{"report_id":"7f70f742-8f87-4791-ae6d-192f0131f544","version":0,"status":"done","tags":[],"date":"2026-09-19T13:36:04Z","url":{"schema":"http","addr":"privnote.live/","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"privnote.live/#","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"title":"Privnote - Send notes that will self-destruct after being read","dom":{"size":16078,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (634)","md5":"066f9a3101d26645944b29cd47f0533c","sha1":"a56177d2790c9b118e8fbb88f8bbdb6409d3bb35","sha256":"4f2283c21f936fe2cdf9131cd16bcd8ab168c7a7a448e342578b29f9bc137c94","sha512":"fa92df106fa5e9e858a619e283adc0213a0cc1daff90a532df6aeee73483fab89cede0bbc0570a62c8db116e38a9b833d87e7f27c52ee1bc5278344cf4719acc","ssdeep":"192:gQSi28KZgBgX1y27xKu5YQdxAYlowBrgdFVfxJb9+19iN9M/by:gX8KZgUtImYQdxAYCwZgd/pnRKDy","tlshash":"b572655998f484b30193c1d5f6a15e2afda19617c75a0d4075fc8be40ff7e8ace23066","dom_hash":"domhashe4077d3f3b4f7fc4baecd76bff23ae7f","first_seen":"2026-09-19T07:20:54.010787Z","last_seen":"2026-09-19T13:36:10.622035Z","times_seen":4,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"privnote.live/","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-24T13:36:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"privnote.live","ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-19T13:31:04.91667Z","last_seen":"2026-09-19T13:31:04.916671Z","alert_count":13,"request_count":13,"received_data":137770,"sent_data":6382,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/common.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b89f7651422fe015cea838def9a22f28","sha1":"a3f72f8eb4ddd700a05bc982a858e53e8e854d9c","sha256":"6f39bb5d66e42789ff6d3ab8a785652d537557b1d19ffd4215eb791853af9059","sha512":"6bd4b4522bd77e12df316f3dc7a5d35b5a15a738867b27623be9f8664f4cbc4b0a86e898dbc24294eab7075bf9bc889e52bd38d105aca877037722a50cd58fe7","ssdeep":"","tlshash":"b44132c8b207a6856a5642d42c0f7806b17be6a0180ce50d9f73f75f97b6e139137f26","size":2060,"data":"","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-09-19T13:36:10.633822Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/legacy.js?ver=1","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7118b94dbbe2e74f3816e14ba0147f69","sha1":"8a294551b19af4e544b35e9a51fa03916d3ba4c0","sha256":"32757938cfef60e44ff8411607b1e863aa66d7cda0236b2dca4352c356db95d7","sha512":"4d0b295432a3edc27eacc73215d3c8132d0e9ff1ce012d0144429246bc949afaba4e25a95ef7c8c269ab6b3a7a8990c153acbf014e229b71f424df1698e5c48b","ssdeep":"384:dYZ542ufWQe83fWQmZarBMHSxfzUN2daJYZ542ufWQe83fWQmZarBMHS+frUN22q:8TZyBMHSrtbTZyBMHZzmq","tlshash":"3263030ce8551b431477b376aa7b450afb334267012a4240fd6deac42f71d16e2aafed","size":69381,"data":"","first_seen":"2026-09-19T07:20:54.026347Z","last_seen":"2026-09-19T13:36:10.647957Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a08690fd16e3012feeafc737fc5d1e92","sha1":"b69448a459adb14911bebbddb4a71b8bc6c456c2","sha256":"6c50d34ea76257c20f9a0f388739a033a7fc39622c280b4b5ffdfc60c082720c","sha512":"7546d1d3b5b885ec47446e2eceb57df5652fb52213b862f67448f21e9c4a773e975e21f6820d1f8633a6c4b204b5bf9243d99164ab0e028cee5ebc3c163ec8d1","ssdeep":"","tlshash":"48e05bcca5e3419c6d75eb7783099e5035b54405209f4d44b58ed3811bcc1065c5a1fe","size":311,"data":"","first_seen":"2026-06-18T06:35:59.881672Z","last_seen":"2026-09-19T13:36:10.681457Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"324c6c47bf11da27ff97144696fa7073","sha1":"41cf59c8d183c8283b662fd47