{"report_id":"7a558329-20c5-4715-94ba-3aae1199c87c","version":0,"status":"done","tags":[],"date":"2026-07-20T11:25:54Z","url":{"schema":"http","addr":"varaitional.net","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"varaitional.net/","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"title":"Variational Protocol","dom":{"size":16979,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (935)","md5":"8c98084799ab0f97d456f43dd8527a95","sha1":"67d5fe9eb90681a922a571d3428089495aa5b5fe","sha256":"e8355b0ec64f4c1616e8e81dccc12e05dfbf810f2747b74b621daf085eba62f7","sha512":"a5f796906af1c775c710f4025fab87f80eb24c4cfd46d44b6628222fc18d4fa43862d0a0a946a2b313bb20856db32fbdca44d8bb7c8e36dd66d3469617b43edb","ssdeep":"384:74iM/EQ1DEtkcSxgUbmkfKxZi5modGLtZv:UzotkvxgDMJdiv","tlshash":"e972b567a2d3235602970276b08896dafb3cc413b38515647a1c43de6bc2944cfb7eab","dom_hash":"domhashaeeb46c76f9eada70ea8a2f2efbcd2b6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"varaitional.net","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":0,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-24T11:25:54Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"varaitional.net","ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"domain_registered":"2026-07-18","domain_rank":0,"first_seen":"2026-07-20T11:21:58.437668Z","last_seen":"2026-07-20T11:21:58.437668Z","alert_count":9,"request_count":9,"received_data":545445,"sent_data":4543,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"varaitional.net/logo512.png","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varaitional.net/","date":"2026-07-20T11:25:27.964Z","timestamp":1784546727964,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varaitional.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:33:21 GMT","end":"Fri, 16 Oct 2026 22:33:20 GMT"},"fingerprint":{"sha1":"50:05:F4:24:CF:76:6E:E2:84:19:A0:EA:4A:5E:06:B7:51:5E:38:17","sha256":"C0:66:DB:F7:E3:3C:A3:D2:EF:4C:EE:DC:CA:46:EB:59:66:DA:C5:E5:B4:50:0B:61:6D:4E:5E:26:31:AE:6E:71"}}},"request":{"raw":"GET /logo512.png HTTP/1.1\r\nHost: varaitional.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://varaitional.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 20 Jul 2026 11:25:28 GMT\r\nContent-Type: image/png\r\nLast-Modified: Sat, 18 Jul 2026 23:21:41 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a5c0a85-918d\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":37261,"size_decoded":35721,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced","md5":"95b9acb61724e2d172994313d18eefed","sha1":"d47574f876bb7328d0c391fb117e60c3693387bf","sha256":"5a581821169dcbbfc2949dfd7f959a1b9ceaddffc64ec57c44c6bb98223fcbdd","sha512":"40f6c2da1921a782bd260d4fe3a0e5031afe2d77ed7cf134a6cf1bcf3dfb4e63583edff3d76238e7ddbefa731a3a58e3bce9d0e2e2ddf2735f598e3f11918de4","ssdeep":"768:AKES89sQtbsS3v6qe9qn1XKAR/DcxAh4CyQk26WQDCJ30HShXbL0Cj8:ACasWsS3yq9n1aRZC9vYC2HCX4","tlshash":"6ef2d09018094a7adbf7ce8196132ca3c05ca51dbc6f92098339d76333a774a967c7ed","first_seen":"2026-07-20T11:22:02.995489Z","last_seen":"2026-07-20T11:25:55.856583Z","times_seen":2,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"varaitional.net/","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-20T11:25:26.461Z","timestamp":1784546726461,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varaitional.