{"report_id":"79f934e5-b0cb-42f0-bc51-a9941f3231b3","version":6,"status":"done","tags":[],"date":"2026-05-25T10:13:51Z","url":{"schema":"http","addr":"tw-sites.org","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"172.67.178.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"title":"Trust - Crypto Card","dom":{"size":34163,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33760)","md5":"0893057a1a33d2641d314ebd36d2ec05","sha1":"e116031f4c3c7315ff35b6a38f1f7d2d0fa5540c","sha256":"64ca71d987b663a2427373017b6c5a004501f51d1a4802c4270aeeafe92695f8","sha512":"eb1aab98a5f2a2d38b8b4bd50f1bdbea62c5658c5a82dbb2130c9f2fe7d92f689046f7f136ead37f687603de6693c55702eb8d585fd6d9e28e5008f38e93a534","ssdeep":"768:Q+SulF7XkxxVv7EfRCgF9Erbh22HmA9H6XA3Dj6t2:xt6PwfOnrmA9aXQP","tlshash":"52e2f81bf604d62ad9571ea932bfaeb6119ac026838144f4b7dcc60c0396dfd56f38c6","dom_hash":"domhashc09876027c87f4ded39ad5d3c4d45f81","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"tw-sites.org","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"172.67.178.105","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-29T10:13:51Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"tw-sites.org","ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":14,"received_data":497401,"sent_data":6352,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-05-24T22:26:02.229202Z","alert_count":0,"request_count":1,"received_data":234605,"sent_data":425,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/main-app-02c6478efae7f71e.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"34c07692b676645986108b36cf63131f","sha1":"deeb160ca0507dc1b8d3fdd4557df0db0f8a7eec","sha256":"00fe99d3cece100d600e26e162bb51a6607e3527c78b47cd639a22acaa35b8ff","sha512":"3262856f7a6bb41a5da66a0a93f62c67f37f4cade25b92929203c1a5297be550fa25b29b24bf21f725570f3bcd6c1b55897557d26fa740ff443f94d58ace5581","ssdeep":"","tlshash":"b3f0fb5a4f0cf92f5d26ad64fe97ace2245f8175202b4e706901deb13c23b6dd270414","size":569,"data":"","first_seen":"2026-05-25T10:13:56.670897Z","last_seen":"2026-05-25T10:16:21.995988Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/app/layout-466dc44258ca199e.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9dcc0cd4bc00c4da2efe973b6b3aa40","sha1":"c707eef632bd98867688ff74ae2fa1c17672127c","sha256":"31f64872277964eec4a5edb5845bf1b9cb30c6eb192d1437301557aab290be93","sha512":"30c68e7a99a610f797be095451ad4e1282542de14f526072e044702274eae815043e8444263cde54e1cebe9f5f048cdae61415781e9a9d5baacbcbd8ba6fc285","ssdeep":"192:D39Dc5jz6noBDLpjD3dnz9I9eUja6rWkWVxCqD6:D3cj4SjKPIkWo","tlshash":"50e10bb23681fc3546a68480e837c6c2ba151d35241fb8d0f7bacce93664e88d5a1f69","size":7350,"data":"","first_seen":"2026-05-25T10:13:56.679056Z","last_seen":"2026-05-25T10:16:21.998054Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/webpack-d7c35e9d7a94b6db.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"691edc0832a1690ce466ee180af5a33b","sha1":"321a3d629f530f6fcb85f5b8e832eda30e33e12e","sha256":"79cf145bf353cdcdfd251f011f9461f985f018486fe425b1279a8ac50e1dd94f","sha512":"28f5fae30075f250e76d2ebe18599faaacf5a19ef33a1ed3faeae24ebb33573573ac95a9a11c77698b3ca8e7077d444df0e3ddf7fe3477ed869cc31db3c0bd5b","ssdeep":"","tlshash":"f771d6a53661fab166f044c65c7ed582f229313b112fecf0a707d8b9a424ad10562ff3","size":3740,"data":"","first_seen":"2026-05-25T10:13:56.675222Z","last_seen":"2026-05-25T10:16:22.000964Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1a6e1178e4bbf5730bd664a49dd3bc24","sha1":"17c3ae3273f9de6afbbdedf2e413dbb3a6722792","sha256":"3814cddd18b2095e01abb745a99e5ada90178e709c09879324c3b623f2d829ea","sha512":"cfb1aab0bf589e33fd12906f448ddbbf7163420a088de513b174304c9ba3a7abcd9b41c98bc4dd51edd0206c1fe4660db9857e3c6163d1bf50c670cefddee509","ssdeep":"","tlshash":"de9002b090c39c5890264186687100160b6c040c01080141132184d810115048e40d8e","size":43,"data":"","first_seen":"2023-03-13T01:07:12Z","last_seen":"2026-06-06T18:10:49.304581Z","times_seen":154653