a9e2f778db34a7b","sha256":"22a8c2bb11d37ab401af6ad3628aa07bab8095aa41c4d65e34ad8cfee0632f91","sha512":"4cebd5a9985497c307e95208dd99c9c5edd2f81f29f5bf5589283c3abe1381e3165c98ba66fe0f1ade2240fa19c8188fb5ef051254c459395dc1a8775c24f6ae","ssdeep":"","tlshash":"adb0124f580c650002d33c228d2a41048c73c906204018f167b6e1418d11016414a8c4","size":91,"data":"","first_seen":"2026-09-19T07:20:54.031069Z","last_seen":"2026-09-19T13:36:10.682094Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T18:43:28.82487Z","times_seen":451822,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/lib/gibberish-aes.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a32a3e1c6325795e41dfb613c04b2f30","sha1":"1373300727de07484ede609da3d5777fabaa8a3f","sha256":"bb54040a037d6d730f498160c7f016f6c37a344025b7d198e5f3a3cfd34f942b","sha512":"8c495700b2cfef487ebb3ac0f5fd4a7a15e6c00c90a87d99253e10a5050e50cca87394cb7f3c54e753a5337ca3dfe0793ae90cb8487daf891f86ea87c603b119","ssdeep":"384:UWTQFzmi6dJLnmqtoxkfu/Bu1MrUD83xOJMkQ9OPMvF9P9UM/dzX9:3QVmReWfu/Bu14kQ9Td9J","tlshash":"e552e796ba7310a8b7ca54f14c3f15be66a0b9a51cf32321e0c7d6c016289e5e23ff15","size":14379,"data":"","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-09-19T13:36:10.677744Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/lib/TextEncoderLite.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2210b21f09767aa04875d1c905fa0a35","sha1":"def79ce060aa758c5464b42d9658d8e660b846a1","sha256":"e3c7994493b22e917a000077d61321c351cbb1c2ae020523227a083c6fb749cc","sha512":"47e134d4c2826aede14ca4c9cf2d8a2470ef6d7d2e86f458a3303878a3038d7bbbdf9ed24ed342c1818bf1f11569ce25b21d80b801f4fb86333683d2ed257856","ssdeep":"","tlshash":"fa41fe53acd026ed06bc00302547251af4dce16e92b82235afce4f80d074ea8de5ff96","size":2001,"data":"","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-09-19T13:36:10.68014Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/lib/b64.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5d34b0986ba7b84b4d90965d7edb8d94","sha1":"7c9ed8072ff7d86b99b8b382981ae9dbb6760c51","sha256":"36dce7ea0fd92d4746d0acbd131b7c9ab1fe2e6c04e7c1f719653073213caef7","sha512":"b4946839abceef17f923b2b6764434543774bde5b4ceedb3d8b885cdd1b6177d7680ea37904887b376bd6eddacd3a4be0dbcaffc6c8aeafc152038f8b5e36b70","ssdeep":"","tlshash":"4041358c109640d10bae2a71144ba18ee47e191718edb405cd1bfff589346f947eac3c","size":2357,"data":"","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-09-19T13:36:10.680778Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/lib/promise.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"05e4b55a50fad40b75edd0cce91e4340","sha1":"ccc4dd629df0cf9dfcadf754e76ea88ed9c8e85b","sha256":"6986df3f8ba7ce00fb51b30b9fff84447f0fd6b874c354b95178bfbeb89d3a64","sha512":"27c7931d227d16a661d7cc2c063d0cfabf51b62adbd17cf0300aeae66c8d9477e08ff4226d74cd5df3714f824ef95ca3b68da0eb38fa3d151c1a8a612cd293b7","ssdeep":"","tlshash":"fd517462fb81e0dbcbc6a134fa2f5e0b6534b8051c56dc54b578e6d809fb01ef11ae19","size":2784,"data":"","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-09-19T13:36:10.625141Z","times_seen":37,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"privnote.live/static-58c8928/style/legacy.css","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.476Z","timestamp":1789824935476,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/style/legacy.css HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: text/css\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 May 2026 00:03:02 