{"report_id":"7a494d03-7175-4741-9e8f-335c44dc30b1","version":6,"status":"done","tags":[],"date":"2025-10-07T03:53:52Z","url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"title":"Get Your Rewards!"},"submit":{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-11T03:53:52Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-10-05T22:15:40.094389Z","alert_count":0,"request_count":1,"received_data":64219,"sent_data":449,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-10-05T22:12:07.524768Z","alert_count":0,"request_count":2,"received_data":98734,"sent_data":1126,"comment":"","tags":null,"fingerprints":null},{"fqdn":"srv001.cfd","ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-02","domain_rank":0,"first_seen":"2025-10-06T13:16:52.629593Z","last_seen":"2025-10-06T13:16:52.629593Z","alert_count":9,"request_count":10,"received_data":9365,"sent_data":5456,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-10-05T22:12:06.373682Z","alert_count":0,"request_count":1,"received_data":8267,"sent_data":478,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"geolocation-db.com","ip":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"domain_registered":"2019-10-23","domain_rank":55872,"first_seen":"2019-10-31T01:19:14Z","last_seen":"2025-10-06T17:48:28.440318Z","alert_count":0,"request_count":1,"received_data":360,"sent_data":457,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.14.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"topg-a4c0zduu.pages.dev","ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-09-02","domain_rank":0,"first_seen":"2025-10-07T03:53:52.717804Z","last_seen":"2025-10-07T03:53:52.717804Z","alert_count":0,"request_count":11,"received_data":129657,"sent_data":4988,"comment":"","tags":null,"fingerprints":[{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/bot-check.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9b4b5db2ceb7d1ec00377fd709cc40a3","sha1":"65e2de2fd42c40a72d8e8562d87d8fe12948a6cb","sha256":"dab72c257e1023bbee39c0e3a43c7f0af98c98b0bceb6e009bd2d209ebe1f9c7","sha512":"922ff5850b67730ddb07164cea4068f74805f8fcd5b35027c6ed729b10d508ff6cd23ccc80959a3b1f02ed6113f50d83a93139e814d3b4ce6734017422421114","ssdeep":"96:F9lQb5QlCplvcyAk61DXWb7J0SHnjSaJNY:i1ppchlZWb7HH2oNY","tlshash":"f5a1c62934f73232261350a7d36fb1023223a417271fec58b65e43085f45f5aa9336db","size":4922,"data":"","first_seen":"2025-10-06T13:16:57.666896Z","last_seen":"2025-10-11T17:26:50.737864Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/referral.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14e906831358dc529e7db1670e68475a","sha1":"40ec0c58541138cec6e04f440313a1e68e835ce9","sha256":"ee470eee844d62715733abf5a57e2287270c72bdbdd9366309ffa480d088d581","sha512":"3621c7066f36c012c03a220301477cbeaec9d81f732be3ad487c4acc56b97098ef11f2e6bef3d707ce59495f3b51f0271f734bacc660e0ce058d6e2045988071","ssdeep":"","tlshash":"4f510058a4f718314567a03a227f922923bd404f76b5d829b91d8b5c1f8df28cb72bcd","size":2884,"data":"","first_seen":"2025-10-06T13:16:57.673804Z","last_seen":"2025-10-11T17:26:50.732745Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/config.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cb03e670af40469713ca9cf9136e3448","sha1":"f38de18ee8fe4e15dcc5a1c657e63f22d8e75c14","sha256":"ff4e34cef7e25d34037f53f4b0e7a916485d23b81728ce12f989d15f8c1f8396","sha512":"7fbfc102e4a0f55274e103f570133a4427cda1e957540d9c1d93698fd18d1fee3919ee9f537ed084344fe20ac3b0ba1e36fb9d54fb461ca35c9b26d91ce61f9a","ssdeep":"","tlshash":"7101cbc364f5306f66623e8484b71ee63f7a3768749e624a850f413d319ab93870702e","size":724,"data":"","first_seen":"2025-10-06T13:16:57.662238Z","last_seen":"2025-10-11T17:26:50.735055Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/main.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7efe96853576b9b649ee70753ac1976","sha1":"7504a7916a979242d5b052f735be9f25c7a9e79a","sha256":"3b5e628a31b0289beb382a17ec516076f880d8ce0f2a93b8f7eea7e7458f2cf0","sha512":"cd5f60c6d3a6fec9df84a2ad538caf34c1aadb9f3362088d828dd6e3f215fba229bb996b39d07c2a0038714cecb53abcac29183870538dc32e8dfcaad2761bae","ssdeep":"384:LKz/4ksYws4N5O12IbqRQ8eyg2bDxcQZKnb0G8AV7Q:LKz/49YrsabSQ8SWFbZ/x","tlshash":"5fe2c81972f715324a6391bba75fa1463332400b7645de9c3abe43540f82f20a9e7af6","size":32652,"data":"","first_seen":"2025-10-06T13:16:57.668173Z","last_seen":"2025-10-11T17:26:50.740424Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/fingerprinting.