{"report_id":"83e6812c-4a5e-44c8-ab4a-a7621e260bfc","version":6,"status":"done","tags":[],"date":"2026-03-04T07:42:50Z","url":{"schema":"http","addr":"extention-card.appwrite.network","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.3.52","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"extention-card.appwrite.network/?#/login","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"title":"react-admin","dom":{"size":1558,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1056)","md5":"4629708a65dd462b7c2e2452ba6ad66e","sha1":"8a4cc7699997ae0f4064b8844a4fb54bcddc5895","sha256":"d67bb2e2e47f7d7fb03a46e17b3b8bdbdd21eb606971d8944cc8fe83e627cd32","sha512":"74226160dff2ff8c357903964ed4ff2feafb0d2253ba2f1ff70c0c0ac357035becaf7bad41353615d1b1483ead5a0679f6b395f84edef7337d8112cad4034b4e","ssdeep":"","tlshash":"173195008580891f4713ac94ece0ab1d7a47cb07db47ad7456b543a2abceea1c9769f8","dom_hash":"domhash76f341ff5fb9a5f818933a19069cccff","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"extention-card.appwrite.network","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.3.52","port":0,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-08T07:42:50Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"extention-card.appwrite.network","ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2022-06-28","domain_rank":0,"first_seen":"2026-02-16T13:44:17.079377Z","last_seen":"2026-03-04T07:36:04.229626Z","alert_count":16,"request_count":8,"received_data":578632,"sent_data":3850,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"extention-card.appwrite.network/assets/index-DciPYpnM.js","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"858fab447df30e578a9f2afefa7bf063","sha1":"4224e5d5598fb0012541a42829e4e44ee079924d","sha256":"bb51a7e34ecef3a14e17f5bf6cd3dc17f4e0ae8115896ab8df7e8c6c4c16ac87","sha512":"068c5b5485a612f411c21972704f36c0d82ebc9dd59292dc0014e26813480934bc1a4aa0ac02a57dc3326ac14d7238ff0c8bcdf37ed0015bc942a53a105bc04e","ssdeep":"3072:rqcTaRci5Tw8u7/jgawmQEthVDoJPsz/zXP5ZOKw6nQjSsyWO42nGw6eaKspt4+W:roRXzOfvtZ9s2CB55e","tlshash":"f7444be8316db6667fb246a500af110771792d37640d88b0e124ed7a27b844a70bbffd","size":275874,"data":"","first_seen":"2026-02-28T09:56:05.236317Z","last_seen":"2026-03-08T13:50:22.025744Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"extention-card.appwrite.network/assets/index-DciPYpnM.js","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"858fab447df30e578a9f2afefa7bf063","sha1":"4224e5d5598fb0012541a42829e4e44ee079924d","sha256":"bb51a7e34ecef3a14e17f5bf6cd3dc17f4e0ae8115896ab8df7e8c6c4c16ac87","sha512":"068c5b5485a612f411c21972704f36c0d82ebc9dd59292dc0014e26813480934bc1a4aa0ac02a57dc3326ac14d7238ff0c8bcdf37ed0015bc942a53a105bc04e","ssdeep":"3072:rqcTaRci5Tw8u7/jgawmQEthVDoJPsz/zXP5ZOKw6nQjSsyWO42nGw6eaKspt4+W:roRXzOfvtZ9s2CB55e","tlshash":"f7444be8316db6667fb246a500af110771792d37640d88b0e124ed7a27b844a70bbffd","size":275874,"data":"","first_seen":"2026-02-28T09:56:05.236317Z","last_seen":"2026-03-08T13:50:22.025744Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"extention-card.appwrite.network/assets/index-DciPYpnM.js","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extention-card.appwrite.network/","date":"2026-03-04T07:42:29.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appwrite.network","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 19 Feb 2026 09:02:04 GMT","end":"Sat, 21 Mar 2026 09:02:03 GMT"},"fingerprint":{"sha1":"BB:42:D6:8B:D9:B6:35:70:93:EB:1F:D3:7B:BD:55:20:7D:A8:6E:DC","sha256":"82:78:87:06:82:45:9B:50:3E:FA:94:CE:8A:0E:B3:8E:17:77:0D:A9:9D:C5:2E:4D:14:74:80:A8:5B:21:E3:DD"}}},"request":{"raw":"GET /assets/index-DciPYpnM.js HTTP/1.1\r\nHost: extention-card.appwrite.