{"report_id":"79e2fba8-3e9d-4dd8-8f17-483e13aa47c4","version":0,"status":"done","tags":[],"date":"2026-09-11T10:09:38Z","url":{"schema":"http","addr":"atfounder.com/","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"104.21.12.199","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"atfounder.com/","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"title":"AtFounder — Discover the next big products","dom":{"size":71784,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (62703)","md5":"8d9ee149b4d8412378afe81c5c78b5be","sha1":"231e305cfc47c6591919b14df349c308a23cb0bf","sha256":"245496847e8dea51a1035ed58ae667431b411e5d09033de3fedf915823378606","sha512":"e4e013abbb525dae3edcf33821de390ce3f45e0e89007472b2ecf7d08b4b3a4f479eeba4563bbc90340bf0284912431bbd192d906b0fd8fb23a8149e472f7b85","ssdeep":"768:AZ2HO2XY5BTn4eKkISQgIy689ra2Jqp1mVwo/NWq/UBvjOqVexkeO7Ol1hMkZk19:YKO+HeDAy4qsv6iI1SctSVh7537","tlshash":"6e63d6252221127e911347ecf289b778a17f83c9db0b951cb37d13b5678ac9dae232d4","dom_hash":"domhashaf1ef4a0cb3ae4b460be9367280bbf3d","first_seen":"2026-09-11T10:08:38.794409Z","last_seen":"2026-09-11T10:09:50.195715Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"atfounder.com/","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"104.21.12.199","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-16T10:09:38Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"assets.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"api.atfounder.com","ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-09-07","domain_rank":0,"first_seen":"2026-09-11T10:09:44.703631Z","last_seen":"2026-09-11T10:09:45.390487Z","alert_count":15,"request_count":15,"received_data":27392,"sent_data":8300,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"assets.atfounder.com","ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":1,"request_count":1,"received_data":1227,"sent_data":601,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"atfounder.com","ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-07","domain_rank":0,"first_seen":"2026-09-11T10:08:32.333036Z","last_seen":"2026-09-11T10:08:32.333036Z","alert_count":7,"request_count":7,"received_data":10829219,"sent_data":3446,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-06T22:43:29.090385Z","alert_count":0,"request_count":5,"received_data":112217,"sent_data":2823,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-06T22:43:29.329928Z","alert_count":0,"request_count":1,"received_data":8173,"sent_data":603,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"atfounder.com/assets/index-CjBGGBvh.js","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2bfa1e3c259a9fa544d1068ba9801bbe","sha1":"d3b8cb615bfcf2f633920d56184a3eb9d435f6a8","sha256":"04d14baad7e4f34495e56fd72a10dbb15a0061875322560739f1077619f33cc7","sha512":"9f349f247b34571c175621b5c52ee6072149c4287ec7f863c5d42b25c73b879d603dc20c46ac04b61be6107d1d6fc531ea8eea18d9dfabdcb1e73cd26637b870","ssdeep":"49152:iIkyIOl4S4T3rI+ptfQ2nw6jiPqcVoi2fkbM8rcJlrk6YLEwJuIIOJXFDDfZccy/:oIv1AT","tlshash":"25a692b9ab6cb1bc5807c79c8f2aa260271f66f5320a4b70487dd6b0714776de2c7c64","size":9859012,"data":"","first_seen":"2026-09-11T10:08:38.860699Z","last_seen":"2026-09-11T10:09:50.225854Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atfounder.com/","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f52d7fa1a18a74f94a1a3e8e066c0095","sha1":"6c76aa0aea60da7a5e4b5543a87d74f64385eb01","sha256":"09bee16cacdc3691212bbc732faa0b0a1906bc39f52cd6f3ae426ba92e27f7b1","sha512":"42a15a3f41bc281f0914e08001942ac07cf8d0f402e20e169d969c263d891b92f0e0af99e50b1e523de64d46375ee0d4a47ea4a39f705621fa815987f47716d7","ssdeep":"","tlshash":"5521fe69491a1069ab07327ee01e9a50f0a300376abedd04f84c913c2f70e762356fdc","size":1340,"data":"","first_seen":"2026-09-11T10:08:38.857096Z","last_seen":"2026-09-11T10:09:50.227256Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/auth/refresh","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.249Z","timestamp":1789121346249,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"OPTIONS /api/v1/auth/refresh HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://atfounder.com/\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-request-id: bacac8ec-2bc0-462b-a620-0e0ec41c5773\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":65,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"assets.atfounder.com/production/users/07535f8d-03c8-4955-8fd0-78c9dd58c651/media/product-logos/2026/09/c2d93b43-25d1-4694-8b3d-f0a57ef54704_favicon-dark.svg","fqdn":"assets.