GMT\r\netag: \"3225-651f82b645980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=keWGABMfC2cQxTWFVkkRrk5G0F9JFZEufHbnF6rsr1eqVCser6yeLSdFAJL7STPNgfWac1M6%2FyI2ExOvKOl7Q5VP%2FYMhZZoQHFjBCLDzCQs%2B0yfWzpgbvf7pmSwvpieM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f976bc661a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2859\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12837,"size_decoded":3609,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"86c19fd23ff9786981aab1c983e7bc92","sha1":"60134d132ac2535a011159b41ea86263069c8ca2","sha256":"a3a3e15edc01af14f50e4ffd66aeccc0d3b511b7466d4849a186ebf6b63da015","sha512":"8a27197947a406bce20b69a31e684ae87280775e794f6562b57bd82e801f6ee028e3ff7d65bbc97b2e04ef0ed623cc4ff643164910deb0d76a951d7fd13de1fc","ssdeep":"192:bZGv8k62DfYxPDZYDsqV+345nrbVY9R/7HGqYNyrhlCnbk2J0R:po7jK/Y1hc","tlshash":"8b42201cee410845b637ce74bfa38755eb9500238a02127dbedeb6608ff54a455b9f8c","first_seen":"2026-09-19T07:20:54.020707Z","last_seen":"2026-09-19T13:36:10.623603Z","times_seen":4,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.679Z","timestamp":1789824935679,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Mon, 21 Sep 2026 13:35:35 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ohTOnjj1d%2BSrMWoRRz6NHRs81syH7v7%2B5aEufdvsDA7wvg7FoQWknayyRy4yc%2BJAmsZOxss%2BmVtXn7mQBw87cvpG%2F8E0Vlgn48SpR4wQbm84IVKoa84oA2px4rkr1XaU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\nserver: cloudflare\r\ncf-ray: a3d8f9780cba1a30-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1288,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-10-11T18:43:28.82487Z","times_seen":451822,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/lib/promise.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.472Z","timestamp":1789824935472,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/promise.js HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 May 2026 00:01:48 GMT\r\netag: \"ae0-651f826fb3300-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3079TeJby3h7Aq8zHKLuvcbnTn9zhCJ9fyK1zvCX6KuCYU5in1crVMLPtMxlXSuW23lUca5Dl%2FsYT%2FEKNowY%2BQhHjvj3SEavhptyaxsLbw9MgePROUcbdcX2F8Q9eVAb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f976bc621a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1150\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2784,"size_decoded":1906,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"05e4b55a50fad40b75edd0cce91e4340","sha1":"ccc4dd629df0cf9dfcadf754e76ea88ed9c8e85b","sha256":"6986df3f8ba7ce00fb51b30b9fff84447f0fd6b874c354b95178bfbeb89d3a64","sha512":"27c7931d227d16a661d7cc2c063d0cfabf51b62adbd17cf0300aeae66c8d9477e08ff4226d74cd5df3714f824ef95ca3b68da0eb38fa3d151c1a8a612cd293b7","ssdeep":"","tlshash":"fd517462fb81e0dbcbc6a134fa2f5e0b6534b8051c56dc54b578e6d809fb01ef11ae19","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-09-19T13:36:10.625141Z","times_seen":37,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/common.