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a7228f294ece7893349988bcc60c79e6","sha1":"15f522def0f8236014bd21adff13e0242684790e","sha256":"7bd2463b54a3463a84fea54bd5719b2e0b3471b39e7c40250dcbabc7cb3f640d","sha512":"fe6165f78581282e58d9ed9960fed0ea30732b0b23b14fe9e4041b702cece28ec21017456e33c8c08226d41afbc96069d3d656315747ed3a8b6a024efbb3df84","ssdeep":"192:lPfGQGSXjAGPm/tTHwyj47wD4hrGIekUR/lmQhrPVZSy/1UyGIW/TRXiQTJAvQR:lPO+6ygRlhZGNV","tlshash":"d042b74d21b71816105f337ba74f51007632911b3de8fda8794e97042f86a3a94bafdd","size":12710,"data":"","first_seen":"2025-10-06T13:16:57.672703Z","last_seen":"2025-10-07T03:53:55.457534Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","size":63432,"data":"","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-08-04T09:34:08.992065Z","times_seen":459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/api-helper.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bffb5dc58b633de51fcec26241bccf33","sha1":"3fbe40b1db6a70d0c92621b37dfb0ac4ee9c812c","sha256":"115ef180a81c285a7d7cf9959b038a806e99985a33224cf526d3e2784328b616","sha512":"1a406b10048e1de741a66dd4fe56ca9cc414ef0193df474ba6c7d95cdcab9c481047437bb11054dba9e456efa91fe0f4a6b75f5dda7d1499f3cc9222d2639128","ssdeep":"","tlshash":"10119099f2cb205d47aa02d4626f9250660a8f27a5c26a06b1ee42483f6611bff75cc5","size":903,"data":"","first_seen":"2025-10-06T13:16:57.663421Z","last_seen":"2025-10-11T17:26:50.731607Z","times_seen":12,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/encryption.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eec04246ba2a33332e9b7d775aba5de5","sha1":"e66e32a75d591bd33aaca23e1f337e498472b131","sha256":"6b7d872f3266e94880420708695d5ee7d647e2717af9699412e02ee4160328f0","sha512":"27c30f1b83044b7d8dd4caf84bf316a66b9daa812597b3e2d1c150670946aad3282811536fa62229a93f292ee3da065f6a0925b7550c29b2cf043b4d01697f19","ssdeep":"96:UwvVsGv6C0oRaj9jarNxiuGA3ywxdAPgMyai3vap9e:UisSDajarNYOEPDyasap9e","tlshash":"dfb142593cf6362246a3a0f20b37e1116237f61b3715ce91fa4d87843f096689b62bd5","size":5371,"data":"","first_seen":"2025-10-06T13:16:57.665714Z","last_seen":"2025-10-07T03:53:55.456355Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-07T03:53:31.238Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hkv7xU1OEw%2B1miqCMBgN%2BJlanfAIWh2tyM3%2Fi%2FVr1fV4rHlRXaqNxhDwC7ZrYnU63XZYec09eh%2FJAjj4ErlocEODLVW7fUNA%2B03VbOx7R0DIYuL4jw%3D%3D\"}]}\r\netag: W/\"8d7fda1c27dab6f68be242b37d8c9a09\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98aa73b24b6056ba-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"crypto-js","description":"crypto-js is a JavaScript library of crypto standards.","website":"https://github.com/brix/crypto-js","common_platform_enumeration":"","icon":"default.svg","categories":["JavaScript libraries"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]}],"data":{"size":2492,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (442)","md5":"b1327fbd460558b77f16c396f8b7e9e6","sha1":"6d46259f77c958122badba009adfac0bae989b43","sha256":"beda0a35d3a8263ffa4ecf695524e85205f1cad54d3c35941d4c63bb80f7fd7c","sha512":"655f7c8e6d8a61fc5a8bf3e002a25841cfccd9fe404dd1d77cc83ed1eaafa60b98a956134478c0380da3ab4f1127f99cb8af0c496eaf0c3c5b142a56a60a9a2e","ssdeep":"","tlshash":"8c51a81ecef8c0bb0041968525b1f72e3e96854ba780d9683dfd08656f46ecccc13e68","first_seen":"2025-10-06T13:16:57.65857Z","last_seen":"2025-10-07T03:53:55.445496Z","times_seen":2,"resource_available":false,"data":null}},"time_used":82,"timings":{"blocked":11,"dns":1,"connect":1,"send":0,"wait":59,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/css/styles.css","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /css/styles.css HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u3yYaha8IlVeS1xCwKKE3fbOMXifupwXyKC%2FBit%2BVKqKkTmrbUIyU%2FlHhZ4s%2FZC1cEbZrlXSr%2BSqYxXGwezorttlGoI3B7rPu0j5IH1Dp4YWw%2Ff4X0YW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"04451ff56250c550ed2b2439071c05f2\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98aa73b3690f23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8544,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0bfc87f890f96152a22870602815ce3e","sha1":"c8b5632840e9c62587eb123e13ff8623549f6eb0","sha256":"20ee1aa7fb93112f5a81b10cf39b0db81199ad287acf47167e0564cbe552ae31","sha512":"4fdc8671891acf9b75f7198ffa0aa2c804d601361b1de0bf13ee2c39944ed1aae96cdd9d72d6636db5390b2df805b88d4e7b9b91228dd4c0b0362919e54c3aa5","ssdeep":"192:ZUBfXgYKmsvH/uKzlC9zdWYWiWvWW3+roIu8P2dxfR5We8COi3vsKIY1HQI1B4KV:hCmvh+WExk","tlshash":"940224852f631404a90b82686ffb9769122cd483981bce7dbbcd764dcf0516872a2f9d","first_seen":"2025-10-06T13:16:57.661034Z","last_seen":"2025-10-11T17:26:50.73661Z","times_seen":12,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/config.