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:33:21 GMT","end":"Fri, 16 Oct 2026 22:33:20 GMT"},"fingerprint":{"sha1":"50:05:F4:24:CF:76:6E:E2:84:19:A0:EA:4A:5E:06:B7:51:5E:38:17","sha256":"C0:66:DB:F7:E3:3C:A3:D2:EF:4C:EE:DC:CA:46:EB:59:66:DA:C5:E5:B4:50:0B:61:6D:4E:5E:26:31:AE:6E:71"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: varaitional.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 20 Jul 2026 11:25:26 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Length: 5902\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16996,"size_decoded":6113,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (935)","md5":"14745ba129899f04050693d758100933","sha1":"2072a752797e32de2cadfc865dbac11457a23aa2","sha256":"d1dd3ee1cf77385fa23c0e44bd27fbb5300251311999def5f14ae200befccc51","sha512":"564e521f94f90b79cb4269df1932eea8d89c082aab401c4bd0788d6e72645f562fc0e648d1cd9c9c04ab5eba05eb9c97ec081691004c0de02f57d5be46271bc7","ssdeep":"384:R4iM/EQ1DEtkcSxgUbmkfKxZi5modGLtZT:OzotkvxgDMJdiT","tlshash":"8b72c567a2d3235602970276b18896dafb3cc413b38515647a1c43de6bc2944cfb7fab","first_seen":"2026-07-20T11:22:02.998364Z","last_seen":"2026-07-20T11:25:55.857313Z","times_seen":2,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":-1,"dns":12,"connect":145,"send":0,"wait":150,"receive":0,"ssl":150},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"varaitional.net/index.css","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://varaitional.net/","date":"2026-07-20T11:25:27.123Z","timestamp":1784546727123,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varaitional.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:33:21 GMT","end":"Fri, 16 Oct 2026 22:33:20 GMT"},"fingerprint":{"sha1":"50:05:F4:24:CF:76:6E:E2:84:19:A0:EA:4A:5E:06:B7:51:5E:38:17","sha256":"C0:66:DB:F7:E3:3C:A3:D2:EF:4C:EE:DC:CA:46:EB:59:66:DA:C5:E5:B4:50:0B:61:6D:4E:5E:26:31:AE:6E:71"}}},"request":{"raw":"GET /index.css HTTP/1.1\r\nHost: varaitional.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://varaitional.net/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 20 Jul 2026 11:25:27 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sat, 13 Jun 2026 23:05:35 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a2de23f-44a\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1098,"size_decoded":784,"mime_type":"text/css","magic":"ASCII text","md5":"fc90662460a4cd738f72b25400b523b9","sha1":"841b9848b88bce8699857497ee2f5401e5b02d66","sha256":"a4b46888c0c3b1a046446614021987b5cd831dc78078e04e2a25ccaff65a04b3","sha512":"a2274b32ef3deaf60a048b23ae4659894c26e33d374f9059d7c3388b27b8d8c9ae32bd7cc38d0a8bb5c1d57102ec7bae08e5067f81ca79202b37a77b67148d1a","ssdeep":"","tlshash":"cf118014d7e32d16f046c4982afa92903b5d254b458acb2d3a6db758cf0e6608572d94","first_seen":"2026-07-20T11:22:02.999262Z","last_seen":"2026-07-20T11:25:55.858238Z","times_seen":2,"resource_available":false,"data":null}},"time_used":145,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"varaitional.net/img/variational-oracle.jpg","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varaitional.net/","date":"2026-07-20T11:25:27.129Z","timestamp":1784546727129,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varaitional.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:33:21 GMT","end":"Fri, 16 Oct 2026 22:33:20 GMT"},"fingerprint":{"sha1":"50:05:F4:24:CF:76:6E:E2:84:19:A0:EA:4A:5E:06:B7:51:5E:38:17","sha256":"C0:66:DB:F7:E3:3C:A3:D2:EF:4C:EE:DC:CA:46:EB:59:66:DA:C5:E5:B4:50:0B:61:6D:4E:5E:26:31:AE:6E:71"}}},"request":{"raw":"GET /img/variational-oracle.jpg HTTP/1.1\r\nHost: varaitional.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://varaitional.