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.669Z","timestamp":1789121346669,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"b6ce7146.sni.cloudflaressl.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 19:27:13 GMT","end":"Sun, 06 Dec 2026 20:27:10 GMT"},"fingerprint":{"sha1":"29:8D:D9:45:37:0B:44:56:DD:C3:9D:4D:5C:6F:B3:18:8E:8F:AE:C9","sha256":"04:4D:12:D5:F3:13:A3:BE:3C:4B:09:B0:F2:0C:D9:05:F2:09:94:8A:1B:E3:52:D3:DB:F1:68:B9:CF:B5:EC:6A"}}},"request":{"raw":"GET /production/users/07535f8d-03c8-4955-8fd0-78c9dd58c651/media/product-logos/2026/09/c2d93b43-25d1-4694-8b3d-f0a57ef54704_favicon-dark.svg HTTP/1.1\r\nHost: assets.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aAdJshR7DS4qk6tn6CTU8MowmZjJiBdc%2BfC3q7bhXVEmy6yg8iKrJEyNBJFjXCJqA0dT5W3pzDxKz7Ho0TeT9v%2BtnBbWjPvsITtLfEZbccksiUB4y%2BcLLTe3DyVJq95MgqidlLo70A%3D%3D\"}]}\r\nlast-modified: Fri, 11 Sep 2026 05:38:55 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nage: 71\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"7bf9ffe9e1a090028351039768531c2b-1\"\r\ncontent-encoding: zstd\r\ncf-ray: a395e000fba856c9-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":566,"size_decoded":1025,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f3a0bbc708770479956100af399c7ca","sha1":"3c02192502e496cbc043c4880f1ea8fef3b48544","sha256":"9017d3f3d67ac832c53d7074e1dafc3ecf446adca9c0f7cbe1b35ead0fe26ac0","sha512":"58b48fdd762ee0cfb39de9bff51d47c31a625214c20641c7d6d9055fdcc640adc655d3092f9780d8ebed40cbefa75883ea20f411162c4c69c2862de120d10e27","ssdeep":"","tlshash":"5af0e169a32d872cdd08ce14e82c640a37b435954354f0fc6a676231e01bae45875cbc","first_seen":"2026-09-11T10:08:38.844554Z","last_seen":"2026-09-11T10:09:50.199972Z","times_seen":2,"resource_available":false,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":26,"connect":14,"send":0,"wait":46,"receive":-1,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"assets.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atfounder.com/logos/logo-dark.svg","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.698Z","timestamp":1789121345698,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atfounder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 19:58:13 GMT","end":"Sun, 06 Dec 2026 20:58:08 GMT"},"fingerprint":{"sha1":"8A:CD:62:0A:D6:0B:8D:DC:FF:5C:AF:62:6F:45:F2:41:4D:B9:6C:62","sha256":"43:DB:92:54:86:ED:52:ED:61:0E:F2:AE:6F:92:4A:3D:57:B0:9A:11:BA:DB:8D:57:91:80:A8:81:1F:20:E7:1A"}}},"request":{"raw":"GET /logos/logo-dark.svg HTTP/1.1\r\nHost: atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MOS1L41giFaY3ihiYQfXwly3%2BuD3OSi4sTqPzcG3GrU%2B%2B%2FDZzl4D4U3Rmnc41w%2F%2F%2FXEZbN0a4jkvdLLZzUTFI11sExEnFXbd6pd%2B%2FK8XTcSEAuqp0ddyL7UM2IK5dmCu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"4b8e1b5d79eaee3156bedf9cface951f\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Fri, 11 Sep 2026 10:09:05 GMT\r\ncf-ray: a395dffa9ed1b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":447290,"size_decoded":167751,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"057b4a00186630f9ae9ea60f9b67a80a","sha1":"1cf73c0ae01db4a96cae7abf13e52a386235c61a","sha256":"6db0a60adbacf0c5cf9851737182929254d10573f3706a1f4711114cd9fc73cb","sha512":"e50f9a968f345aae6bddf03ce8f33a0b255c3fad5ecd885d279832f3552fa4af05ef901dab33717238db4abb4bd7358de939cea67da33166ffe73836addf2d7a","ssdeep":"12288:QoXtDBqeorYoF3v2chX+nFoXtDBqeorYoF3v2chX+nS:paeorYoF/2chjaeorYoF/2ch9","tlshash":"ca94127b111374933b718910122bbe4d7d4109e7aaea62515b44268df2fee81c63ecef","first_seen":"2026-09-11T10:08:38.822139Z","last_seen":"2026-09-11T10:09:50.201854Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":91,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.729Z","timestamp":1789121345729,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 09 Sep 2026 10:31:10 GMT\r\nexpires: Thu, 09 Sep 2027 10:31:10 GMT\r\ncache-control: public, max-age=31536000\r\nage: 171475\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":8812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-09-11T12:23:23.362126Z","times_seen":305932,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":18,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products?limit=100\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.231Z","timestamp":1789121346231,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"GET /api/v1/products?limit=100\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nContent-Type: application/json\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 117\r\nx-request-id: 