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extention-card.appwrite.network/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"858fab447df30e578a9f2afefa7bf063\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 69881c2f001fb7d769f5\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.14020919799805\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Wed, 04 Mar 2026 07:42:29 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 275874\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":275874,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42695)","md5":"858fab447df30e578a9f2afefa7bf063","sha1":"4224e5d5598fb0012541a42829e4e44ee079924d","sha256":"bb51a7e34ecef3a14e17f5bf6cd3dc17f4e0ae8115896ab8df7e8c6c4c16ac87","sha512":"068c5b5485a612f411c21972704f36c0d82ebc9dd59292dc0014e26813480934bc1a4aa0ac02a57dc3326ac14d7238ff0c8bcdf37ed0015bc942a53a105bc04e","ssdeep":"3072:rqcTaRci5Tw8u7/jgawmQEthVDoJPsz/zXP5ZOKw6nQjSsyWO42nGw6eaKspt4+W:roRXzOfvtZ9s2CB55e","tlshash":"f7444be8316db6667fb246a500af110771792d37640d88b0e124ed7a27b844a70bbffd","first_seen":"2026-02-28T09:56:05.236317Z","last_seen":"2026-03-08T13:50:22.025744Z","times_seen":10,"resource_available":true,"data":null}},"time_used":375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extention-card.appwrite.network/vite.svg","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extention-card.appwrite.network/","date":"2026-03-04T07:42:29.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appwrite.network","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 19 Feb 2026 09:02:04 GMT","end":"Sat, 21 Mar 2026 09:02:03 GMT"},"fingerprint":{"sha1":"BB:42:D6:8B:D9:B6:35:70:93:EB:1F:D3:7B:BD:55:20:7D:A8:6E:DC","sha256":"82:78:87:06:82:45:9B:50:3E:FA:94:CE:8A:0E:B3:8E:17:77:0D:A9:9D:C5:2E:4D:14:74:80:A8:5B:21:E3:DD"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: extention-card.appwrite.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extention-card.appwrite.network/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: image/svg+xml\r\netag: \"8e3a10e157f75ada21ab742c022d5430\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 69881c2f001fb7d769f5\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.1328330039978\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Wed, 04 Mar 2026 07:42:30 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 1497\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e3a10e157f75ada21ab742c022d5430","sha1":"f7f39d7237b791a945d52a5cd7a8fb365f313366","sha256":"4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb","sha512":"fbf065e26d907454cb432a17d831f448e1c3df0f33cd681ccc52b63e5bc26bc9e4de08591a2de579e5b05219fcffd3b4d4261ada6fa55299e731343df860488d","ssdeep":"","tlshash":"2031451fda7fd4fec0a6cb48e612b047962c30d95e41c5b4d9845f0e64a19f17c0aa64","first_seen":"2023-05-18T16:20:30Z","last_seen":"2026-04-04T13:25:47.281659Z","times_seen":3224,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extention-card.appwrite.network/?#/login","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T07:42:32.160Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appwrite.network","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 19 Feb 2026 09:02:04 GMT","end":"Sat, 21 Mar 2026 09:02:03 GMT"},"fingerprint":{"sha1":"BB:42:D6:8B:D9:B6:35:70:93:EB:1F:D3:7B:BD:55:20:7D:A8:6E:DC","sha256":"82:78:87:06:82:45:9B:50:3E:FA:94:CE:8A:0E:B3:8E:17:77:0D:A9:9D:C5:2E:4D:14:74:80:A8:5B:21:E3:DD"}}},"request":{"raw":"GET /? HTTP/1.1\r\nHost: extention-card.appwrite.