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 20 Jul 2026 11:25:27 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 18 Jul 2026 23:16:54 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a5c0966-23faa\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":147370,"size_decoded":121073,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1527x860, components 3","md5":"2e7a15d78a9a9e8bdef24fdad39e50fc","sha1":"841fafd88b0f5e8359144bf50c1e12f8eb510c2e","sha256":"36f8b305bf6d519c4ffa76d8a54ece9df6613a8e066dbe2ab38b46b8ffd0029e","sha512":"1a3755eeca068932cf9b2f755133eeb94b72eb0cd2932f7f39a98852fd60e20de8531289c4cdb3eb006f772b7a857fa247cb11647be76e7d37e83b6b09b3f1b9","ssdeep":"3072:1TFKZDIEntu97gfqBHmQbUZHS/BYzlzSSZVq:1T6Ddntu1g+HmQMHS/BYzlz7ZVq","tlshash":"a0e3f1baa10901e7e8254bb2c853137b4f14efe4465b98578d5cbe457db432cefba808","first_seen":"2026-07-20T11:22:03.001247Z","last_seen":"2026-07-20T11:25:55.859393Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1009,"timings":{"blocked":132,"dns":0,"connect":144,"send":0,"wait":292,"receive":289,"ssl":150},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"varaitional.net/img/variational-24h-volume.webp","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varaitional.net/","date":"2026-07-20T11:25:27.133Z","timestamp":1784546727133,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varaitional.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:33:21 GMT","end":"Fri, 16 Oct 2026 22:33:20 GMT"},"fingerprint":{"sha1":"50:05:F4:24:CF:76:6E:E2:84:19:A0:EA:4A:5E:06:B7:51:5E:38:17","sha256":"C0:66:DB:F7:E3:3C:A3:D2:EF:4C:EE:DC:CA:46:EB:59:66:DA:C5:E5:B4:50:0B:61:6D:4E:5E:26:31:AE:6E:71"}}},"request":{"raw":"GET /img/variational-24h-volume.webp HTTP/1.1\r\nHost: varaitional.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://varaitional.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 20 Jul 2026 11:25:27 GMT\r\nContent-Type: image/webp\r\nContent-Length: 113170\r\nLast-Modified: Sat, 18 Jul 2026 23:17:13 GMT\r\nConnection: keep-alive\r\nETag: \"6a5c0979-1ba12\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113170,"size_decoded":113414,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1600x1000, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0eb6176c7c7af221a2ef76dbd377300d","sha1":"1fbab5b59b90d2e12cd760fc3a419b307dddc9d8","sha256":"16c7ab2329003e7067dc25a5bcd1508394164c84bbf53a47a5571a5760616c5c","sha512":"bd33bb15e48a25ed75b8f94840268c021d5c895485f12ed4de541286d672819103ff1ea888dbe058aa6032fed5216c8e688551fb28915d36b1e1594384a68aa0","ssdeep":"3072:fHdqGDCgYqpwxjZz7i/rics5jRj1o3c+LYxh9DuTRrMekmRB:fwGDhYqpwxjZizqx1GSHDiRMtm3","tlshash":"b8b3120b42ab5405422ca41f450db6e62f1434a71d06663394ff2eea9d9a8d3bbdc86e","first_seen":"2026-07-20T11:22:02.997411Z","last_seen":"2026-07-20T11:25:55.860302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1017,"timings":{"blocked":132,"dns":0,"connect":144,"send":0,"wait":297,"receive":289,"ssl":152},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"varaitional.net/favicon.ico","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varaitional.net/","date":"2026-07-20T11:25:27.965Z","timestamp":1784546727965,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varaitional.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:33:21 GMT","end":"Fri, 16 Oct 2026 22:33:20 GMT"},"fingerprint":{"sha1":"50:05:F4:24:CF:76:6E:E2:84:19:A0:EA:4A:5E:06:B7:51:5E:38:17","sha256":"C0:66:DB:F7:E3:3C:A3:D2:EF:4C:EE:DC:CA:46:EB:59:66:DA:C5:E5:B4:50:0B:61:6D:4E:5E:26:31:AE:6E:71"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: varaitional.