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /js/config.js HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5a%2F6z4qnlcpf%2BuqVLTwcCBc50B%2FzlXo%2F9%2B16QywtVTE6L26WimIDcDE4PTyHa%2BP8JWuVwff6ES5BQiKL1fg%2FavRGDEZ3RKkhd088gfD9jr6cVcx34b%2FA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"5b215000ad82f665dfb86ba3b8854a2e\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98aa73b3691023eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":724,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"cb03e670af40469713ca9cf9136e3448","sha1":"f38de18ee8fe4e15dcc5a1c657e63f22d8e75c14","sha256":"ff4e34cef7e25d34037f53f4b0e7a916485d23b81728ce12f989d15f8c1f8396","sha512":"7fbfc102e4a0f55274e103f570133a4427cda1e957540d9c1d93698fd18d1fee3919ee9f537ed084344fe20ac3b0ba1e36fb9d54fb461ca35c9b26d91ce61f9a","ssdeep":"","tlshash":"7101cbc364f5306f66623e8484b71ee63f7a3768749e624a850f413d319ab93870702e","first_seen":"2025-10-06T13:16:57.662238Z","last_seen":"2025-10-11T17:26:50.735055Z","times_seen":12,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/crypto-js@4.2.0/crypto-js.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/crypto-js@4.2.0/crypto-js.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 4.2.0\r\nx-jsd-version-type: version\r\netag: W/\"f7c8-VYd8eOuFgAc+txxt92qPCllWUXc\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\nage: 424134\r\nx-served-by: cache-fra-eddf8230023-FRA, cache-osl6544-OSL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 23305\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":63432,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (31809)","md5":"bb060f78b05401c0002626a0181dc176","sha1":"55877c78eb8580073eb71c6df76a8f0a59565177","sha256":"40e6e5d2212a00ff614d787856aa7f1af1fa6aac274022929f2b7541397f1a41","sha512":"6200c9a40b1cf14f7e39629efa29f716e6c6592b2ea6a169aded33f26749b0bfaf2e8feffad895c2039214ced244ba7b43afd799d0ab7b8a4b40ebb14f84a6de","ssdeep":"768:rzVGxaNQhg3p7nRmBjXXNmin9M9OT81h79etCU8VzrtNASU9ArHM+3wi:rzVi8We7n8jXXwFd9Q9ePtNPU9ArHMli","tlshash":"32533ac0769c609153eb29c0487f344b707b353a1b099998f265f9efacac5da803dd7a","first_seen":"2025-04-10T00:28:33.110782Z","last_seen":"2026-08-04T09:34:08.992065Z","times_seen":459,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":6,"dns":0,"connect":1,"send":0,"wait":4,"receive":2,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/api-helper.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /js/api-helper.js HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dQzUKRWXM1oP0iJ3MHR7MNhHVT19tfuad0DFFkRPhPgxrtXfDS7FzOWsQbfmYXK%2F12U%2F643U%2FWgjIdDQ4Eq%2Beuc%2BT5q2bKj8uZ2NxkLhgAQ36kbEXvxz\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"054c27ee41b3be5681a837e516ad34b4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98aa73b3691123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":903,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"bffb5dc58b633de51fcec26241bccf33","sha1":"3fbe40b1db6a70d0c92621b37dfb0ac4ee9c812c","sha256":"115ef180a81c285a7d7cf9959b038a806e99985a33224cf526d3e2784328b616","sha512":"1a406b10048e1de741a66dd4fe56ca9cc414ef0193df474ba6c7d95cdcab9c481047437bb11054dba9e456efa91fe0f4a6b75f5dda7d1499f3cc9222d2639128","ssdeep":"","tlshash":"10119099f2cb205d47aa02d4626f9250660a8f27a5c26a06b1ee42483f6611bff75cc5","first_seen":"2025-10-06T13:16:57.663421Z","last_seen":"2025-10-11T17:26:50.731607Z","times_seen":12,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Sep 2025 23:35:58 GMT\r\nexpires: Wed, 30 Sep 2026 23:35:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 533853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-14T21:43:50.548679Z","times_seen":258948,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":64,"dns":0,"connect":8,"send":0,"wait":9,"receive":5,"ssl":54},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/auth/session","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.559Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"OPTIONS /api/auth/session HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization,X-Requested-With,x-forwarded-for,user-agent\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3IDRHSn7MJGT9UjIkXsar1QgKd9zoDSqGhd3z%2BggnFvY5%2FrmOqobpJrV%2F98%2FqI0zBw8y%2BuEKKMo4R4g6JV6vjGxANENhNjyE86Y%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98aa73b49bc44e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":57,"dns":33,"connect":2,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/tracking/fingerprint","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.685Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"POST /api/tracking/fingerprint HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 1168\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"3c-5TLW6rCyTTDgNxAK7iYmTN+Tr2A\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=06sFDuf36A%2FOXAxpP333TFix%2FPBmGWsmg8LyEkvFwWa%2Brinl0aUEL9C7R9Za5oBE6dv6cgs0rUrWskHwC3y8YPeAyRZsdXJpes8%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\nset-cookie: connect.sid=s%3AMCfVWKptlawmUc39-WNaYD8srclnj_N9.PuZQ8vmEAeZ2AiCo2RLRfs75h%2FT935cvnNEctCHMA30; HttpOnly; SameSite=None; Secure; Path=/; Expires=Tue, 14 Oct 2025 03:53:31 GMT\r\ncf-ray: 98aa73b4fbe11525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"78c972176db607a36d96a72e34cfb335","sha1":"e532d6eab0b24d30e037100aee26264cdf93af60","sha256":"c0f280ec1ae725ad31b1b3a9ea5c73f329064bd174388396b2f8c594b6f0d6fb","sha512":"2884e3ebbf17f4b9fc47cd017ee60ad00a1cbb9ec641ce066dbedb4432ce003091479b5d3eca42356f72d39a8baa1b26a0d13df79e2481472ca9d013fd3676c5","ssdeep":"","tlshash":"61a002c02c66ad949ab44a740411bd2224125916609547d87063510122ce4023109d5e","first_seen":"2025-10-07T03:53:55.45167Z","last_seen":"2025-10-07T03:53:55.45167Z","times_seen":1,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":16,"connect":2,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;500;600\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.138","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;500;600\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 07 Oct 2025 03:53:31 GMT\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7575ffd6532e96f3830de7bc9efc8544","sha1":"348ab893b08a4854b7715fcabf3843a26e15ed9e","sha256":"a10e7cf1445dc2d00971db17adcd20ec035a11211c982265f321e6658501b15b","sha512":"1fa9e882de10d071f440582aa2594802d406d9e2c484e1e6971e6b8ac3f02f81aedbe6e09689412296c7bf0d461bafbf223b09bd00227d84e6c003c23aa8adc6","ssdeep":"192:9NNIxO34OxDENOPCO3/Nx8NNryfO3iExlx:vXuM0pR","tlshash":"e0f17792002ba400ab971dc223cf7f3aaece50896085d1b95ffd0dc59ceed66436876d","first_seen":"2025-09-11T07:42:16.456799Z","last_seen":"2026-08-14T21:43:50.503886Z","times_seen":9322,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":61,"dns":1,"connect":10,"send":0,"wait":20,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/bot-check.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /js/bot-check.js HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: W/\"eda002a237b1f3892a36d3bb876c96ac\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=XWJhNf554whXhpmNUXsQAPngX740ANsH8Hn8wEUCkyaSNRfgAnQmdb6GODQN8FyKWF7OJ3guU4dxsjiJxTEGIU9L4rRfHwBwy7gNbkS29DqFShcG0%2BGMsxNvN%2Fno5fqjxGFQKPDmHpgjcQ%3D%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\ncf-ray: 98aa73b3691423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfL4;desc=\"?proto=QUIC\u0026rtt=2151\u0026min_rtt=1141\u0026rtt_var=900\u0026sent=55\u0026recv=19\u0026lost=0\u0026retrans=0\u0026sent_bytes=49502\u0026recv_bytes=3509\u0026delivery_rate=11388808\u0026cwnd=33600\u0026unsent_bytes=0\u0026cid=ad4d7ca40c984d4b\u0026ts=178\u0026x=1\", cfExtPri, cfHdrFlush;dur=0\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4922,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"9b4b5db2ceb7d1ec00377fd709cc40a3","sha1":"65e2de2fd42c40a72d8e8562d87d8fe12948a6cb","sha256":"dab72c257e1023bbee39c0e3a43c7f0af98c98b0bceb6e009bd2d209ebe1f9c7","sha512":"922ff5850b67730ddb07164cea4068f74805f8fcd5b35027c6ed729b10d508ff6cd23ccc80959a3b1f02ed6113f50d83a93139e814d3b4ce6734017422421114","ssdeep":"96:F9lQb5QlCplvcyAk61DXWb7J0SHnjSaJNY:i1ppchlZWb7HH2oNY","tlshash":"f5a1c62934f73232261350a7d36fb1023223a417271fec58b65e43085f45f5aa9336db","first_seen":"2025-10-06T13:16:57.666896Z","last_seen":"2025-10-11T17:26:50.737864Z","times_seen":12,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/bot/check","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.704Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"OPTIONS /api/bot/check HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: OPTIONS\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization,X-Requested-With,x-forwarded-for,user-agent\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gPsAJZAofnseD7Llz8mx3o5wfYyzyX0%2BLLXOnLjLxvxQ77j2jUNy72xJEhcMuZsTCJWVX6bNbPpdBqefxXrS%2BZNeh%2BF08vm61EE%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98aa73b52c2a4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":50,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/auth/user","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.711Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"OPTIONS /api/auth/user HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: GET\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization,X-Requested-With,x-forwarded-for,user-agent\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=21S5XahcceoMpb3gWCTnR6QELJDYHoCcsVErO6TovT9Pk%2F13F99rw4xnCPfmHpYjUyNIkyT4XzFqgqeYnlJB8awvpADO1FzJa%2Bc%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98aa73b53c364e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/bot/check","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.756Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"OPTIONS /api/bot/check HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization,X-Requested-With,x-forwarded-for,user-agent\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\nserver: cloudflare\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tIBYQM0kXuEZQBnaPtNOGEFp2DJu4KRL5YFcxm07llN1kNBSP8F97sbgLTqRYU7T7Y8vYXCBWX2GK%2B%2B690U2QCRPwEJDtaOzRs4%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98aa73b57828a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/auth/user","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.760Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"GET /api/auth/user HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nContent-Type: application/json\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3A-IUyFPWNbrA8y94r4OHgMkRpzSzU3a3n.QyGigmX2qlWyV5YNP%2B1%2FWgPGpozzF6t44perMQQzbcg\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m%2B798MsgdAihKlITJFvSHoH8SyJq6X5zXvrItKsKwpDJ%2BuZQJV3GBPsJl%2FtDrRM7br8TqjhjYO%2FspXEuF8l%2B94HkSKLUlpb0JvI%3D\"}]}\r\netag: W/\"50-ZKKhj+evyNnMubFO8jNWxsDSFwg\"\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98aa73b58829a41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":80,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"ae3a4e4d2bbe470e520a096c1bafd739","sha1":"64a2a18fe7afc8d9ccb9b14ef23356c6c0d21708","sha256":"352e0a6bdb317c99152aadd7fc6d1ff948926ebd7f68d99d3c87c58fefd47f41","sha512":"4b4bb71ed19850f8e52f37ac5e96f7181681587d709c07f74b7b5b9c6d8fecc3487b83e665abea87a6fcb02b7a05aaa7bf54a9a7944c8813d0594fb6b754ff45","ssdeep":"","tlshash":"6aa012057c0116d21a2712fb04e62991008643050051124ad0e2c8089181d440600c02","first_seen":"2025-10-07T03:53:55.454363Z","last_seen":"2025-10-11T17:26:50.739811Z","times_seen":11,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/bot/check","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.835Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"POST /api/bot/check HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nContent-Type: application/json\r\nx-forwarded-for: 82.148.169.64\r\nContent-Length: 316\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: connect.sid=s%3AMCfVWKptlawmUc39-WNaYD8srclnj_N9.PuZQ8vmEAeZ2AiCo2RLRfs75h%2FT935cvnNEctCHMA30\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 OK\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\ncontent-type: application/json; charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z50y%2FTRqJseplj3Q3AYpAYKo0AxJot3r3LBETAgnHXheoQiDkrmeitJX4LGIaoAxjTliUAbG%2BGOk64U8kdYR4cz9qPUf2js38x4%3D\"}]}\r\netag: W/\"68-Ar0H0uV+SN2UXw5RlJ0yWlmtIjA\"\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 98aa73b5f82aa41f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":104,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"0d73bfe73efdcca306b9a5d58f25bb2e","sha1":"02bd07d2e57e48dd945f0e51949d325a59ad2230","sha256":"52d3df7d2014a42fedc19c6c8d49c6f48a6e83046a05e51b1b1e4a7e187c92ad","sha512":"49962d2b7138511ef76334157686baddc74b7db4e5557e91d0033fe16295d1ade408ce840b1fc2f37895358c7b15821b8f25956f0d2db8b050818c9dace2d7b3","ssdeep":"","tlshash":"73b012c32f71e28f642504a05ff01469609a3679912c148f8b07e74c4d5d0c25017326","first_seen":"2025-10-07T03:53:55.455419Z","last_seen":"2025-10-11T17:26:50.741185Z","times_seen":11,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":128,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/encryption.