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0f740da982ea0d4754f3d181c00f76f0","sha1":"e073afb2ea7968f55c7c24a2edb4a7c1496b0221","sha256":"56442de0e3f0452a1bd6bce80491a8b2aacbaf08c764b7e38393b3b706e8ae95","sha512":"45424df9656dcaee32deaaff83d6fb0336244b6e444fc142f19eadff14aee6aa8c686188ee9bedf8489b38c1bf8e8fd9a1b93afb5c91e469be16fa59416a5b52","ssdeep":"","tlshash":"5b11ab45f249e8c35c22df2a51271d71c4c4ed3e42a4a9c875cfca1a03a2e7ca294416","size":1001,"data":"","first_seen":"2026-05-25T10:13:56.68064Z","last_seen":"2026-05-25T10:16:22.004696Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0847e28dba519bbc59b158bf2a591e4b","sha1":"86f7c0e0cf057c0bcb37b51d160d15dc7fcc0c92","sha256":"a39279d18253da3120898af9497a56c40076579a4b4400ad2043c27ede96fcd1","sha512":"7e2f9d3924e99933774ed90c2d850941cc5bdea609cc09039326f9b76e4bbef4243053f6515aff42493db3e4d73bb02efba1c477e23125084a68788781f77800","ssdeep":"","tlshash":"ad31e12e5406cd4bec7e3da9023d9d3b10cd897b4660daf8828acf181b0687523dadc0","size":1725,"data":"","first_seen":"2026-05-25T10:13:56.681861Z","last_seen":"2026-05-25T10:16:22.005299Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e2358d549a0152736c51e4e340e6009","sha1":"e291c17d1a55398cf8e7464c2f285a8045387030","sha256":"1379002441c6d030fde0c03d5738f3c308b5557708f76a7538994826bda43926","sha512":"3dfeaea97aaa86bdff05d3e00f3537f971f4b00faa36f57d3727d8eca17ce77279ca572738d05c0beebcd1d2ade9e0755ba19c8e31c136ea49c9beb0486ba26d","ssdeep":"3072:Wpq7tUGgbty0Qu5KoUA0mlCxw9bIayIi0MxK+1YILh3Of6E:jQ5OAF0mlkayIiLxb1YILhe/","tlshash":"ed3429ccb79a706653a3b5b8903f014bb23a79a2f84cd894f182d8d42d74a594273f7d","size":233956,"data":"","first_seen":"2026-05-25T10:13:56.674352Z","last_seen":"2026-05-26T01:06:27.130771Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/493-fb9a011a516e74e4.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e61fc91791d3c8d1344c7991f1c16c","sha1":"e244327ffe3f6566c8d78bb27458c03d3a074491","sha256":"696cb8fbb0a02f04c5f60bc95674e4a7a92dc0bfef9d1c290b475dd7beb1187a","sha512":"75fd78549fbf2a0998529b019c025e43b06c72347558202f575c2dea10289b27eaa55c2ee998c5e940c7caeaa8026c99b894165a3319725e8a810b4c1e97fec3","ssdeep":"1536:0zigN+KcB/cO5HYHqLVcXl7yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNwrky/Sz:u7MtmA+Vy4r904Aj44RNsz/Sz","tlshash":"3704d9b676d0f8e107a780e5843b400af3291c37146f74a0a3e6dcd975645dea1b3faa","size":173891,"data":"","first_seen":"2026-05-10T13:09:49.334066Z","last_seen":"2026-06-02T09:16:15.054324Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"48aee6a15db79ea057d4e341c6ed5d91","sha1":"8e753d144d760caea03cf3f4ae7bfa7cff833f24","sha256":"514be39206a8c450e93957489b3dcbdcc3a8ced46c4dbaccb6191fdda399c535","sha512":"caa4394bf7f3414770c005c191d01fd062bc39a75eabb6480d40c463d888f963e7916405ef7fb9e80df5e03dd2c5ba31b8012b40c1581ba30d8ccca4b043a8ed","ssdeep":"","tlshash":"b2d04c88211b4c7156a72a454f6fb604b056621294919b217d1e63485f21e17d754854","size":224,"data":"","first_seen":"2026-01-10T14:02:29.698224Z","last_seen":"2026-06-02T09:16:15.075702Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4468343f321e5e7a30d832842c31337a","sha1":"b10ca297703dcdd9d5fbca8f186fd44e9ddd4921","sha256":"6d81ffcb7a21cfd0eae40368a42867a57741e3c3232efef5993f529e96ef7aa6","sha512":"f0873ae4faac24d05fcb7aa73d434cbf9601115b42d98b6f1c99f1cfeccfe63e46b63f48a8c666516b39fef10b5f7ce9086662835c87cbb906d456f0e2abb4fc","ssdeep":"384:JZA7qbhXvO2Ei6gInIhz9f/6XYXUOKRe1hzga0Wyq0z:Jrbh22HmA9H6XA3Dk","tlshash":"1072931ef304d225da872fa976ff6d76205981a5038200f87adcc61903669fcaaf75c2","size":16655,"data":"","first_seen":"2026-05-02T20:56:00.093639Z","last_seen":"2026-05-30T15:32:46.196608Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2bb024d47dae849c0d174b0792e5e3a","sha1":"3ba4bfe6ca2858ebba3478b989d4fdcde5ad58b6","sha256":"b8d720d04d7fec212539ff8a0bd3208b516bb7b8327e3012f4a3d393803bd0f6","sha512":"a528af0b55b5519b7c4af262ef75e77d21a67b11ecff2aac547a06e2da356a34473a8b87fb0c4ef145a5ae94cf1c8d7f42dfc26cbc4201fcdeafab883abe10bc","