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extention-card.appwrite.network/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\netag: \"c0d6a8cd1dc7061a26e117ab74042825\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 69881c2f001fb7d769f5\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.14042186737061\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Wed, 04 Mar 2026 07:42:32 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":458,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c0d6a8cd1dc7061a26e117ab74042825","sha1":"938b8120f3f7dba367657bbcae7a8672ce709e74","sha256":"3d3d1f7fc1ef560d3c3194e4f7868e3a5cafac49f24f3b571df5a90289716377","sha512":"2490c8f2675ec06f13bf813db13d175ac660ad1ffbb06195c3cce911ad99f918d0b28885e83931882cc4248baf08c25187ebb40ec0d54c443e5865d848b93368","ssdeep":"","tlshash":"93f05c42cce08d1652304651aec1f5085a86f79b8389ad5862aba0bd4fc4782ceef5b8","first_seen":"2026-02-28T09:56:05.234833Z","last_seen":"2026-03-08T13:50:22.027039Z","times_seen":10,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extention-card.appwrite.network/assets/index-D3u2Xgi_.css","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extention-card.appwrite.network/?#/login","date":"2026-03-04T07:42:32.404Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appwrite.network","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 19 Feb 2026 09:02:04 GMT","end":"Sat, 21 Mar 2026 09:02:03 GMT"},"fingerprint":{"sha1":"BB:42:D6:8B:D9:B6:35:70:93:EB:1F:D3:7B:BD:55:20:7D:A8:6E:DC","sha256":"82:78:87:06:82:45:9B:50:3E:FA:94:CE:8A:0E:B3:8E:17:77:0D:A9:9D:C5:2E:4D:14:74:80:A8:5B:21:E3:DD"}}},"request":{"raw":"GET /assets/index-D3u2Xgi_.css HTTP/1.1\r\nHost: extention-card.appwrite.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extention-card.appwrite.network/?\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/css; charset=utf-8\r\netag: \"fa43040146c35fb502bc5b6768f9015b\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 69881c2f001fb7d769f5\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.13314604759216\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Wed, 04 Mar 2026 07:42:32 GMT\r\nvia: 1.1 varnish\r\nage: 3\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 8714\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8714,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8713)","md5":"fa43040146c35fb502bc5b6768f9015b","sha1":"d44f4fecac1272cbc6c8cc495ce69537fdc0b7f7","sha256":"2942d17675724fd4b00152f4e3762b5feb32291f42f72e19b062fa0a34920f3d","sha512":"644111897480084e6ccba3a61f41e188c1d8bb7cbf8900219336ff401086a1330d9795eb0ce377e17a2bc1cf28be05c355ecadc1a6609a21602f048fb9e62add","ssdeep":"96:LetY6N835bQjtd7T/tyom9GOht9OWxIEfOO1YVjmC+q0nckB1mznv:MbGp0jtdt69tPxIEfOO1YVjmhq09mz","tlshash":"9302b8b9e054b23d7c27f9a9765c9a9d7104b462c42347aafc95713888c7bf30771748","first_seen":"2026-02-24T01:39:36.199131Z","last_seen":"2026-03-08T13:50:22.026345Z","times_seen":20,"resource_available":false,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extention-card.appwrite.network/","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-04T07:42:29.096Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appwrite.network","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 19 Feb 2026 09:02:04 GMT","end":"Sat, 21 Mar 2026 09:02:03 GMT"},"fingerprint":{"sha1":"BB:42:D6:8B:D9:B6:35:70:93:EB:1F:D3:7B:BD:55:20:7D:A8:6E:DC","sha256":"82:78:87:06:82:45:9B:50:3E:FA:94:CE:8A:0E:B3:8E:17:77:0D:A9:9D:C5:2E:4D:14:74:80:A8:5B:21:E3:DD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: extention-card.appwrite.