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /js/encryption.js HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6eoQq11mZ3Sn3aJeEaHBMGkQ3cHwVnzwqUlGutJNPjyNpu0D9IBtw9Eef4ihq0lQ3jqg3krxoDE2olAGX2n0k2S4PoUlgFqXox8vykxqFVcCGqbZcEKe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"61aa310ba30acfb87f75634d1604cfb6\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98aa73b3691223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5371,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"eec04246ba2a33332e9b7d775aba5de5","sha1":"e66e32a75d591bd33aaca23e1f337e498472b131","sha256":"6b7d872f3266e94880420708695d5ee7d647e2717af9699412e02ee4160328f0","sha512":"27c30f1b83044b7d8dd4caf84bf316a66b9daa812597b3e2d1c150670946aad3282811536fa62229a93f292ee3da065f6a0925b7550c29b2cf043b4d01697f19","ssdeep":"96:UwvVsGv6C0oRaj9jarNxiuGA3ywxdAPgMyai3vap9e:UisSDajarNYOEPDyasap9e","tlshash":"dfb142593cf6362246a3a0f20b37e1116237f61b3715ce91fa4d87843f096689b62bd5","first_seen":"2025-10-06T13:16:57.665714Z","last_seen":"2025-10-07T03:53:55.456355Z","times_seen":2,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/fingerprinting.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /js/fingerprinting.js HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bPR5OtyTQ8DOnSx3lio96nTgrI7kZXvKcBv%2FVankYScpgmemjJ6ynFyYPRGhKqO1gLqYO5PsM%2BCi9pg5sCn%2BTDV2QJQf%2FYKL8bQStZXvAmR43mrmB2SH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"c3b3215b65e5b97777ba636b54612130\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98aa73b3691623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12710,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"a7228f294ece7893349988bcc60c79e6","sha1":"15f522def0f8236014bd21adff13e0242684790e","sha256":"7bd2463b54a3463a84fea54bd5719b2e0b3471b39e7c40250dcbabc7cb3f640d","sha512":"fe6165f78581282e58d9ed9960fed0ea30732b0b23b14fe9e4041b702cece28ec21017456e33c8c08226d41afbc96069d3d656315747ed3a8b6a024efbb3df84","ssdeep":"192:lPfGQGSXjAGPm/tTHwyj47wD4hrGIekUR/lmQhrPVZSy/1UyGIW/TRXiQTJAvQR:lPO+6ygRlhZGNV","tlshash":"d042b74d21b71816105f337ba74f51007632911b3de8fda8794e97042f86a3a94bafdd","first_seen":"2025-10-06T13:16:57.672703Z","last_seen":"2025-10-07T03:53:55.457534Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 30 Sep 2025 23:35:58 GMT\r\nexpires: Wed, 30 Sep 2026 23:35:58 GMT\r\ncache-control: public, max-age=31536000\r\nage: 533853\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-08-14T21:43:50.548679Z","times_seen":258948,"resource_available":false,"data":null}},"time_used":119,"timings":{"blocked":50,"dns":0,"connect":8,"send":0,"wait":10,"receive":10,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/tracking/fingerprint","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.577Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"OPTIONS /api/tracking/fingerprint HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization,X-Requested-With,x-forwarded-for,user-agent\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5qF3OFgyR04i%2BqMxenYV7Tqi8iWtsMnFC73oisXqfmQ%2BOIw4rkNo8O4rO7ZEy11oT3oOs5eNr014zXrRGl4Lrsk5puxzLy9kKKk%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncf-ray: 98aa73b49bc24e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":131,"timings":{"blocked":39,"dns":15,"connect":1,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/assets/logo.png","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: deviceId=ebf3123630b16d94b4291c2a165dd9dda6618b37b22334c04277f4d2a362a83b\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 24840\r\npriority: u=6,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"46481b3a746c5f32f468ee058a70230e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBLPM1tH0S1rSnn%2BlzYE851K5awrDtOPoJk5eadZQ4UbAlcHNxssp9NjvgDHA7VmqetwVdDAzQp4Ap1g02A373TdK8ivpRRyzlvpudplIYj2WNjI9XPt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98aa73b65bff23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"bb2fe0261e66c2677c10f0b00f2b988e","sha1":"3b26afbbdb37dd8d6d80ef072c64f6bb1cb62f6e","sha256":"eca38fd0c5667c9a54331c29c89bc90b98727e97dd2c643481c7e687bc51600d","sha512":"8ebb1b809c5c413e904a3d28c69cad230a65d1f0573ca3303576e345ef6d5863cd5d269882dad600cae971855f0d223467d8040b1a356aaeecbeddc112226214","ssdeep":"768:IhSv2x/2DoUaft0kjL2X4rJ/ef5QmkP0HWE:IhSv+8qft0kc2tgFkPY","tlshash":"4cb2d0855f7740708d7c7c34046b9cd4ea982e6965d7ea90a4a74ce4332e9bf884c0fe","first_seen":"2024-12-23T10:13:13.89589Z","last_seen":"2026-05-09T21:37:11.96547Z","times_seen":24,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/assets/logo.png","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /assets/logo.png HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: image/png\r\ncontent-length: 24840\r\npriority: u=4,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"46481b3a746c5f32f468ee058a70230e\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=W9NztHJqqC2HCrZObiFB%2FItVMqyGJ%2BqGppzvZS483CkXL5bKbyJ1Hgx%2FSN6AX2N69xxYjAr9xaEF8TfYJk9QeX0YNp2vspsc9G8k1QFYuTRDd2FcGf96\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 98aa73b3691523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24840,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 460 x 460, 8-bit/color RGBA, non-interlaced","md5":"bb2fe0261e66c2677c10f0b00f2b988e","sha1":"3b26afbbdb37dd8d6d80ef072c64f6bb1cb62f6e","sha256":"eca38fd0c5667c9a54331c29c89bc90b98727e97dd2c643481c7e687bc51600d","sha512":"8ebb1b809c5c413e904a3d28c69cad230a65d1f0573ca3303576e345ef6d5863cd5d269882dad600cae971855f0d223467d8040b1a356aaeecbeddc112226214","ssdeep":"768:IhSv2x/2DoUaft0kjL2X4rJ/ef5QmkP0HWE:IhSv+8qft0kc2tgFkPY","tlshash":"4cb2d0855f7740708d7c7c34046b9cd4ea982e6965d7ea90a4a74ce4332e9bf884c0fe","first_seen":"2024-12-23T10:13:13.89589Z","last_seen":"2026-05-09T21:37:11.96547Z","times_seen":24,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/referral.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /js/referral.js HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pEAOzXIdiXR%2FOHdd2kdWmaGMwGYtzjNeNoUY4rT0jtIuqYlDCaw8qMLTkAGfBwhZRUKfca2Y1jkLzeBczQNNM%2F3R5GSicYG1%2BjvjK8Ccl4x3BlDo5mL0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"da657a4bb3e6195b3fe5805c9ce7bc3b\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98aa73b3691723eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2884,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"14e906831358dc529e7db1670e68475a","sha1":"40ec0c58541138cec6e04f440313a1e68e835ce9","sha256":"ee470eee844d62715733abf5a57e2287270c72bdbdd9366309ffa480d088d581","sha512":"3621c7066f36c012c03a220301477cbeaec9d81f732be3ad487c4acc56b97098ef11f2e6bef3d707ce59495f3b51f0271f734bacc660e0ce058d6e2045988071","ssdeep":"","tlshash":"4f510058a4f718314567a03a227f922923bd404f76b5d829b91d8b5c1f8df28cb72bcd","first_seen":"2025-10-06T13:16:57.673804Z","last_seen":"2025-10-11T17:26:50.732745Z","times_seen":12,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"topg-a4c0zduu.pages.dev/js/main.js","fqdn":"topg-a4c0zduu.pages.dev","domain":"topg-a4c0zduu.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.45.29","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.429Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"topg-a4c0zduu.pages.dev","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 06 Oct 2025 09:02:43 GMT","end":"Sun, 04 Jan 2026 10:00:12 GMT"},"fingerprint":{"sha1":"33:17:23:5D:29:61:BB:42:08:D4:08:9D:5C:06:0B:0E:7F:EF:48:A8","sha256":"0E:DD:CF:0D:70:DB:B5:EC:2F:53:C9:1A:77:50:57:16:73:E8:45:DA:B2:C3:B6:47:D2:43:56:ED:89:26:92:BC"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: topg-a4c0zduu.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: application/javascript\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mpMvhyo5jmBHJYfSFBg%2FLK9zl63QWhbjULe4Y9fm%2BduvdAliBQj3fIVgohQ6n8OfJfJZbZhVBIALka4p9wW856M63r%2FlAlGr6gQXJRpkC5txjYQwhQet\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"e0db52d00f26ab04bf066f17c5331072\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 98aa73b3691823eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32652,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (304)","md5":"c7efe96853576b9b649ee70753ac1976","sha1":"7504a7916a979242d5b052f735be9f25c7a9e79a","sha256":"3b5e628a31b0289beb382a17ec516076f880d8ce0f2a93b8f7eea7e7458f2cf0","sha512":"cd5f60c6d3a6fec9df84a2ad538caf34c1aadb9f3362088d828dd6e3f215fba229bb996b39d07c2a0038714cecb53abcac29183870538dc32e8dfcaad2761bae","ssdeep":"384:LKz/4ksYws4N5O12IbqRQ8eyg2bDxcQZKnb0G8AV7Q:LKz/49YrsabSQ8SWFbZ/x","tlshash":"5fe2c81972f715324a6391bba75fa1463332400b7645de9c3abe43540f82f20a9e7af6","first_seen":"2025-10-06T13:16:57.668173Z","last_seen":"2025-10-11T17:26:50.740424Z","times_seen":12,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"geolocation-db.com/json/","fqdn":"geolocation-db.com","domain":"geolocation-db.com","tld":"com"},"ip":{"addr":"159.89.102.253","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"geolocation-db.