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.473Z","timestamp":1789824935473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/js-min/common.js HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 May 2026 00:01:10 GMT\r\netag: \"80c-651f824b75d80-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ErpiOGlxL91S%2B6QUYwvvOx0DKp%2B34ICMZm%2BqkrPm1u3pcPMHXyf%2Bo3YCSvzzkC%2Fj5pY2he0SRCFaQmSyCyIm74tlVl37Mmja70%2FfVx8mFJefYxCLLiza79Pk%2F7oCnoq4\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f976bc631a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 867\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2060,"size_decoded":1630,"mime_type":"text/javascript","magic":"ASCII text","md5":"b89f7651422fe015cea838def9a22f28","sha1":"a3f72f8eb4ddd700a05bc982a858e53e8e854d9c","sha256":"6f39bb5d66e42789ff6d3ab8a785652d537557b1d19ffd4215eb791853af9059","sha512":"6bd4b4522bd77e12df316f3dc7a5d35b5a15a738867b27623be9f8664f4cbc4b0a86e898dbc24294eab7075bf9bc889e52bd38d105aca877037722a50cd58fe7","ssdeep":"","tlshash":"b44132c8b207a6856a5642d42c0f7806b17be6a0180ce50d9f73f75f97b6e139137f26","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-09-19T13:36:10.633822Z","times_seen":37,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/legacy.js?ver=1","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.474Z","timestamp":1789824935474,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/js-min/legacy.js?ver=1 HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 19 Jul 2026 01:12:16 GMT\r\netag: \"10f05-656ec7b005770-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6gITk7RK0MBVsJAwp%2FR3AaWPTVD6m7qreWe7YH0xCg2etZBElkkxcvUq%2FqTvauh8aYv5h0XyzfBxx7N%2Bfo%2BXlgfqPziwMOM1lSkxPLkLJ5diEiF7j9vPgZDdIlq7hrmP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f976bc641a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9408\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69381,"size_decoded":10168,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"7118b94dbbe2e74f3816e14ba0147f69","sha1":"8a294551b19af4e544b35e9a51fa03916d3ba4c0","sha256":"32757938cfef60e44ff8411607b1e863aa66d7cda0236b2dca4352c356db95d7","sha512":"4d0b295432a3edc27eacc73215d3c8132d0e9ff1ce012d0144429246bc949afaba4e25a95ef7c8c269ab6b3a7a8990c153acbf014e229b71f424df1698e5c48b","ssdeep":"384:dYZ542ufWQe83fWQmZarBMHSxfzUN2daJYZ542ufWQe83fWQmZarBMHS+frUN22q:8TZyBMHSrtbTZyBMHZzmq","tlshash":"3263030ce8551b431477b376aa7b450afb334267012a4240fd6deac42f71d16e2aafed","first_seen":"2026-09-19T07:20:54.026347Z","last_seen":"2026-09-19T13:36:10.647957Z","times_seen":4,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/icon/favicon-16x16.png","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.792Z","timestamp":1789824935792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/icon/favicon-16x16.png HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 17 May 2026 00:06:22 GMT\r\netag: \"1aa-651f837501b80\"\r\naccept-ranges: bytes\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4WooDrjObH0fJT312HO2aUGGAfTUXpCu%2FWFKAWeZwizIeVfc%2FSEt8OGl%2F8zOUF%2BwJR%2BwmJqFTAWiO2wTB9r4W6araGSE%2B4%2B8CdsZ6WzcbJWidJeCpuZ0IoayEk%2BdPTYm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f978bcd91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 426\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":426,"size_decoded":1133,"mime_type":"image/png","magic":"PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced","md5":"f89ab673e26bc011395be48dfbdcb462","sha1":"8d815e9fae24b38e9423cebf0c56ac93d2bf92c1","sha256":"794be059a2ad05011979e9806ad098ce2fc840a739076f00ac5ba898f8c9afa6","sha512":"0a873699ad352e7b6db716f62933c412807a06f8ebe93f3b68394efdd6223b42762c9498b52538dc9888c1a44489f91b5d0bb2d5dda8922280f4f99a15c65476","ssdeep":"","tlshash":"80e05ca7b1423cf9c5840b33a97e79e446284623a0f7193a07715da04805b91e1b107a","first_seen":"2023-11-28T12:56:07Z","last_seen":"2026-09-19T13:36:10.656076Z","times_seen":28,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/style/legacy/privnote-page-flip-30.png","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.802Z","timestamp":1789824935802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/style/legacy/privnote-page-flip-30.png HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/static-58c8928/style/legacy.