4f82e409-ca6b-4c8f-8160-87908ab301a7\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3782,"size_decoded":1616,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fee1a5d31530ad63f0970b6593eeff27","sha1":"06102afa0c247e72f2df5c3efd4963338b77dbc5","sha256":"717bf3631cf643846cbf1f0dcfa3f4b10514d6dffc268a9658ca5d1afa26d077","sha512":"d9beb36d96c82166be2eb3ecb7009f4e3a83f42012e6de18cab5a5cdbc7fb76b568fcbce5dd6946248fe69fbfbf7f3e5d8b50156eff1426e56d7998c5ebf09cd","ssdeep":"","tlshash":"3b719dbffcf42e761f3286b7585a6fd43dd43c1224db9f483a20a4b27865805071aaa5","first_seen":"2026-09-11T10:09:50.204442Z","last_seen":"2026-09-11T10:09:50.204442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products?limit=50\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.245Z","timestamp":1789121346245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"OPTIONS /api/v1/products?limit=50\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://atfounder.com/\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-request-id: 698c5106-6d63-4dd3-b4c3-52d0ddbd1282\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":25,"receive":0,"ssl":288},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/auth/refresh","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.234Z","timestamp":1789121346234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"POST /api/v1/auth/refresh HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nContent-Type: application/json\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 401 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: text/plain; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-ratelimit-limit: 60\r\nx-ratelimit-remaining: 58\r\nx-request-id: e577dc17-dd3f-4fde-b034-92477cd91725\r\ncontent-length: 71\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"401","status_text":"Unauthorized","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":71,"size_decoded":665,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"3e5f2d50bef0bcc7674cbf0751d94dc4","sha1":"6e329b27a54ae0661a09e1bd21d775bef38ebefc","sha256":"88472f98b2b36b011f3165fed9e9a36a8c492c11f318daae62d92155533318d5","sha512":"f740c74c58731677ea41043a736b11bb7a4c822dc48480b57ebf1742a403a06d2961f5c3c66041b067173bbec19f8b91cd67a05dac9822bd4c9d14f8ae6510a1","ssdeep":"","tlshash":"17a00261229d1e590f5711017c583ed06eb4118581d92c0a4e98617d954bb2acaf1539","first_seen":"2026-09-11T10:08:38.806923Z","last_seen":"2026-09-11T10:09:50.207651Z","times_seen":2,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products/leaderboard?period=week\u0026limit=50\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.248Z","timestamp":1789121346248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"OPTIONS /api/v1/products/leaderboard?period=week\u0026limit=50\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://atfounder.com/\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-request-id: a8c620bc-b532-4abd-8128-f01d8ab6aa32\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":343,"timings":{"blocked":-1,"dns":0,"connect":28,"send":0,"wait":26,"receive":0,"ssl":285},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atfounder.com/","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-11T10:09:04.482Z","timestamp":1789121344482,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atfounder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 19:58:13 GMT","end":"Sun, 06 Dec 2026 20:58:08 GMT"},"fingerprint":{"sha1":"8A:CD:62:0A:D6:0B:8D:DC:FF:5C:AF:62:6F:45:F2:41:4D:B9:6C:62","sha256":"43:DB:92:54:86:ED:52:ED:61:0E:F2:AE:6F:92:4A:3D:57:B0:9A:11:BA:DB:8D:57:91:80:A8:81:1F:20:E7:1A"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zkAXHRKO5XHyGjrbfef61Z7KNsJg3OYXGc3BMm5Eock6m5wK4zQf2uXOzDUG8VFoasNzIfVIVHRkpJ5uPkTOK%2Fw6Z%2BwJi64ZB2BrG%2F5m6ROqWQZ2MIox8p7m%2BE9mQ9Nv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/html; charset=utf-8\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nx-content-type-options: nosniff\r\nlink: \u003chttps://fonts.googleapis.com\u003e; rel=\"preconnect\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nvary: accept-encoding\r\npriority: u=0,i\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ndate: Fri, 11 Sep 2026 10:09:04 GMT\r\ncf-ray: a395dff32e67b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2798,"size_decoded":1932,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text","md5":"d0bfb56550e59d5436036af1cb1316fc","sha1":"dece621cb732dc3dc3e4b9b19ae37020edf0ebad","sha256":"cf434f9f6ce9aad97d416005ecdbf2dea00e16127b33b15385fa8233fc22532e","sha512":"4a66082c4f237ac9b30bb074a2d67b425d5ef2bf6e8c53fe85dcbb1f873d26c989a1ae58233157f38702ef6e692fa89d1a9712b7953782d2447cd0b218786176","ssdeep":"","tlshash":"ad5184a2886144096303227ee58df868e962552b579ded08f88e807c5ff0eb142d7edd","first_seen":"2026-09-11T10:08:38.815397Z","last_seen":"2026-09-11T10:09:50.209032Z","times_seen":2,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":0,"dns":7,"connect":17,"send":0,"wait":56,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atfounder.com/assets/index-DVvDOZ_P.css","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.009Z","timestamp":1789121345009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atfounder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 19:58:13 GMT","end":"Sun, 06 Dec 2026 20:58:08 GMT"},"fingerprint":{"sha1":"8A:CD:62:0A:D6:0B:8D:DC:FF:5C:AF:62:6F:45:F2:41:4D:B9:6C:62","sha256":"43:DB:92:54:86:ED:52:ED:61:0E:F2:AE:6F:92:4A:3D:57:B0:9A:11:BA:DB:8D:57:91:80:A8:81:1F:20:E7:1A"}}},"request":{"raw":"GET /assets/index-DVvDOZ_P.css HTTP/1.1\r\nHost: atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GdqYYJp9dls%2FfbHETqqtQ66az0dUk9GHwZyl%2BYIATptpf2PVs30jsj4tPO9JbQE8WtY5oAh9Pys50Y4Y%2BurgDTE1%2Bi%2FQQl4tTeIG1ncCqYhV7fdNimRmX7p%2FvVHGbfrL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: text/css; charset=utf-8\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"c918ef948c68ed6908365d3a642d72a3\"\r\ncontent-encoding: br\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Fri, 11 Sep 2026 10:09:05 GMT\r\ncf-ray: a395dff64e9db4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140731,"size_decoded":23750,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"d349caba31186f9ac27326252f1170cd","sha1":"286219588a891d0480029dc7dc0642b402d7f960","sha256":"6ec415ae2d8178ef9612636da785ae59f592610bb3fcf7fe722a01e76cd31731","sha512":"b4302a2e0792b94f0ada49802c8ce5c896acf2d72aa3af4dd585c71621542709ef99bf2182b220e8d7f2bdf52581fbbd8930ea5007dc18191e7eb0eab066e9ba","ssdeep":"3072:FYi5BEDi9aRp1oih7b5L3TU0UVMUK0MieCGRw5QhNguHMcP:ei5BEDi9aRp1oih7b5L3TU0vHMcP","tlshash":"f4d3552eaa14603f7c2754f8d2a8bd5ea62f70c0ee2a56febc4251106bd23f71c97550","first_seen":"2026-09-11T10:08:38.835963Z","last_seen":"2026-09-11T10:09:50.210366Z","times_seen":2,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.732Z","timestamp":1789121345732,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/bricolagegrotesque/v9/3y9K6as8bTXq_nANBjzKo3IeZx8z6up5BeSl9D4dj_x9PpZBMlGIInHWUSNIpvI.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 76708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Sep 2026 00:53:42 GMT\r\nexpires: Sun, 05 Sep 2027 00:53:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 551723\r\nlast-modified: Wed, 10 Sep 2025 16:56:17 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":76708,"size_decoded":77521,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 76708, version 1.0","md5":"e4fb7cb2cabbdbaeb698e9107c10995b","sha1":"6fcd8fb90adf70483ab37cd1055dd21f577c2ddf","sha256":"37d43e1615cd7f5c6e41d0da9a45253b89c06837026ff7caed07519bf9493e05","sha512":"7e2523e867c79af7dc8e6e87d5f9479acd9bacac87d793bacd23303a5d7d5815ef5162346858504f0767289fab6f70215ddd831552a53e6d1c16937c9a829256","ssdeep":"1536:gVJjNzmEcEb3votzMp0Rbd6nKqo9ZJxiYjrPaB86zyU49Xg:yj1mEcAAF7RbNqyJsuPz6zi9Q","tlshash":"117313a8ae33dfa890acfa7ca15846598385e815c9e99711ccdd5d7c2833f8d14fbc80","first_seen":"2025-03-13T21:45:43.00591Z","last_seen":"2026-09-11T11:01:21.649576Z","times_seen":2347,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":31,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products/leaderboard?period=yesterday\u0026limit=12\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.228Z","timestamp":1789121346228,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"GET /api/v1/products/leaderboard?period=yesterday\u0026limit=12\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nContent-Type: application/json\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 115\r\nx-request-id: ef3590f5-df91-42d2-85e5-3acac97e4f0d\r\ncontent-length: 37\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":37,"size_decoded":639,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"37ad96b574959407b9b39cf5c8464c98","sha1":"a8d0db56e3940686f8560d52170ab5c33bb7f4aa","sha256":"56c447bede8f745701104eaa55b2746c31d263b0a6daf8d5a43305f66c08b3b2","sha512":"3e80a46febde036853daf9e06c6df7116b2d15c7c776ea0d5db6c3729738f274475dc70f40e5a88e325e97d283222817e68e336b88426ae1f42200108f793f49","ssdeep":"","tlshash":"71800447c13c03015513313454110444dc5010004153453104cc30554111c0107c4c45","first_seen":"2026-09-11T10:08:38.82477Z","last_seen":"2026-09-11T10:09:50.212332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products/leaderboard?period=week\u0026limit=50\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.233Z","timestamp":1789121346233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"GET /api/v1/products/leaderboard?period=week\u0026limit=50\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nContent-Type: application/json\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 116\r\nx-request-id: 1612ed15-c827-4eef-845b-739135b46354\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3848,"size_decoded":1647,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"33e5e13d62cd87e15cbf87445791f9bb","sha1":"fd533348f43c41cfe515fe707e0586d94a4192f4","sha256":"f75bc23a66cf977730412ba3ba922eea3a116ed3e24f2602bd2f64f7523dfab2","sha512":"eaca28743d65a592cf925333b42e183bdfef0104116af212d8616642665ca739f969d0ebe174ece210933951b20396715d0778bd2b62eb084d792261f0886246","ssdeep":"","tlshash":"ce81aebffcf42e761f3286b7585a6fd43dd43c1224db9f583a30a4b27865805070aaa5","first_seen":"2026-09-11T10:09:50.213453Z","last_seen":"2026-09-11T10:09:50.213453Z","times_seen":1,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products/leaderboard?period=yesterday\u0026limit=12\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.244Z","timestamp":1789121346244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"OPTIONS /api/v1/products/leaderboard?period=yesterday\u0026limit=12\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://atfounder.com/\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-request-id: 32c02762-7f64-4551-9ad1-5d2f97ce1267\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":27,"receive":0,"ssl":289},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026family=Poppins:ital,wght@0,400;0,500;0,600;0,700;1,400\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.006Z","timestamp":1789121345006,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Bricolage+Grotesque:opsz,wght@12..96,200..800\u0026family=Poppins:ital,wght@0,400;0,500;0,600;0,700;1,400\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 11 Sep 2026 10:09:05 GMT\r\ndate: Fri, 11 Sep 2026 10:09:05 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7489,"size_decoded":1473,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5b94c9a504e9f54cd95b4bc2ac63feb0","sha1":"118b6cc18ce505c3c187bfedc44e0f4dd9c21b54","sha256":"f2a804820da39042f784851ad0fc6ba3dadfe9f391323f398ef03d297086949f","sha512":"e1f336f60c522dc162d672792163014ca5eddfc842c7c965f39e747ee0c8701242d8575bb57b55916de5a979b5921156bae980e14de7b6fd1e6f1ae3e1ec4308","ssdeep":"96:c6OSbadOSbaMJc+uGOSbaFN3YgEawYgEamJc+ukYgEaEN3OEanOEaCJc+ukOEaup:cPE4wYOROmoOFgKQcXr3lVwa3RzJZ","tlshash":"daf1cd91087be104ab835cc123cf7d37ee1ea1547450e5786bfe0c98adabc255362b2d","first_seen":"2026-09-11T10:08:38.798115Z","last_seen":"2026-09-11T10:09:50.215313Z","times_seen":2,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"atfounder.com/favicons/apple-touch-icon-light.png","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.856Z","timestamp":1789121345856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atfounder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 19:58:13 GMT","end":"Sun, 06 Dec 2026 20:58:08 GMT"},"fingerprint":{"sha1":"8A:CD:62:0A:D6:0B:8D:DC:FF:5C:AF:62:6F:45:F2:41:4D:B9:6C:62","sha256":"43:DB:92:54:86:ED:52:ED:61:0E:F2:AE:6F:92:4A:3D:57:B0:9A:11:BA:DB:8D:57:91:80:A8:81:1F:20:E7:1A"}}},"request":{"raw":"GET /favicons/apple-touch-icon-light.png HTTP/1.1\r\nHost: atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hzxWbr2%2BrC6AXi0siSN364ZZ0hGoI9IHsWtVo5TKtHfJ1CNO%2B9b%2BX0lbQuCQixdCbxurWLLtjVja41KEBI4PjXGJMGgiqCawmOGi32QB7NLwlKfBXIG%2FAJsgENd7QZLl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: \"d6e28f048a38a9a37b3bb4694c1fd0d9\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Fri, 11 Sep 2026 10:09:05 GMT\r\naccept-ranges: bytes\r\ncf-ray: a395dffb9edbb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4908\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4908,"size_decoded":5715,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"1b98f975ea2e0ec9bf5ff968d774cc93","sha1":"fc8305623ccd4269f1079c26d83875b458bfc2a1","sha256":"59199654711ccfb097d3dbad964f3260933c077445a57c43bbba7d252566a1a7","sha512":"bf5c73c30cb1e27ea0dab249e86fc971f11496813508b39887489664e1aea66ed1b8f7b6583dd25c487ea307c287fb8588a1f26e534e137c8562f90c9e08ab3e","ssdeep":"96:LSZVK4kzJjhkCAv6/4BusO9ONWGLiunmbnsLIcUF5ACeDY1:LSZ8twCr6ZtnSnsLIcUF771","tlshash":"83a17d0a17451127cb4f2638dc914f807d8d393c3124691af96ab11fe5623b5b73e606","first_seen":"2026-09-11T10:08:38.818618Z","last_seen":"2026-09-11T10:09:50.216462Z","times_seen":2,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atfounder.com/favicons/favicon-light.svg","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.857Z","timestamp":1789121345857,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atfounder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 