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://varaitional.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 20 Jul 2026 11:25:28 GMT\r\nContent-Type: image/x-icon\r\nContent-Length: 4286\r\nLast-Modified: Sat, 18 Jul 2026 23:21:02 GMT\r\nConnection: keep-alive\r\nETag: \"6a5c0a5e-10be\"\r\nAccept-Ranges: bytes\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4286,"size_decoded":4529,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"6893741347feb661193ebbd5b0ec1a47","sha1":"ae6faffad02b1eb77f0d104b0ee35359689f6825","sha256":"5ccd52f0154b4f3d0c774c7839bbc62d2c33c043297b03a470c3dd4b7ece81a2","sha512":"4982ed3c38ed0109065076a88f4b467414fcb51fb4d25562fba82134105148f54becd22a37441cdae15d0daa83a7ad1ac4f897fb752868ce0d4ed83b627859ed","ssdeep":"24:suBQOg4EobP4TJGDKnq3E7SyNkd/UqQ45W6FQwbB4wC2VqlniVimQxOxI:Tg4TbP8JCKKE7lk2qQ4ZFpbCTJTmQ0x","tlshash":"6891c01847e3e55ed154cb70d59ec8dad4ecf6416caa85441f890e316c3abccecdb81a","first_seen":"2026-07-20T11:22:02.996465Z","last_seen":"2026-07-20T11:25:55.86359Z","times_seen":2,"resource_available":false,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"varaitional.net/img/Variational.jpg","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varaitional.net/","date":"2026-07-20T11:25:27.128Z","timestamp":1784546727128,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varaitional.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:33:21 GMT","end":"Fri, 16 Oct 2026 22:33:20 GMT"},"fingerprint":{"sha1":"50:05:F4:24:CF:76:6E:E2:84:19:A0:EA:4A:5E:06:B7:51:5E:38:17","sha256":"C0:66:DB:F7:E3:3C:A3:D2:EF:4C:EE:DC:CA:46:EB:59:66:DA:C5:E5:B4:50:0B:61:6D:4E:5E:26:31:AE:6E:71"}}},"request":{"raw":"GET /img/Variational.jpg HTTP/1.1\r\nHost: varaitional.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://varaitional.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 20 Jul 2026 11:25:27 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 18 Jul 2026 23:16:18 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a5c0942-10594\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":66964,"size_decoded":66440,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x787, components 3","md5":"b0d017f3ec6f8a883c0e712205ae9ac1","sha1":"021309e08934c52586446d5c73ea30f554c16a6e","sha256":"4bc6ad6ed1030696c4070d3b1785fd506e212b02e36b02e47e32f0ce5b51429a","sha512":"72103eef21aeeade1789fa4a51b45b560adb150a8255d31c52826dfb6ffaedc7e96a6995d9cbb9e4088c9333a5004aa1f62fdb4f264ce4727d7902ddc671bf0e","ssdeep":"1536:lJ28tUf3kBNDONH5Ct9MbMim9RcLbxrM/EXD:lJ28yqim9iLNrM2D","tlshash":"ce63029073ae0f76e924a7b6048b15a33860fd972aa4d2dfb6187db14459bdc083a53c","first_seen":"2026-07-20T11:22:03.000298Z","last_seen":"2026-07-20T11:25:55.864332Z","times_seen":2,"resource_available":false,"data":null}},"time_used":869,"timings":{"blocked":132,"dns":0,"connect":145,"send":0,"wait":293,"receive":145,"ssl":152},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"varaitional.net/img/perps.jpg","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varaitional.net/","date":"2026-07-20T11:25:27.134Z","timestamp":1784546727134,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varaitional.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:33:21 GMT","end":"Fri, 16 Oct 2026 22:33:20 GMT"},"fingerprint":{"sha1":"50:05:F4:24:CF:76:6E:E2:84:19:A0:EA:4A:5E:06:B7:51:5E:38:17","sha256":"C0:66:DB:F7:E3:3C:A3:D2:EF:4C:EE:DC:CA:46:EB:59:66:DA:C5:E5:B4:50:0B:61:6D:4E:5E:26:31:AE:6E:71"}}},"request":{"raw":"GET /img/perps.jpg HTTP/1.1\r\nHost: varaitional.