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=4,i\r\nlast-modified: Sun, 17 May 2026 00:05:48 GMT\r\netag: \"ae-651f835494f00\"\r\naccept-ranges: bytes\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XMzGEq50x8jW%2B4jznQ9zeozrFxbLadX%2B1vuOJOMgpW%2B6wFJk5MQ3s1avavzsE0eof3d7lbhS2IIDafe7Nbr44U4SLQzAsTCSP2sDV%2F3R%2BDpIYG9LwKL1MulLFzutcO6O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f978ccdb1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":174,"size_decoded":871,"mime_type":"image/png","magic":"PNG image data, 30 x 30, 8-bit colormap, non-interlaced","md5":"eccb8dfcf75f2ddd8f2ce81533ebfb6a","sha1":"ec66a18b92a1635fd2fb2690e0823bbf375b4912","sha256":"0fda09b6fbd18ef079182f76f3a43a0aeedfcefac474efed7fb654e4dd9ae70a","sha512":"1ff3b76dc691123c3bd915ad67216e3a0a537038535017a47b6a2dfbaad41ba9b0b87380757651520464dc4fd1274dd7a6f3ce0fce25b43394040712745e1b34","ssdeep":"","tlshash":"b7c08cc7bd688e78cf230232eb25f20198cac74323219272188a882353e254480f6583","first_seen":"2025-04-25T09:36:31.317447Z","last_seen":"2026-09-19T13:36:10.662425Z","times_seen":93,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/lib/gibberish-aes.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.468Z","timestamp":1789824935468,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/gibberish-aes.js HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 May 2026 00:02:24 GMT\r\netag: \"382b-651f829208400-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lxa6LXSZ9zDQUAwHAVHzUrNKKfC%2F8YJmSWRhqzXpB9DBrz%2FKjfBPwHUbcCx57k%2BGLmPYdE7Qur9tAKh5dHsdjnjp9xyOoxMg7uhJFaE64lgK%2FziAK0jG1RMtiF9Or6KE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f976bc5e1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5109\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14379,"size_decoded":5868,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2830)","md5":"a32a3e1c6325795e41dfb613c04b2f30","sha1":"1373300727de07484ede609da3d5777fabaa8a3f","sha256":"bb54040a037d6d730f498160c7f016f6c37a344025b7d198e5f3a3cfd34f942b","sha512":"8c495700b2cfef487ebb3ac0f5fd4a7a15e6c00c90a87d99253e10a5050e50cca87394cb7f3c54e753a5337ca3dfe0793ae90cb8487daf891f86ea87c603b119","ssdeep":"384:UWTQFzmi6dJLnmqtoxkfu/Bu1MrUD83xOJMkQ9OPMvF9P9UM/dzX9:3QVmReWfu/Bu14kQ9Td9J","tlshash":"e552e796ba7310a8b7ca54f14c3f15be66a0b9a51cf32321e0c7d6c016289e5e23ff15","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-09-19T13:36:10.677744Z","times_seen":37,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/style/legacy/privnote-logo.png","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.687Z","timestamp":1789824935687,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/style/legacy/privnote-logo.png HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=5,i\r\nlast-modified: Sun, 17 May 2026 00:07:52 GMT\r\netag: \"4c3-651f83cad6600\"\r\naccept-ranges: bytes\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Glzf43I7UeGNNiuzBy%2FrLV1%2Bur6iW7A7zBwqF5YEBHXKqmjJ0uv0oKPP6PUKoToecQNosoF8TdhO%2FhmCmylRdkHhIAtq7%2F6lQTyLIFd73WfyKy%2B83uG%2B%2F56Q9WQWFnpr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f9780cbd1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1219\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1219,"size_decoded":1922,"mime_type":"image/png","magic":"PNG