19:58:13 GMT","end":"Sun, 06 Dec 2026 20:58:08 GMT"},"fingerprint":{"sha1":"8A:CD:62:0A:D6:0B:8D:DC:FF:5C:AF:62:6F:45:F2:41:4D:B9:6C:62","sha256":"43:DB:92:54:86:ED:52:ED:61:0E:F2:AE:6F:92:4A:3D:57:B0:9A:11:BA:DB:8D:57:91:80:A8:81:1F:20:E7:1A"}}},"request":{"raw":"GET /favicons/favicon-light.svg HTTP/1.1\r\nHost: atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gvZIk1m2YAFiNH0oHOGMIr2kUyrwECKyTVSSYEd01f426mhFTHevAMxBmbB%2Fzsm245NkqnPfjZH8NHyrXiGDfuf%2BJqe98syH6Kmm4%2FuUMMAKtMNIE%2FzwiCdHMOVJmJWk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"354d53b554ed3cb6635a8e6aa49ee5ff\"\r\ncontent-encoding: br\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Fri, 11 Sep 2026 10:09:05 GMT\r\ncf-ray: a395dffb9edcb4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40296,"size_decoded":15748,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"7aea57cf162f07ad096207f794a20ccb","sha1":"1de031f1e999fb2f5a36d9f42fd26b1ac326eb59","sha256":"63aab0edb7d9cf22609adcff8a1945a044209492a3f777ad0d88377694e7f708","sha512":"0f7f9ae2682aa6ae8d523d9dc2fbcd4c36a34d2f99e15a5b0f6f193eb7093823dd221c48297190bd7fecfc573d0ac349af75b51989c10e620bf61cc55785549d","ssdeep":"768:Aa4d6SQUa+SHILX3lYA5JTUb4sY3a4d6SQUa+SHILX3lYA5JTUb4sYm:sd6SQUfHLCcpem/d6SQUfHLCcpemm","tlshash":"e603c01ac91b48f92996fa75f634bf083271ace46dd5c4e539580156e3fc88df4c2493","first_seen":"2026-09-11T10:08:38.827028Z","last_seen":"2026-09-11T10:09:50.21765Z","times_seen":2,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products?limit=100\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.232Z","timestamp":1789121346232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"GET /api/v1/products?limit=100\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nContent-Type: application/json\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 114\r\nx-request-id: b2c59645-07e7-48d6-acba-eb3c893bab2c\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3782,"size_decoded":1616,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fee1a5d31530ad63f0970b6593eeff27","sha1":"06102afa0c247e72f2df5c3efd4963338b77dbc5","sha256":"717bf3631cf643846cbf1f0dcfa3f4b10514d6dffc268a9658ca5d1afa26d077","sha512":"d9beb36d96c82166be2eb3ecb7009f4e3a83f42012e6de18cab5a5cdbc7fb76b568fcbce5dd6946248fe69fbfbf7f3e5d8b50156eff1426e56d7998c5ebf09cd","ssdeep":"","tlshash":"3b719dbffcf42e761f3286b7585a6fd43dd43c1224db9f483a20a4b27865805071aaa5","first_seen":"2026-09-11T10:09:50.204442Z","last_seen":"2026-09-11T10:09:50.204442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products?limit=100\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.246Z","timestamp":1789121346246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"OPTIONS /api/v1/products?limit=100\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://atfounder.com/\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-request-id: 4f026422-6c89-4d29-bb21-0238a5cc50bf\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":27,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.736Z","timestamp":1789121345736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sat, 05 Sep 2026 03:19:31 GMT\r\nexpires: Sun, 05 Sep 2027 03:19:31 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nage: 542974\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-09-11T12:23:23.311605Z","times_seen":310956,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":26,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products?limit=50\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.229Z","timestamp":1789121346229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"GET /api/v1/products?limit=50\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nContent-Type: application/json\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 118\r\nx-request-id: bbf5bf58-c91a-42f0-816d-484156a8f625\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3782,"size_decoded":1616,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fee1a5d31530ad63f0970b6593eeff27","sha1":"06102afa0c247e72f2df5c3efd4963338b77dbc5","sha256":"717bf3631cf643846cbf1f0dcfa3f4b10514d6dffc268a9658ca5d1afa26d077","sha512":"d9beb36d96c82166be2eb3ecb7009f4e3a83f42012e6de18cab5a5cdbc7fb76b568fcbce5dd6946248fe69fbfbf7f3e5d8b50156eff1426e56d7998c5ebf09cd","ssdeep":"","tlshash":"3b719dbffcf42e761f3286b7585a6fd43dd43c1224db9f483a20a4b27865805071aaa5","first_seen":"2026-09-11T10:09:50.204442Z","last_seen":"2026-09-11T10:09:50.204442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atfounder.com/assets/index-CjBGGBvh.js","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.008Z","timestamp":1789121345008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atfounder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 