ssdeep":"","tlshash":"ce9002b881489c2d697378531c352c02019c880a00451e5453d4ea44271557ab605d4b","size":55,"data":"","first_seen":"2026-04-21T17:21:25.957951Z","last_seen":"2026-06-02T09:16:15.078833Z","times_seen":32,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f394114ccecc28123e59db083e45eabe","sha1":"2e073350ad4ebdcd76b90aa6bb3d7500ee0cd417","sha256":"3983c53d5681b8daec74548a18075307b9c9872bd6e0b34c28a4473e734ff4e2","sha512":"581210f266d3dd8a29d9ee3d4493919e85bbd3a5adba80733bfc1fccffe73fb41abf4f2e8fc5cf22b8bb7550d837b15afc93b7fc7b0f3f469c3cf5b47495a28b","ssdeep":"","tlshash":"2531133d3008d94ffdae781d127e6d3650d9457b07e49a7c9bc8df0148820bd6ba6d81","size":1579,"data":"","first_seen":"2025-10-21T01:43:24.748432Z","last_seen":"2026-06-02T10:58:02.761486Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/app/tflcpnlogr/page-9bd365f315c7892e.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5cc0c290f9d11d12055b607c7610019d","sha1":"193f2672b5fb6d9f33b89e5a38afabb89876933e","sha256":"7d208767f6d008b94e11ab63cd46141c70b37d3c20cb610ebbfe06fcaac7d9d6","sha512":"4f19a394d87fd35a76c4df0b691c953c624486b9ffabcff858ed3429e9f8544bbd88347c55bb6423ae6e12278d080f10b104f405740fc0b68e4eee185b857770","ssdeep":"192:8R3XW6j0gkTIpyR1tvy/k+Ikrw7GWvwnT/ipFyOt/MoLry5wi6:M3XTj0zIpyPtvy/k+IkMtAjinVNByGx","tlshash":"4a422213e164f7d878ab06d8606bc89d232bb114e38619f4bdf5242c17494f93a27bce","size":12500,"data":"","first_seen":"2026-05-25T10:13:56.678042Z","last_seen":"2026-05-25T10:16:21.997359Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f5bb5a1f1a5f583d4ed171557c6d965","sha1":"3dbf080e9907429ad49c59451625ddbcbcad657b","sha256":"7e1e4d9edffcb343ef7b1c4c9b38848cb2d47c32f93cd7487e3c13c53cd17e61","sha512":"95a1b897d7be041663d13b575f2ea848cc84f87b539cc6ad7832f05ccf5b3e95de0f28b8e11cbe7dc4e0b6bb64291a9b22f92df66e8e306a0645eda118e701f1","ssdeep":"","tlshash":"64f0a370ac41ce0ada2a7ea5147efd3434cd546f4141d9d789c0cd1e0901a763e71dc0","size":466,"data":"","first_seen":"2026-05-10T13:09:49.357799Z","last_seen":"2026-06-02T09:16:15.084949Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","size":173024,"data":"","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-06-06T14:54:50.255535Z","times_seen":778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"tw-sites.org/_next/static/css/235a3e84c9a20155.css","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:30.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/css/235a3e84c9a20155.css HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tw-sites.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZjrQ2SqNXG%2F61KGTKirpyp%2BJJ73PbIx2pLuS%2B3cwfef6JAKWRZzvKKf%2BxmSzBZzJq%2B9xrV%2Fd8%2F4Nyr6hW3mMizD%2FcKiBFNB3WSy3lLdPZZ1l0Afnfx9yN9ngzDzrzgQ%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a0dafa0-2594\"\r\ncf-ray: a013c4942927b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9620,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (9620), with no line terminators","md5":"f3d0f3dd9b7bad70761ee605e8ddbd42","sha1":"36a28beabcd39ebf2552d2f4e589923b785d706b","sha256":"b6984f59f156595927ba4df59b88a6825015f68d0e7b638e337796662c06a672","sha512":"4fe9c699524283bb1b21d24b7d5eb7d0248f7830b2452e04341495d273587ad0486daf2fe64669dd0b7cb41328f82a5dfad450f72d16894732049d2f9699e4f6","ssdeep":"192:DYU0luIwtF805yuHBUTxXp+0y7+FItGXHZUHWPhakwnPTmliJ0jUhktMGa2Tn:DY1oNy6aTpyqytGXHZUHlkwPhmQhk7a0","tlshash":"f212416d7971e92cf06fdc98b8959d897c609023b20313d8d9b27c6a8ed72d6037260f","first_seen":"2026-05-25T10:13:56.669935Z","last_seen":"2026-05-25T10:16:22.000317Z","times_seen":2,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/main-app-02c6478efae7f71e.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:30.925Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/chunks/main-app-02c6478efae7f71e.js HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tw-sites.