image data, 200 x 55, 8-bit colormap, non-interlaced","md5":"c7b440cb136a4d5e30cffecb62b2283e","sha1":"afb3467f53d198887cf5265e15bfc2f41b72d9a8","sha256":"2fb6f83e4714502b28b54a1ba51b4d09afebc6e7d6c4cc0d03c8b40d8df8669d","sha512":"b10e16d071ea7c1c81f1a488a84c2abc09078e494470825f2466b4e85e66ea3577e5014d1eb2d7e55ee893f442017fe0633ff6f4e68a18f16051ee58322018e2","ssdeep":"","tlshash":"eb21baebb855dc11f4a75d58526c4010534b7b104a3356949236a5c25cf37a2796ca92","first_seen":"2026-09-19T07:20:54.022121Z","last_seen":"2026-09-19T13:36:10.67837Z","times_seen":4,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/icon/touch-icon-192x192.png","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.790Z","timestamp":1789824935790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/icon/touch-icon-192x192.png HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\npriority: u=6,i=?0\r\nlast-modified: Sun, 17 May 2026 00:06:12 GMT\r\netag: \"69d-651f836b78500\"\r\naccept-ranges: bytes\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lW%2Fy0b0CYmdX%2BZdmBGZw7elvL6lGTOIDVqyU8CS0FIqE%2FBgthp36E5b4GYR3dCatfaFjCHYkT50ichFNwmdGBs3YbFCmfP7hCT%2BnmOe2uZOC7IlOOxDOE3PVWEVnn7UL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f978bcd81a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1693\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1693,"size_decoded":2393,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"356ff9ac1eb162a7d7ddbb9f2601c421","sha1":"40f8f2ab0d500a6dc4a820791bec5f793f095c8c","sha256":"8a524660254708603f5132814f46995715de4188eae952ad6209b08cd6a45172","sha512":"6ebeadccdbecd38e68b8849798bccd999d38f9221f2d88e0fc8a95089f36ba22a0565a221bd0e0ad53524b56b6d77808d26b2a6032b99421380e16e8cff89d9a","ssdeep":"","tlshash":"54311a7ac9b1f5b3d03a87b2d730050583190fc58a79ae7608202cea0fa845a1840aef","first_seen":"2023-11-28T12:56:07Z","last_seen":"2026-09-19T13:36:10.678928Z","times_seen":28,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-19T13:35:34.853Z","timestamp":1789824934853,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XkTQkoRAps715DqyujXqTM6aKo1fn4tVVoYqxFPhP2SUQN6U5zANiRce6GaKjO6Q%2BG%2B6%2BLURWG1yUbeVZJ2hekg92B5GtzZUaXuVSYczAn51Ht14w%2Fpxm%2BddjZs5DJcn\"}]}\r\npriority: u=0,i\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3d8f9752bf91a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Cloudflare Browser Insights","description":"Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["Analytics","RUM"]}],"data":{"size":17878,"size_decoded":5336,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (501), with CRLF line terminators","md5":"5f7b3964db851ccdc27d5139d3652687","sha1":"4caff0f7f4b8a213bcddb32699f640aca93e52de","sha256":"36e13214bc58663dcba8d15e94b860c9a1e5af18885475c53b83a0e07af64266","sha512":"89a1ca3c29bc94ae0bb3e1bcc9c26098c39d4a1d310251cb6ad627b688561ad380328a5177d2cf3535fca1aefa697040167e3f4fa5cdecdd48bc244d08ee49cd","ssdeep":"192:7nOBvj9MBBgJzXS20ZJLVYxCS3YDbSSUZgejVR7tdw2k7NA5dja:7mj9MBCJzXNCZYxCS3YDbvUZRVpOcc","tlshash":"7e827449a8e188a201b3c2d5e6619eaefea1911bc7470c0072fc57e71ff7d49ce63066","first_seen":"2026-09-19T07:20:54.012722Z","last_seen":"2026-09-19T13:36:10.679534Z","times_seen":4,"resource_available":true,"data":null}},"time_used":457,"timings":{"blocked":-1,"dns":345,"connect":18,"send":0,"wait":94,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/lib/TextEncoderLite.