19:58:13 GMT","end":"Sun, 06 Dec 2026 20:58:08 GMT"},"fingerprint":{"sha1":"8A:CD:62:0A:D6:0B:8D:DC:FF:5C:AF:62:6F:45:F2:41:4D:B9:6C:62","sha256":"43:DB:92:54:86:ED:52:ED:61:0E:F2:AE:6F:92:4A:3D:57:B0:9A:11:BA:DB:8D:57:91:80:A8:81:1F:20:E7:1A"}}},"request":{"raw":"GET /assets/index-CjBGGBvh.js HTTP/1.1\r\nHost: atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YzOkLsFH4HdOqJdXpmEQH2LF9XWhioMCse2pzbk2D%2BPlyoXkFNtXpKoPj%2Bm5mYfsQBmz9qgkKLbE6ROAXayw6mEzexc3eBuzdLwX2A9u0axVGSwcJKhdmrXHag0wWPTX\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: application/javascript\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"38a8f58b649c17c447fb825222d48aa8\"\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Fri, 11 Sep 2026 10:09:05 GMT\r\ncf-ray: a395dff64e9ab4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9859012,"size_decoded":2178948,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (37730)","md5":"81659f292b24021b9c1103df36d48970","sha1":"10919e34480cb6d8ef8f18ae580285f74445488d","sha256":"9e23389a2fe0dac4059931607b5b2850fe5a0b0691f81551de1a7312cf791b23","sha512":"188bad5e19f81dda01b1861a7f21e82297d6dcfd4aa32e3f53a9b7423c0fdeaa57be67a8069065f5556dd967b15d66ca7fa6dc448831c8b1dfc0e4784069aa03","ssdeep":"6144:cRR5VfISr+6xxuNal6c//6X0Cg58HdgdWXk1u+YOc30YIOl4SS+k+zm:ic6ju7wY7IOl4SHK","tlshash":"03251d9c371ca17db52386688b1ab63a323e32d9310d6330987e8574315671ef6b7ee4","first_seen":"2026-09-11T10:08:38.833982Z","last_seen":"2026-09-11T10:09:50.220214Z","times_seen":2,"resource_available":false,"data":null}},"time_used":206,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":78,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.733Z","timestamp":1789121345733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 02:57:31 GMT\r\nexpires: Fri, 10 Sep 2027 02:57:31 GMT\r\ncache-control: public, max-age=31536000\r\nage: 112294\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-09-11T12:26:29.012205Z","times_seen":402188,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products?limit=100\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.247Z","timestamp":1789121346247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"OPTIONS /api/v1/products?limit=100\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://atfounder.com/\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-request-id: d63d8bce-4d9e-47aa-b714-4935354b9293\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":344,"timings":{"blocked":-1,"dns":0,"connect":29,"send":0,"wait":26,"receive":0,"ssl":286},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/events/votes?product_ids=1f41d204-6a67-440a-a989-ccd66e20e0fe","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.656Z","timestamp":1789121346656,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"GET /api/v1/events/votes?product_ids=1f41d204-6a67-440a-a989-ccd66e20e0fe HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/event-stream\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache\r\ncontent-type: text/event-stream\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-accel-buffering: no\r\nx-ratelimit-limit: 300\r\nx-ratelimit-remaining: 299\r\nx-request-id: 36921bc7-3bce-4460-915c-8f0287c4179b\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/event-stream","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"atfounder.com/logos/logo-light.svg","fqdn":"atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"172.67.153.56","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.700Z","timestamp":1789121345700,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"atfounder.