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ag7zHEmZtX9J87G6BKQnMqea5dd5NlmdB8rxaRX34xVLNUqJiUCCHcgbGfr6jLCgp29Gm8pFIVwuSiJMwLwQlyasb1pRMAUJGwXBkq6NZ90QPV84A2%2BlZoShOMOjXdY%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a0dafa0-239\"\r\ncf-ray: a013c494392cb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":569,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (569), with no line terminators","md5":"34c07692b676645986108b36cf63131f","sha1":"deeb160ca0507dc1b8d3fdd4557df0db0f8a7eec","sha256":"00fe99d3cece100d600e26e162bb51a6607e3527c78b47cd639a22acaa35b8ff","sha512":"3262856f7a6bb41a5da66a0a93f62c67f37f4cade25b92929203c1a5297be550fa25b29b24bf21f725570f3bcd6c1b55897557d26fa740ff443f94d58ace5581","ssdeep":"","tlshash":"b3f0fb5a4f0cf92f5d26ad64fe97ace2245f8175202b4e706901deb13c23b6dd270414","first_seen":"2026-05-25T10:13:56.670897Z","last_seen":"2026-05-25T10:16:21.995988Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/media/70355d4fbd533ab2-s.p.woff2","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:31.164Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/media/70355d4fbd533ab2-s.p.woff2 HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://tw-sites.org/_next/static/css/385d1cca048e3fce.css\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20144\r\npriority: u=4,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\netag: \"6a0dafa0-4eb0\"\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q0XuzYZmbz32gKlmzdOl0DylANVKoB0XTh%2FPSfPkXaoewa%2Fg9k%2Byy8UYzBsrhB3l1cWWfpZyVBS3s4FA%2B3nvCXS2N0mQvSQ1s6PlFF5YDgjp1ha%2BJx2MWeulPPq3pfU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a013c495c977b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20144, version 1.0","md5":"9b9969b222383443533022faa1a8dc15","sha1":"960bfc7f598d95e5e1f183f66f0b9570c59be7f5","sha256":"fd4c8e65080adbaf0cc819eb67b08ed9300e9274dd0069b382d286b93b9544a0","sha512":"dca295932532388d01fc0130671252a3bf707bd9a2e5608d69b2ad0ee9134a9349e2c45734ca8bc223ea4090e918420166c6944395852a108ef7d25a360fd2f0","ssdeep":"384:bDDIoOYd5DFolWnW7Hy2ljK3VB87feqOMtmna2213/p:bwYdFFolz7HyMjK/87vOaPvp","tlshash":"4c92e067de6d3916fcd415f04619ec1ea1b12f617c2206fb0cc8c946906da8d6aaed88","first_seen":"2025-11-23T10:03:25.17893Z","last_seen":"2026-06-05T11:07:43.118136Z","times_seen":130,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/icons/logo-two.png","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:31.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /icons/logo-two.png HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4159\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 10 Mar 2026 11:51:28 GMT\r\netag: W/\"103f-19cd7967600\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fQ%2Bdo%2Bv2BD6jB4tboo373f6t7q7oklFYaz3re%2BrPkNV9gWWHVnKyBK85GQ8k%2FTLihG8gHPk5d266iLOkk9lZNOS%2Fgh2NnhIw1DFusvPR6LifPA8GCsIy0L8ottT9zRk%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a013c497e9e6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 81, 8-bit/color RGBA, non-interlaced","md5":"58fd2a12f571cafad976ed5feddeeacc","sha1":"c7c0342c9edb1d20d96f26c0d713b83c4124b144","sha256":"98e40eaf5f022cb4f4e94991a6fbcc95a11f93545c1354237b2f40cca4d9405b","sha512":"399b57f3f371f14c98a8a1600ba028f721739d76511e2c1476aefb46f212cf58dd9e9142eb0f77e160644a9fec03d32405459658345912457fc19304aad69a70","ssdeep":"96:taIF26hHzU/RmovWsHQOJ9SNnGFHUikhpeuaeJNGYXRfCK0uG7SPR:n1zMhWsHQs9StwHLQJdRJ0XWJ","tlshash":"54817db5f830ccc0cc2d6c61d1ad6d8c103613454dc6b879ef96e9b3a2645d3145cbda","first_seen":"2026-04-13T07:55:48.870403Z","last_seen":"2026-06-02T09:16:15.059902Z","times_seen":63,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/css/385d1cca048e3fce.css","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:30.915Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/css/385d1cca048e3fce.css HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tw-sites.