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/html; charset=utf-8\r\netag: \"c0d6a8cd1dc7061a26e117ab74042825\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 69881c2f001fb7d769f5\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.18648910522461\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: miss\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Wed, 04 Mar 2026 07:42:29 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 458\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":458,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"c0d6a8cd1dc7061a26e117ab74042825","sha1":"938b8120f3f7dba367657bbcae7a8672ce709e74","sha256":"3d3d1f7fc1ef560d3c3194e4f7868e3a5cafac49f24f3b571df5a90289716377","sha512":"2490c8f2675ec06f13bf813db13d175ac660ad1ffbb06195c3cce911ad99f918d0b28885e83931882cc4248baf08c25187ebb40ec0d54c443e5865d848b93368","ssdeep":"","tlshash":"93f05c42cce08d1652304651aec1f5085a86f79b8389ad5862aba0bd4fc4782ceef5b8","first_seen":"2026-02-28T09:56:05.234833Z","last_seen":"2026-03-08T13:50:22.027039Z","times_seen":10,"resource_available":true,"data":null}},"time_used":396,"timings":{"blocked":67,"dns":6,"connect":26,"send":0,"wait":261,"receive":1,"ssl":31},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extention-card.appwrite.network/assets/index-DciPYpnM.js","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://extention-card.appwrite.network/?#/login","date":"2026-03-04T07:42:32.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appwrite.network","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 19 Feb 2026 09:02:04 GMT","end":"Sat, 21 Mar 2026 09:02:03 GMT"},"fingerprint":{"sha1":"BB:42:D6:8B:D9:B6:35:70:93:EB:1F:D3:7B:BD:55:20:7D:A8:6E:DC","sha256":"82:78:87:06:82:45:9B:50:3E:FA:94:CE:8A:0E:B3:8E:17:77:0D:A9:9D:C5:2E:4D:14:74:80:A8:5B:21:E3:DD"}}},"request":{"raw":"GET /assets/index-DciPYpnM.js HTTP/1.1\r\nHost: extention-card.appwrite.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extention-card.appwrite.network/?\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"858fab447df30e578a9f2afefa7bf063\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 69881c2f001fb7d769f5\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.14020919799805\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Wed, 04 Mar 2026 07:42:32 GMT\r\nvia: 1.1 varnish\r\nage: 3\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 275874\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":275874,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (42695)","md5":"858fab447df30e578a9f2afefa7bf063","sha1":"4224e5d5598fb0012541a42829e4e44ee079924d","sha256":"bb51a7e34ecef3a14e17f5bf6cd3dc17f4e0ae8115896ab8df7e8c6c4c16ac87","sha512":"068c5b5485a612f411c21972704f36c0d82ebc9dd59292dc0014e26813480934bc1a4aa0ac02a57dc3326ac14d7238ff0c8bcdf37ed0015bc942a53a105bc04e","ssdeep":"3072:rqcTaRci5Tw8u7/jgawmQEthVDoJPsz/zXP5ZOKw6nQjSsyWO42nGw6eaKspt4+W:roRXzOfvtZ9s2CB55e","tlshash":"f7444be8316db6667fb246a500af110771792d37640d88b0e124ed7a27b844a70bbffd","first_seen":"2026-02-28T09:56:05.236317Z","last_seen":"2026-03-08T13:50:22.025744Z","times_seen":10,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extention-card.appwrite.network/vite.svg","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://extention-card.appwrite.network/?#/login","date":"2026-03-04T07:42:32.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appwrite.network","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 19 Feb 2026 09:02:04 GMT","end":"Sat, 21 Mar 2026 09:02:03 GMT"},"fingerprint":{"sha1":"BB:42:D6:8B:D9:B6:35:70:93:EB:1F:D3:7B:BD:55:20:7D:A8:6E:DC","sha256":"82:78:87:06:82:45:9B:50:3E:FA:94:CE:8A:0E:B3:8E:17:77:0D:A9:9D:C5:2E:4D:14:74:80:A8:5B:21:E3:DD"}}},"request":{"raw":"GET /vite.svg HTTP/1.1\r\nHost: extention-card.appwrite.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extention-card.appwrite.network/?