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://varaitional.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 20 Jul 2026 11:25:27 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 18 Jul 2026 23:18:05 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a5c09ad-171af\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":94639,"size_decoded":74648,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 1200x492, components 3","md5":"f7dce7d6f923ecafef03d792929f8167","sha1":"2a4502739c436e383339f124231a33c34aae8d58","sha256":"8eb7b210604418878add7534f54636a35a7ffab3e8d470db157eeca2ed34769b","sha512":"8b80c5104dff2bd93f9b7c04818e32406c9b12ca1e75f0327143c65af5a03a438472aeb67cddacd0f0fb581a64e2cc39eda2cc4bdc23c5a6307c475b32aa13d2","ssdeep":"1536:/FG8OiphT2yyN6fQdaJdz+dcmoQzAYqi2kPKxQQQQQuy4mRp78pCrGkFKjGg7mrq:/FrphT2yyN6fQwKbqiLQQQQQQF46pzrE","tlshash":"9e93e03c3ff7aaa1d8913e77442327185bb2a4e25b4e6f8d870583530a55791cc93ac3","first_seen":"2026-07-20T11:22:03.002042Z","last_seen":"2026-07-20T11:25:55.865086Z","times_seen":2,"resource_available":false,"data":null}},"time_used":871,"timings":{"blocked":132,"dns":0,"connect":144,"send":0,"wait":295,"receive":145,"ssl":152},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"varaitional.net/img/funding.jpg","fqdn":"varaitional.net","domain":"varaitional.net","tld":"net"},"ip":{"addr":"104.168.132.166","port":443,"asn":54290,"as":"HOSTWINDS","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://varaitional.net/","date":"2026-07-20T11:25:27.135Z","timestamp":1784546727135,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"varaitional.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 18 Jul 2026 22:33:21 GMT","end":"Fri, 16 Oct 2026 22:33:20 GMT"},"fingerprint":{"sha1":"50:05:F4:24:CF:76:6E:E2:84:19:A0:EA:4A:5E:06:B7:51:5E:38:17","sha256":"C0:66:DB:F7:E3:3C:A3:D2:EF:4C:EE:DC:CA:46:EB:59:66:DA:C5:E5:B4:50:0B:61:6D:4E:5E:26:31:AE:6E:71"}}},"request":{"raw":"GET /img/funding.jpg HTTP/1.1\r\nHost: varaitional.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://varaitional.net/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.3\r\nDate: Mon, 20 Jul 2026 11:25:27 GMT\r\nContent-Type: image/jpeg\r\nLast-Modified: Sat, 18 Jul 2026 23:17:49 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nETag: W/\"6a5c099d-f012\"\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":61458,"size_decoded":59754,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x600, components 3","md5":"45d6bb38ff98a6e36e8381d14dce73e9","sha1":"d0e6177344a8754709cbd6983f44d054df8d5eb9","sha256":"dfc8514bab103117df49480533cb48a76e249eafc4c653dcfbc63a51d88b07e2","sha512":"26426dad399b3c5f3ef249deef2f0f277d4942eee6f90a4f46fc4013111bbad01c01dac84826a9a2b7d7a1bf2a4cca2df0930c9f3bf159a254be1472731ea724","ssdeep":"1536:dqED92DsX0cODO18AJRj791Bs5idthxb6YC:0ED9CsXcOqE113jbfC","tlshash":"b153028262a19ff1cdae0771b351061d5be26d650647134f533ceb2939396c1facf1a0","first_seen":"2026-07-20T11:22:03.002985Z","last_seen":"2026-07-20T11:25:55.865799Z","times_seen":2,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":132,"dns":0,"connect":146,"send":0,"wait":147,"receive":145,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-20","alert":"Sinkholed","trigger":"varaitional.net","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}