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: text/css\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Er1iaekSA6GFd0Zgi70U%2Bs8W24MySPq8WZJdQjNmtIMt6FAqKqv%2Bw1utseQdsKMj2zKmkbu9IeYQGwx0PqwG6Rx8GwWfV3LsJJGyCU5fJ%2F4XmXTcje5qHeUoXtoxfeg%3D\"}]}\r\npriority: u=2,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a0dafa0-2068\"\r\ncf-ray: a013c4942926b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8296,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8296), with no line terminators","md5":"a73097b533d338ab4c29630e1a60f215","sha1":"dcdaf3127f95504381b77d704a62ca7a4c91b34f","sha256":"a152a893fbaa11ce3a1cf6e625402d9b852515ebd2f1731e27d152694c9ca588","sha512":"6667bb1ec9ec33000a3aa7851486c58cac2bc2db317d366885e862ea9e972fd59db9ef175dd0455c2a38cd599ac6c3baf367fff07c8739bc97008d16a2c84539","ssdeep":"192:IWxYYgWxmY3WxcYGWx2Y4IWxou+BlYfE6:FBtvQ1b/4Fou+BmfE6","tlshash":"7902be34c42e848ed932fc9231cd3f13283c141595e55e16efad99a98edb827b3e1b58","first_seen":"2026-04-07T15:06:50.299958Z","last_seen":"2026-06-02T09:16:15.060704Z","times_seen":68,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/493-fb9a011a516e74e4.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:30.923Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/chunks/493-fb9a011a516e74e4.js HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tw-sites.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4kTYYTmKxolaHX9AkWjFqRFEkeMUiN9RrV%2FUdx3Lf1gn6eO%2BirPW5I730uWop7%2FOwcYoDPa1Q9svAu%2BRiEY2wTIg3sIld1%2BdO3BcOQQYoNUL3%2F1dNA3Bw7vkhJE6IVg%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a0dafa0-2a743\"\r\ncf-ray: a013c494292bb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173891,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"96e61fc91791d3c8d1344c7991f1c16c","sha1":"e244327ffe3f6566c8d78bb27458c03d3a074491","sha256":"696cb8fbb0a02f04c5f60bc95674e4a7a92dc0bfef9d1c290b475dd7beb1187a","sha512":"75fd78549fbf2a0998529b019c025e43b06c72347558202f575c2dea10289b27eaa55c2ee998c5e940c7caeaa8026c99b894165a3319725e8a810b4c1e97fec3","ssdeep":"1536:0zigN+KcB/cO5HYHqLVcXl7yIzPr6Q04ToTlTx1p7eChTtaocZXxreXRNwrky/Sz:u7MtmA+Vy4r904Aj44RNsz/Sz","tlshash":"3704d9b676d0f8e107a780e5843b400af3291c37146f74a0a3e6dcd975645dea1b3faa","first_seen":"2026-05-10T13:09:49.334066Z","last_seen":"2026-06-02T09:16:15.054324Z","times_seen":29,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":112,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=test","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:30.928Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Thu, 07 May 2026 15:51:26 GMT","end":"Thu, 30 Jul 2026 15:51:25 GMT"},"fingerprint":{"sha1":"E5:3F:1D:8A:67:60:A8:60:56:38:E4:E3:ED:A6:64:D9:7C:89:E1:E1","sha256":"39:E2:E8:B9:46:82:06:98:FA:92:0A:A2:4F:57:DF:DF:EF:00:44:4A:27:C0:C4:99:EC:A5:E3:D4:1A:A8:A5:D4"}}},"request":{"raw":"GET /gtag/js?id=test HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://tw-sites.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\nexpires: Mon, 25 May 2026 10:13:31 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Mon, 25 May 2026 09:00:00 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 85630\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":233956,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4707)","md5":"3e2358d549a0152736c51e4e340e6009","sha1":"e291c17d1a55398cf8e7464c2f285a8045387030","sha256":"1379002441c6d030fde0c03d5738f3c308b5557708f76a7538994826bda43926","sha512":"3dfeaea97aaa86bdff05d3e00f3537f971f4b00faa36f57d3727d8eca17ce77279ca572738d05c0beebcd1d2ade9e0755ba19c8e31c136ea49c9beb0486ba26d","ssdeep":"3072:Wpq7tUGgbty0Qu5KoUA0mlCxw9bIayIi0MxK+1YILh3Of6E:jQ5OAF0mlkayIiLxb1YILhe/","tlshash":"ed3429ccb79a706653a3b5b8903f014bb23a79a2f84cd894f182d8d42d74a594273f7d","first_seen":"2026-05-25T10:13:56.674352Z","last_seen":"2026-05-26T01:06:27.130771Z","times_seen":3,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":84,"dns":0,"connect":25,"send":0,"wait":36,"receive":47,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/icons/logo-two.png","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:31.