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.469Z","timestamp":1789824935469,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/TextEncoderLite.js HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 May 2026 00:02:12 GMT\r\netag: \"7d1-651f828696900-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OIefWD0hxO%2FBZ7EOt7s6wtpcP5hjNCjOF%2BeqXhezhEnwfdS%2FNKt996WkyR5wEpT2lA22Mz9KrfWUsBEoWMXPpN2xy%2FUsHN0ySmM0i0Z%2BtjQSbyRNuu9svOM0M9GAkHtl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f976bc5f1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 757\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2001,"size_decoded":1516,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2210b21f09767aa04875d1c905fa0a35","sha1":"def79ce060aa758c5464b42d9658d8e660b846a1","sha256":"e3c7994493b22e917a000077d61321c351cbb1c2ae020523227a083c6fb749cc","sha512":"47e134d4c2826aede14ca4c9cf2d8a2470ef6d7d2e86f458a3303878a3038d7bbbdf9ed24ed342c1818bf1f11569ce25b21d80b801f4fb86333683d2ed257856","ssdeep":"","tlshash":"fa41fe53acd026ed06bc00302547251af4dce16e92b82235afce4f80d074ea8de5ff96","first_seen":"2023-07-26T11:58:06Z","last_seen":"2026-09-19T13:36:10.68014Z","times_seen":37,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"privnote.live/static-58c8928/js-min/lib/b64.js","fqdn":"privnote.live","domain":"privnote.live","tld":"live"},"ip":{"addr":"104.21.73.16","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://privnote.live/","date":"2026-09-19T13:35:35.471Z","timestamp":1789824935471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"privnote.live","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 15 Sep 2026 11:38:03 GMT","end":"Mon, 14 Dec 2026 11:38:02 GMT"},"fingerprint":{"sha1":"68:51:16:72:E7:74:92:2F:7D:61:55:C2:47:6E:8B:2A:A8:2D:74:C2","sha256":"71:61:80:64:39:DF:6B:5F:9F:FB:A7:AC:E3:4C:08:66:56:B5:A1:BA:B4:EE:C3:B6:C0:50:7C:07:85:D6:F4:8F"}}},"request":{"raw":"GET /static-58c8928/js-min/lib/b64.js HTTP/1.1\r\nHost: privnote.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://privnote.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sat, 19 Sep 2026 13:35:35 GMT\r\ncontent-type: text/javascript\r\nserver-timing: cfExtPri\r\npriority: u=2,i=?0\r\nlast-modified: Sun, 17 May 2026 00:01:58 GMT\r\netag: \"935-651f82793c980-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nage: 305\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zH2JeQPhka9PYp6MfUxy8kzSFV2xyqOwzi%2F7mAwo1zfjmxnRo4MADHKEOmbPyp8eWTMbpdlubDycVWdEma5vQ1lcmf%2FJqlGbUuq1p1oS0xyi0eDPGwOOkyEPw7d2K0iQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3d8f976bc611a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 956\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2357,"size_decoded":1709,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"5d34b0986ba7b84b4d90965d7edb8d94","sha1":"7c9ed8072ff7d86b99b8b382981ae9dbb6760c51","sha256":"36dce7ea0fd92d4746d0acbd131b7c9ab1fe2e6c04e7c1f719653073213caef7","sha512":"b4946839abceef17f923b2b6764434543774bde5b4ceedb3d8b885cdd1b6177d7680ea37904887b376bd6eddacd3a4be0dbcaffc6c8aeafc152038f8b5e36b70","ssdeep":"","tlshash":"4041358c109640d10bae2a71144ba18ee47e191718edb405cd1bfff589346f947eac3c","first_seen":"2023-07-26T11:58:05Z","last_seen":"2026-09-19T13:36:10.680778Z","times_seen":37,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-19","alert":"Sinkholed","trigger":"privnote.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}