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 03 Sep 2025 10:37:35 GMT","end":"Tue, 02 Dec 2025 10:37:34 GMT"},"fingerprint":{"sha1":"3C:E7:89:66:DA:14:4C:B8:29:FB:4C:42:AD:94:A5:2D:85:85:88:26","sha256":"0F:64:B9:6E:7A:48:B5:83:90:8C:21:EF:22:32:B9:DF:5B:DD:0C:D3:8F:9E:41:28:D2:C2:39:5C:4F:6E:51:2E"}}},"request":{"raw":"GET /json/ HTTP/1.1\r\nHost: geolocation-db.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx/1.14.0 (Ubuntu)\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: text/html; charset=UTF-8\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.14.0","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":159,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"JSON text data","md5":"4d98ea9f1e77bd5d980d67a948525f9c","sha1":"a09f5a5441438a75bcdfd79a292813f3e1e2bdc0","sha256":"5ec87970cfee03fa942569df2474bed175fa9c5f91ad112b87f3b4c6c0c17b15","sha512":"a07d2ff36743fe580bc79080c772bf051306597f4346cd2f8a0bf1afe847cc05b0e0d81c47a965e95fe49cefe20a4967301aeb5726cd055f5c10b05336595b1b","ssdeep":"","tlshash":"10c08c0e106e8a3fed39d1a0003ea10b08378100a3ea994b26d497b0c18ac8c1089444","first_seen":"2025-09-29T15:10:22.352761Z","last_seen":"2025-10-07T05:59:16.588641Z","times_seen":25,"resource_available":false,"data":null}},"time_used":288,"timings":{"blocked":124,"dns":24,"connect":32,"send":0,"wait":39,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/auth/session","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.687Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"POST /api/auth/session HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nContent-Type: application/json\r\nContent-Length: 41\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"150-Gz2Dwgotm8hTCtxgt3urFBIu9Jc\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x5eZl5E4F8kQnRQhE9PUh7yonV%2FECP8r78mvmpH60K2Jkb71BmYI2tLVHQRUvhrzFOz0iDBfd7geCxMfap9aj8sMKQRCo6IZ9cA%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\nset-cookie: connect.sid=s%3A-IUyFPWNbrA8y94r4OHgMkRpzSzU3a3n.QyGigmX2qlWyV5YNP%2B1%2FWgPGpozzF6t44perMQQzbcg; HttpOnly; SameSite=None; Secure; Path=/; Expires=Tue, 14 Oct 2025 03:53:31 GMT\r\ncf-ray: 98aa73b4fbf91525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"74ef179e715f964ae74a569d2627079c","sha1":"1b3d83c20a2d9bc8530adc60b77bab14122ef497","sha256":"dfb1d4f8599b20568c7fb2737c6a58a60558b2ae8187b48016d5a792d2700aab","sha512":"0705641149f81268104dde15c528f998076a18b6a77c7439ecb43d9c17a81154835ad8b611da88835d672463137e72d0fa4b07f55ef09653b3fcbe815e68faa9","ssdeep":"","tlshash":"a5e0284048b64ed5266e48351ffd54330072cf79c0c119a503013a03550b0308b11523","first_seen":"2025-10-07T03:53:55.463042Z","last_seen":"2025-10-07T03:53:55.463042Z","times_seen":1,"resource_available":false,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"srv001.cfd/api/bot/check","fqdn":"srv001.cfd","domain":"srv001.cfd","tld":"cfd"},"ip":{"addr":"172.67.197.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://topg-a4c0zduu.pages.dev/","date":"2025-10-07T03:53:31.799Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"srv001.cfd","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Oct 2025 10:57:01 GMT","end":"Wed, 31 Dec 2025 11:51:28 GMT"},"fingerprint":{"sha1":"F5:E5:AD:7E:7C:73:3B:04:D6:FA:04:1A:81:47:00:58:DE:14:04:25","sha256":"95:77:DE:FF:61:6E:65:8B:45:0B:E0:78:D9:BF:E0:BB:B6:5C:03:FD:8E:E0:C1:5F:78:98:42:83:84:2D:4B:08"}}},"request":{"raw":"OPTIONS /api/bot/check HTTP/1.1\r\nHost: srv001.cfd\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,user-agent,x-forwarded-for\r\nReferer: https://topg-a4c0zduu.pages.dev/\r\nOrigin: https://topg-a4c0zduu.pages.dev\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 204 No Content\r\nx-powered-by: Express\r\naccess-control-allow-origin: https://topg-a4c0zduu.pages.dev\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET,POST,PUT,DELETE,OPTIONS\r\naccess-control-allow-headers: Content-Type,Authorization,X-Requested-With,x-forwarded-for,user-agent\r\naccess-control-expose-headers: Access-Control-Allow-Origin,Access-Control-Allow-Credentials\r\nserver: cloudflare\r\ndate: Tue, 07 Oct 2025 03:53:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ItGS41f3%2Bss2L7kQe0fMK%2BUClM98Li3lh4UNMCOp8R4%2BG0mv5RcGajLo9yq0Nv%2Bqp6c35EdmuvMp9fLsavJIP5sFR70SOEsXrVs%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncf-ray: 98aa73b5cc5d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-14T21:46:18.147929Z","times_seen":17893364,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-07","alert":"Sinkholed","trigger":"srv001.cfd","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}