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /icons/logo-two.png HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 4159\r\npriority: u=6,i=?0\r\naccept-ranges: bytes\r\ncache-control: public, max-age=14400\r\nlast-modified: Tue, 10 Mar 2026 11:51:28 GMT\r\netag: W/\"103f-19cd7967600\"\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rv%2FkDwUt8X3O4u5QQ8%2Bo6OxESoHq74kx9yPPfgalAV3nRfFqV8MftqUcqE%2BqZ5x2OgjfUJ19tJY5Nl16%2Fe4d5jE5RujaKpbf8tammmted2udMhzleohaHqtbHBm8ii0%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a013c497e9e7b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4159,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 71 x 81, 8-bit/color RGBA, non-interlaced","md5":"58fd2a12f571cafad976ed5feddeeacc","sha1":"c7c0342c9edb1d20d96f26c0d713b83c4124b144","sha256":"98e40eaf5f022cb4f4e94991a6fbcc95a11f93545c1354237b2f40cca4d9405b","sha512":"399b57f3f371f14c98a8a1600ba028f721739d76511e2c1476aefb46f212cf58dd9e9142eb0f77e160644a9fec03d32405459658345912457fc19304aad69a70","ssdeep":"96:taIF26hHzU/RmovWsHQOJ9SNnGFHUikhpeuaeJNGYXRfCK0uG7SPR:n1zMhWsHQs9StwHLQJdRJ0XWJ","tlshash":"54817db5f830ccc0cc2d6c61d1ad6d8c103613454dc6b879ef96e9b3a2645d3145cbda","first_seen":"2026-04-13T07:55:48.870403Z","last_seen":"2026-06-02T09:16:15.059902Z","times_seen":63,"resource_available":false,"data":null}},"time_used":190,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/webpack-d7c35e9d7a94b6db.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:30.919Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/chunks/webpack-d7c35e9d7a94b6db.js HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tw-sites.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MqyDETU%2Bq2Ba6AZaakb%2FmBmTWjt%2FqVDlE7IDCUePtZEN7SvBFcZqVyLh6NGEBBeHK3VLEpErELS%2BmI88XvEY7HtT5XwlOmupDk0A61b7qI4kfTLE4KnyZtleE5fOhSI%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a0dafa0-e9c\"\r\ncf-ray: a013c4942928b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3740,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3740), with no line terminators","md5":"691edc0832a1690ce466ee180af5a33b","sha1":"321a3d629f530f6fcb85f5b8e832eda30e33e12e","sha256":"79cf145bf353cdcdfd251f011f9461f985f018486fe425b1279a8ac50e1dd94f","sha512":"28f5fae30075f250e76d2ebe18599faaacf5a19ef33a1ed3faeae24ebb33573573ac95a9a11c77698b3ca8e7077d444df0e3ddf7fe3477ed869cc31db3c0bd5b","ssdeep":"","tlshash":"f771d6a53661fab166f044c65c7ed582f229313b112fecf0a707d8b9a424ad10562ff3","first_seen":"2026-05-25T10:13:56.675222Z","last_seen":"2026-05-25T10:16:22.000964Z","times_seen":2,"resource_available":true,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/media/07a25e30db343ec8-s.p.woff2","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:31.259Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/media/07a25e30db343ec8-s.p.woff2 HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 13792\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\netag: \"6a0dafa0-35e0\"\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HkZ7BoG5kglivxJTSULMzEXhXqKHcPITRIlUk7tGCmacbfzQVznIGsJVLjH4TJFdPpI4xS9PxaABAHR1%2F0xdP1%2BXZtxSXcif7GygWquYpJooHP8R1lTkqbyv%2F7kghS8%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a013c496699eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13792,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 13792, version 1.0","md5":"4ae2d48436b3d6fcab18c9de2f7f8fc3","sha1":"108fe3712707923941996546a4ba325a3f4f96bc","sha256":"c54a0fc890f9cbaf295a1bbcf745351b099182bf87b149cf6eeec856f46750bf","sha512":"9f3dff01a9823f0fdcef0eebc2b6a0d25ce20b534a577a02c411934c6425dd22c1c32861ae3f741ec6e04b7022d15bd0cdda89be07413361d9d9c0eea5a01079","ssdeep":"384:nMSLVRCzUjz7V5hHOhqjzXCmNZMHI9lJG/dS2:MSLVRCAcqvCwvG/dS2","tlshash":"1e52c0bc9e7d6d1b705f13f66e6f7675e582b92700076c4ab0514cbc2144b23b2e846e","first_seen":"2025-11-23T10:03:25.189462Z","last_seen":"2026-06-05T11:07:43.127049Z","times_seen":92,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-25T10:13:29.979Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 