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 19:58:13 GMT","end":"Sun, 06 Dec 2026 20:58:08 GMT"},"fingerprint":{"sha1":"8A:CD:62:0A:D6:0B:8D:DC:FF:5C:AF:62:6F:45:F2:41:4D:B9:6C:62","sha256":"43:DB:92:54:86:ED:52:ED:61:0E:F2:AE:6F:92:4A:3D:57:B0:9A:11:BA:DB:8D:57:91:80:A8:81:1F:20:E7:1A"}}},"request":{"raw":"GET /logos/logo-light.svg HTTP/1.1\r\nHost: atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7rIKa7WasZdp6jNXLqXkjm%2BRfWqQivWHKrZyZI5TgZjGnVt69C7VOGE45Hjzr7N2t9SUleeYzEnKkN8aJyliQzAHxrZC0%2B3bnLMpbIL1wgEawpCCXvbD%2FIsf%2B0qAuix0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/svg+xml\r\nvary: accept-encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=14400, must-revalidate\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\netag: W/\"5b2700f49daaf8d36359f9a0425919cc\"\r\ncontent-encoding: br\r\npriority: u=5,i\r\nserver: cloudflare\r\ncf-cache-status: REVALIDATED\r\ndate: Fri, 11 Sep 2026 10:09:05 GMT\r\ncf-ray: a395dffaaed2b4f9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":328458,"size_decoded":122845,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ef475fd5faebb3a0d635e4506cd308d9","sha1":"11559fe4694860251931086fd93e1bd9ce0ac45b","sha256":"22eba4df1dca47f3edd17b64d08046d3b1df4e48229a4b59968adf111708d9fc","sha512":"6a1cbe80b7abbc976259c6a514fc92e087ea5fb19fb4463b60da72e043af58522d70d403fd102f7a42506314527c94f563fbf06771b0836f7d422bd39816f122","ssdeep":"6144:S24TPyeYYtrhoqoFDdGrJNc4c724TPyeYYtrhoqoFDdGrJNc4c0:SvzyIte1/GovzyIte1/Gh","tlshash":"35641230985f3e737e7098d765aaac580f51202f612fd7c87a80b914bf56190ce3f899","first_seen":"2026-09-11T10:08:38.848842Z","last_seen":"2026-09-11T10:09:50.22252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products?limit=200\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.243Z","timestamp":1789121346243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"OPTIONS /api/v1/products?limit=200\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://atfounder.com/\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin\r\nvia: 1.1 Caddy\r\nx-request-id: 36229531-7649-46e1-a2bd-98f8f0f0eb77\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":483,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-11T12:24:35.010173Z","times_seen":18402577,"resource_available":true,"data":null}},"time_used":104,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":31,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:05.738Z","timestamp":1789121345738,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 10 Sep 2026 03:06:28 GMT\r\nexpires: Fri, 10 Sep 2027 03:06:28 GMT\r\ncache-control: public, max-age=31536000\r\nage: 111757\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-09-11T12:09:31.581918Z","times_seen":289018,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":23,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"api.atfounder.com/api/v1/products?limit=200\u0026offset=0","fqdn":"api.atfounder.com","domain":"atfounder.com","tld":"com"},"ip":{"addr":"85.17.162.180","port":443,"asn":60781,"as":"LeaseWeb Netherlands B.V.","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://atfounder.com/","date":"2026-09-11T10:09:06.227Z","timestamp":1789121346227,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"api.atfounder.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 20:48:07 GMT","end":"Sun, 06 Dec 2026 20:48:06 GMT"},"fingerprint":{"sha1":"D9:DF:A5:B8:EB:5A:DF:02:30:28:83:B2:9A:28:E8:2A:6C:93:84:8A","sha256":"CA:A8:E4:8E:89:EA:EE:FA:A7:87:A3:97:38:E5:B3:4B:82:CC:13:A3:91:4E:66:1E:A4:4D:58:55:18:30:3B:25"}}},"request":{"raw":"GET /api/v1/products?limit=200\u0026offset=0 HTTP/1.1\r\nHost: api.atfounder.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://atfounder.com/\r\nContent-Type: application/json\r\nOrigin: https://atfounder.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Authorization,Content-Type,X-Request-Id\r\naccess-control-allow-methods: GET,POST,PATCH,DELETE,OPTIONS\r\naccess-control-allow-origin: https://atfounder.com\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: application/json; charset=utf-8\r\ndate: Fri, 11 Sep 2026 10:09:06 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: Origin, Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-ratelimit-limit: 120\r\nx-ratelimit-remaining: 119\r\nx-request-id: 7f3f29be-737c-4171-90f2-602c6e85bff3\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3782,"size_decoded":1616,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"fee1a5d31530ad63f0970b6593eeff27","sha1":"06102afa0c247e72f2df5c3efd4963338b77dbc5","sha256":"717bf3631cf643846cbf1f0dcfa3f4b10514d6dffc268a9658ca5d1afa26d077","sha512":"d9beb36d96c82166be2eb3ecb7009f4e3a83f42012e6de18cab5a5cdbc7fb76b568fcbce5dd6946248fe69fbfbf7f3e5d8b50156eff1426e56d7998c5ebf09cd","ssdeep":"","tlshash":"3b719dbffcf42e761f3286b7585a6fd43dd43c1224db9f483a20a4b27865805071aaa5","first_seen":"2026-09-11T10:09:50.204442Z","last_seen":"2026-09-11T10:09:50.204442Z","times_seen":1,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-11","alert":"Sinkholed","trigger":"api.atfounder.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}