8936550c1d91e274c28f62c0e560520b973020879d81cd1b91d946c2989392eadb51078f76286c6a9caa62ddc865db10f81cee3a73e32ead86c727b69f9e18f6","ssdeep":"","tlshash":"bf519896f340a47046a9d1d3d529a453c304a9d8dacd59fd3cab91dc97ce0c2e4ee732","first_seen":"2026-09-19T05:04:00.910743Z","last_seen":"2026-09-20T10:45:32.513906Z","times_seen":8,"resource_available":true,"data":null}},"time_used":12,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"widgets.tradingview-widget.com/w/en/chunks/j3hzcHHtdo.js","fqdn":"widgets.tradingview-widget.com","domain":"tradingview-widget.com","tld":"com"},"ip":{"addr":"3.164.240.110","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.324Z","timestamp":1789901078324,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"widgets.tradingview-widget.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Thu, 19 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"45:D5:A4:1A:7A:99:0B:3D:7B:B8:31:5A:E8:CB:68:2B:2E:46:14:04","sha256":"A9:36:B4:83:0F:9D:FD:39:A7:BC:19:3A:A7:7F:F5:47:D8:7B:EC:56:EB:3A:D7:FB:D4:04:06:65:D5:D6:71:D4"}}},"request":{"raw":"GET /w/en/chunks/j3hzcHHtdo.js HTTP/1.1\r\nHost: widgets.tradingview-widget.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://widgets.tradingview-widget.com/w/en/chunks/hTu-gZx3Bs.js\r\nOrigin: https://zephgain.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript\r\ncontent-length: 126\r\nx-amz-cf-pop: ARN53-P2\r\ndate: Fri, 18 Sep 2026 09:25:06 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-max-age: 3000\r\nlast-modified: Fri, 18 Sep 2026 09:23:11 GMT\r\netag: \"ecbd840be739691a346386126f512d37\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: public, max-age=31536000, immutable\r\nx-amz-version-id: null\r\naccept-ranges: bytes\r\nserver: AmazonS3\r\nvia: 1.1 784f462b4ee4e847ccfe44db65f51a9c.cloudfront.net (CloudFront)\r\nage: 177573\r\nreferrer-policy: strict-origin-when-cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-id: NV5LyTdayfFU2e3fTRw3sHe8fJGMohjlldm1PYML74EDQiMM6fa83g==\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":126,"size_decoded":940,"mime_type":"text/javascript","magic":"ASCII text, with no line terminators","md5":"ecbd840be739691a346386126f512d37","sha1":"0d2cc0ad7086a9eb9853b4a5fe982755f1625cbd","sha256":"5d0d342f79d8bd7a0656d751a6df0c50c5e1a0cefba7f130a94a3ca0d19c91c6","sha512":"b5a5c7db43817efda1f46dd73274f99a1d723fe548cf9c6eef74d939bf3fa597d1e77376181cb2ea2abd85e6664cf5ad972b4f20e31eae33da0bc6db5d206f5a","ssdeep":"","tlshash":"87b022c0f00230b2320200af8f02bc8a83e2a0c003c30b080080838003880e80bbee22","first_seen":"2026-09-19T05:04:00.845586Z","last_seen":"2026-09-20T10:45:32.514573Z","times_seen":8,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s3-symbol-logo.tradingview.com/crypto/XTVCETH.svg","fqdn":"s3-symbol-logo.tradingview.com","domain":"tradingview.com","tld":"com"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zephgain.org/","date":"2026-09-20T10:44:38.794Z","timestamp":1789901078794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.tradingview.com","organization":""},"issuer":{"commonName":"DigiCert Global G2 TLS RSA SHA256 2020 CA1","organization":"DigiCert Inc"},"validity":{"start":"Tue, 21 Oct 2025 00:00:00 GMT","end":"Tue, 17 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C4:FE:64:00:30:2A:CD:16:30:95:7E:E1:70:D1:31:3A:D6:33:3A:CC","sha256":"87:D2:67:7D:3E:02:F0:3B:58:BD:38:17:DA:FE:73:C0:CA:25:F9:58:CC:11:14:E0:3A:6E:C3:58:84:9E:BF:52"}}},"request":{"raw":"GET /crypto/XTVCETH.svg HTTP/1.1\r\nHost: s3-symbol-logo.tradingview.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://zephgain.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 20 Sep 2026 10:44:38 GMT\r\ncontent-type: image/svg+xml\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 1827952\r\ncdn-requestcountrycode: NO\r\nvary: Accept-Encoding\r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 30\r\ncache-control: max-age=2592000,s-maxage=3600\r\ncontent-encoding: zstd\r\netag: \"6c8b94d554caad39b40a6f7147fdc6a5\"\r\nlast-modified: Wed, 26 Feb 2025 20:02:22 GMT\r\nx-amz-id-2: fTX1Y3PU8OuEEuT5VfTCeiSwkW/EXI05XonoJoG/rATJIzUZLCeHtPqFV1X2v7xbPq6Z34XefZY=\r\nx-amz-request-id: 0BHY8EMF4MCBT21C\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-hash: 6c8b94d554caad39b40a6f7147fdc6a5\r\nx-amz-version-id: null\r\ncdn-proxyver: 1.62\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 830\r\ncdn-cachedat: 08/31/2026 10:43:23\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 33b96f7db7d77509ccb64b58205d1b0a\r\ncdn-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":1163,"size_decoded":1571,"mime_type":"image/svg+xml","magic":"exported SGML document, ASCII text, with very long lines (1163), with no line terminators","md5":"6c8b94d554caad39b40a6f7147fdc6a5","sha1":"66d27f915603d3286cf7257c467fa70e1422a462","sha256":"de92a8cf9812de5a645ec6e45df7843458c106187045b6f94f431bbc2d1a703b","sha512":"ec6c9900e3c43c736df89e4140184f5bcc7d328843ddcabd17bcce25f1d5c4e0841c503f5d6927419340be7336574244f7675f9d90158284bc8348f0d3161ea4","ssdeep":"","tlshash":"2f212ea8e25db92b884783fccb2d54633a5460ee578443e6b056d63a3490bdbec00bc0","first_seen":"2025-04-10T12:22:36.097854Z","last_seen":"2026-09-20T14:14:53.835934Z","times_seen":6362,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":1,"send":0,"wait":5,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}