25 May 2026 10:13:30 GMT\r\ncontent-type: text/html; charset=utf-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: no-store\r\nx-frame-options: SAMEORIGIN, SAMEORIGIN\r\nx-content-type-options: nosniff, nosniff\r\nreferrer-policy: no-referrer-when-downgrade, no-referrer-when-downgrade\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QsIhmiMdFtQ1SwAuBYBYVLw80Hbpxmtv2PW34D29pfaEsXCWhwyBFScYNJz%2BlPuFw6bx2EKwN0eF5KrE85jB07h9BvQpmayeL4APwvYYrXtz6pMKyIf%2Bse3hZdC%2FPxY%3D\"}]}\r\nstrict-transport-security: max-age=15552000\r\ncf-cache-status: DYNAMIC\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: a013c48f2c1a5685-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33221,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (33138), with no line terminators","md5":"f482ac0a8913a45b372aeb028f581958","sha1":"bfc0fc9af3d98a69fc74b3f61f1f1a658573ff52","sha256":"b65bee9d89bfb04703063048598247c150c1a28c017ab495049bfb074d017d63","sha512":"494b073e099150e0506850301bcfb2b8554ffcf1cdb2fac3ba78d401818c60fcfc8058229f6ffbb54e7444b622b907dc364e70aa21b34fed0a53b402044cf5cb","ssdeep":"768:fvdOQVukxxVv7EfRCgGrbh22HmA9H6XA3Dj6tq:xu6PwfcnrmA9aXQB","tlshash":"6be2f81bf600d62ad9571ea931bfaeb6219ac065834244f4b7dcc60c0396dfd66f38c6","first_seen":"2026-05-25T10:13:56.676737Z","last_seen":"2026-05-25T10:16:21.999179Z","times_seen":2,"resource_available":true,"data":null}},"time_used":622,"timings":{"blocked":126,"dns":10,"connect":3,"send":0,"wait":378,"receive":0,"ssl":99},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/4bd1b696-409494caf8c83275.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:30.921Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/chunks/4bd1b696-409494caf8c83275.js HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tw-sites.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EXBn%2BMx%2Fp%2FH5UChkLN8ZTO8HMej7gYxn5xQymkGYB2gPgSSXgHZ85zWMsbEEaW4WkL92TUwRxSmWWPoSuozebl1wOvyG7biaa1uAncTtlYqIqrvh6KpsXDznBWT1mCs%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a0dafa0-2a3e0\"\r\ncf-ray: a013c494292ab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":173024,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"bc071e9c777357d51dff977fb1a134fc","sha1":"9fa232d68efce3b2b2c3352511e475ddc64e4bb4","sha256":"d7fd4b1b9d7f818cc97ddd7b672944e523f23d36a2963d5769caf809141fb9e6","sha512":"69cc9135f9e2a7eef21803fc95efd56348b6de5fafad94fdc2c83d8f6d5e5af8aede3facbdb712a4e26aedc9d87d78c59f01464923f17f5c4ff64480df365611","ssdeep":"1536:XWET9Lwegcl2MywYleojBFOQLfioEV7hNc7lFlgXGhJx4bzZc5zg5tgW/zAe6c0:19LwzMyh1vLEE7RgXOQ5SIA1","tlshash":"4ef3f8ec3999e611aeb342a700df28037378261b240d4d60a614fd9ea57845bb17bfde","first_seen":"2025-09-05T19:18:55.705611Z","last_seen":"2026-06-06T14:54:50.255535Z","times_seen":778,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/app/tflcpnlogr/page-9bd365f315c7892e.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:30.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/chunks/app/tflcpnlogr/page-9bd365f315c7892e.js HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tw-sites.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TMwZIcgISrUZSPB%2BTjDDBN%2F59g6oBDpwuAMLCsO4sjgGutH6%2B7JFBT0GH%2FmNEF1BYPdkgMWC7G8k%2B4m%2F6V5V0VrCsdRD%2BluwN6E0rNCERyF4oQNYOfDjXV3viDO7XVI%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a0dafa0-30d4\"\r\ncf-ray: a013c494392db28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12500,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12476), with no line terminators","md5":"5cc0c290f9d11d12055b607c7610019d","sha1":"193f2672b5fb6d9f33b89e5a38afabb89876933e","sha256":"7d208767f6d008b94e11ab63cd46141c70b37d3c20cb610ebbfe06fcaac7d9d6","sha512":"4f19a394d87fd35a76c4df0b691c953c624486b9ffabcff858ed3429e9f8544bbd88347c55bb6423ae6e12278d080f10b104f405740fc0b68e4eee185b857770","ssdeep":"192:8R3XW6j0gkTIpyR1tvy/k+Ikrw7GWvwnT/ipFyOt/MoLry5wi6:M3XTj0zIpyPtvy/k+IkMtAjinVNByGx","tlshash":"4a422213e164f7d878ab06d8606bc89d232bb114e38619f4bdf5242c17494f93a27bce","first_seen":"2026-05-25T10:13:56.678042Z","last_seen":"2026-05-25T10:16:21.997359Z","times_seen":2,"resource_available":true,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/chunks/app/layout-466dc44258ca199e.js","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:30.927Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/chunks/app/layout-466dc44258ca199e.js HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://tw-sites.