\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: image/svg+xml\r\netag: \"8e3a10e157f75ada21ab742c022d5430\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 69881c2f001fb7d769f5\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.1328330039978\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\ndate: Wed, 04 Mar 2026 07:42:32 GMT\r\nvia: 1.1 varnish\r\nage: 2\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: HIT\r\nx-cache-hits: 1\r\ncontent-length: 1497\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1497,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8e3a10e157f75ada21ab742c022d5430","sha1":"f7f39d7237b791a945d52a5cd7a8fb365f313366","sha256":"4a748afd443918bb16591c834c401dae33e87861ab5dbad0811c3a3b4a9214fb","sha512":"fbf065e26d907454cb432a17d831f448e1c3df0f33cd681ccc52b63e5bc26bc9e4de08591a2de579e5b05219fcffd3b4d4261ada6fa55299e731343df860488d","ssdeep":"","tlshash":"2031451fda7fd4fec0a6cb48e612b047962c30d95e41c5b4d9845f0e64a19f17c0aa64","first_seen":"2023-05-18T16:20:30Z","last_seen":"2026-04-04T13:25:47.281659Z","times_seen":3224,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"extention-card.appwrite.network/assets/index-D3u2Xgi_.css","fqdn":"extention-card.appwrite.network","domain":"extention-card.appwrite.network","tld":"appwrite.network"},"ip":{"addr":"151.101.195.52","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://extention-card.appwrite.network/","date":"2026-03-04T07:42:29.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"appwrite.network","organization":""},"issuer":{"commonName":"Certainly Intermediate R1","organization":"Certainly"},"validity":{"start":"Thu, 19 Feb 2026 09:02:04 GMT","end":"Sat, 21 Mar 2026 09:02:03 GMT"},"fingerprint":{"sha1":"BB:42:D6:8B:D9:B6:35:70:93:EB:1F:D3:7B:BD:55:20:7D:A8:6E:DC","sha256":"82:78:87:06:82:45:9B:50:3E:FA:94:CE:8A:0E:B3:8E:17:77:0D:A9:9D:C5:2E:4D:14:74:80:A8:5B:21:E3:DD"}}},"request":{"raw":"GET /assets/index-D3u2Xgi_.css HTTP/1.1\r\nHost: extention-card.appwrite.network\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://extention-card.appwrite.network/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-type: text/css; charset=utf-8\r\netag: \"fa43040146c35fb502bc5b6768f9015b\"\r\nserver: swoole-http-server\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-appwrite-project-id: 69881c2f001fb7d769f5\r\nx-appwrite-traffic-type: site\r\nx-content-type-options: nosniff\r\nx-debug-speed: 0.13314604759216\r\nx-edge-location: fra\r\nx-edge-rule-cache: hit\r\nx-edge-runtime-cache: hit\r\naccept-ranges: bytes\r\nage: 0\r\ndate: Wed, 04 Mar 2026 07:42:29 GMT\r\nvia: 1.1 varnish\r\nx-served-by: cache-hel1410022-HEL\r\nx-cache: MISS\r\nx-cache-hits: 0\r\nx-appwrite-edge-server: 0bBHNYBByXcKOErbUf2l16--F_fra1\r\ncontent-length: 8714\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":8714,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (8713)","md5":"fa43040146c35fb502bc5b6768f9015b","sha1":"d44f4fecac1272cbc6c8cc495ce69537fdc0b7f7","sha256":"2942d17675724fd4b00152f4e3762b5feb32291f42f72e19b062fa0a34920f3d","sha512":"644111897480084e6ccba3a61f41e188c1d8bb7cbf8900219336ff401086a1330d9795eb0ce377e17a2bc1cf28be05c355ecadc1a6609a21602f048fb9e62add","ssdeep":"96:LetY6N835bQjtd7T/tyom9GOht9OWxIEfOO1YVjmC+q0nckB1mznv:MbGp0jtdt69tPxIEfOO1YVjmhq09mz","tlshash":"9302b8b9e054b23d7c27f9a9765c9a9d7104b462c42347aafc95713888c7bf30771748","first_seen":"2026-02-24T01:39:36.199131Z","last_seen":"2026-03-08T13:50:22.026345Z","times_seen":20,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-04","alert":"Sinkholed","trigger":"extention-card.appwrite.network","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}