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: application/javascript\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l5sjFuUufGjo7qBJQWVMM1KxzHxTcHt9ss74FGTDWwjLMdxM8G9eIibW%2BBB1f75LxC5QCGKfOZMiZdEONnpoV7lCMrKhhAvMibl695Y5ksH%2BDoa8wybNOmmAf8MeJ7s%3D\"}]}\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\ncontent-encoding: br\r\ncf-cache-status: MISS\r\netag: W/\"6a0dafa0-1cb6\"\r\ncf-ray: a013c494392eb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7350,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7350), with no line terminators","md5":"e9dcc0cd4bc00c4da2efe973b6b3aa40","sha1":"c707eef632bd98867688ff74ae2fa1c17672127c","sha256":"31f64872277964eec4a5edb5845bf1b9cb30c6eb192d1437301557aab290be93","sha512":"30c68e7a99a610f797be095451ad4e1282542de14f526072e044702274eae815043e8444263cde54e1cebe9f5f048cdae61415781e9a9d5baacbcbd8ba6fc285","ssdeep":"192:D39Dc5jz6noBDLpjD3dnz9I9eUja6rWkWVxCqD6:D3cj4SjKPIkWo","tlshash":"50e10bb23681fc3546a68480e837c6c2ba151d35241fb8d0f7bacce93664e88d5a1f69","first_seen":"2026-05-25T10:13:56.679056Z","last_seen":"2026-05-25T10:16:21.998054Z","times_seen":2,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"tw-sites.org/_next/static/media/70355d4fbd533ab2-s.p.woff2","fqdn":"tw-sites.org","domain":"tw-sites.org","tld":"org"},"ip":{"addr":"104.21.83.163","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://tw-sites.org/","date":"2026-05-25T10:13:31.261Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tw-sites.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 15 May 2026 15:43:18 GMT","end":"Thu, 13 Aug 2026 15:43:17 GMT"},"fingerprint":{"sha1":"A3:86:33:0F:EC:45:FF:AE:0E:AA:69:0E:08:CB:2F:02:C0:DA:5C:C8","sha256":"B9:16:B0:65:4C:45:39:47:7E:F5:EC:A6:C5:4A:8A:DD:61:71:AA:C6:F9:59:F1:4E:1D:95:4F:DB:C7:74:67:04"}}},"request":{"raw":"GET /_next/static/media/70355d4fbd533ab2-s.p.woff2 HTTP/1.1\r\nHost: tw-sites.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Mon, 25 May 2026 10:13:31 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 20144\r\npriority: u=3,i=?0\r\nlast-modified: Wed, 20 May 2026 12:57:04 GMT\r\netag: \"6a0dafa0-4eb0\"\r\nexpires: Tue, 25 May 2027 10:13:31 GMT\r\ncache-control: public, max-age=31536000, immutable\r\nx-robots-tag: noindex, nofollow, noarchive, nosnippet\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nreferrer-policy: no-referrer-when-downgrade\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VkzuGrOKNOMNILy9S2Z8CUL4qR%2FN%2F5FgLX0X38Ib1ZT7GQHPI6%2BdfNOHBzX0kuShyQleygxUv6%2B97YgPQ2GC%2FX4ZPw3yNvcm6TVbun0tydTzHXOZhtc%2Ftg1hwYjXf20%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a013c496699fb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20144,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 20144, version 1.0","md5":"9b9969b222383443533022faa1a8dc15","sha1":"960bfc7f598d95e5e1f183f66f0b9570c59be7f5","sha256":"fd4c8e65080adbaf0cc819eb67b08ed9300e9274dd0069b382d286b93b9544a0","sha512":"dca295932532388d01fc0130671252a3bf707bd9a2e5608d69b2ad0ee9134a9349e2c45734ca8bc223ea4090e918420166c6944395852a108ef7d25a360fd2f0","ssdeep":"384:bDDIoOYd5DFolWnW7Hy2ljK3VB87feqOMtmna2213/p:bwYdFFolz7HyMjK/87vOaPvp","tlshash":"4c92e067de6d3916fcd415f04619ec1ea1b12f617c2206fb0cc8c946906da8d6aaed88","first_seen":"2025-11-23T10:03:25.17893Z","last_seen":"2026-06-05T11:07:43.118136Z","times_seen":130,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-25","alert":"Sinkholed","trigger":"tw-sites.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}