{"report_id":"83ffd387-b53e-4418-8f14-e5f86240c9dc","version":0,"status":"done","tags":[],"date":"2026-10-10T22:21:10Z","url":{"schema":"http","addr":"duriangowhere.com/","fqdn":"duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Singapore","country_code":"SG"},"final":{"url":{"schema":"https","addr":"www.duriangowhere.com/","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"title":"Home","dom":{"size":6985,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4224)","md5":"a2cc8eab28ba2655c96f403f18e5c1a2","sha1":"c0e43f36cd811997485c88105bd5e5fe658a6a02","sha256":"a9b0d67996b1950240ecfa1f1a22b65309b1abfee4ab7fe84f3734cbaac4b7c7","sha512":"3b5c88750680c8a778af60be4ae30b0e26e7d7e9128b5c09eaa9d66dfccb3ab37b9a3a8da500e60dd4969214ebe2b74b50675698c80b94dd69c54f62c524c865","ssdeep":"192:3joyxJaovwXshhPr6W3bChuiAhurmlnisXoFLlC1+x8hI:+FXshhPBrCEiAhurmlnisXoFLo1+ShI","tlshash":"e9e184241704142cb6135d21f7b53322322e934e4b1d6154797e72b59bf6d8b892bef8","dom_hash":"domhashabe9805266bc98fcebed964786beda8c","first_seen":"2026-10-10T22:21:24.851813Z","last_seen":"2026-10-10T22:21:24.851813Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"duriangowhere.com/","fqdn":"duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":0,"asn":16509,"as":"Amazon.com, Inc.","country":"Singapore","country_code":"SG"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-14T22:21:10Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.duriangowhere.com","ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":19,"request_count":19,"received_data":3751943,"sent_data":10514,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"duriangowhere.com","ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-10-10T22:21:16.538411Z","last_seen":"2026-10-10T22:21:16.538411Z","alert_count":1,"request_count":1,"received_data":180,"sent_data":486,"comment":"","tags":null,"fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.duriangowhere.com/_expo/static/js/web/AppEntry-44ec2a32d94beb72970a43834cd9ce1c.js","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"introduction_type":"scriptElement","is_inline":false,"md5":"44ec2a32d94beb72970a43834cd9ce1c","sha1":"fff76f87e5cc009d5b57ed3a9250949e24224332","sha256":"aea0131cfcbf88891da82761762199dd1262907b4aa8936a2c5a52fb42d3194a","sha512":"72b022754188119324aeaf17b60737ed6461ffb2478765d60af940f52758baa9aaeec3c5c025b0ab4e485dce0e5b96c9b024bdf410c28551934c0e44092ee150","ssdeep":"49152:H7p5cbBp+NGpq8LkUMRIG0BXd/LKKZVemX:lWQKx","tlshash":"5dd597ba35d4f5d10182d4dc483f5086f22b1dbe122d34d0fba68ad9ee6058da0e6f97","size":2980974,"data":"","first_seen":"2026-10-10T22:21:24.919908Z","last_seen":"2026-10-10T22:21:24.919908Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"🏪 Fetching vendor deals from API...","filename":"https://www.duriangowhere.com/_expo/static/js/web/AppEntry-44ec2a32d94beb72970a43834cd9ce1c.js","line_number":11705,"column_number":4868},{"level":"log","text":"✅ Vendor deals loaded: 1 vendors","filename":"https://www.duriangowhere.com/_expo/static/js/web/AppEntry-44ec2a32d94beb72970a43834cd9ce1c.js","line_number":11705,"column_number":5075},{"level":"warn","text":"API request attempt 1 failed:map[actor:server1.conn0.watcher14.process7//obj21 class:Object extensible:true frozen:false isError:false ownPropertyLength:3 preview:map[kind:Object ownProperties:map[attempt:map[configurable:true enumerable:true value:1 writable:true] error:map[configurable:true enumerable:true value:Route not found: GET /api/hot-deals/price-history writable:true] url:map[configurable:true enumerable:true value:https://www.duriangowhere.com/api/hot-deals/price-history?country=SG\u0026range=1M\u0026variety=msw writable:true]] ownPropertiesLength:3] sealed:false type:object]","filename":"https://www.duriangowhere.com/_expo/static/js/web/AppEntry-44ec2a32d94beb72970a43834cd9ce1c.js","line_number":11705,"column_number":1539}]},"http":[{"url":{"schema":"https","addr":"www.duriangowhere.com/assets/node_modules/@expo-google-fonts/caprasimo/400Regular/Caprasimo_400Regular.54cc2fb9aeecccedde96c183678cbdd8.ttf","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.129Z","timestamp":1791670837129,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /assets/node_modules/@expo-google-fonts/caprasimo/400Regular/Caprasimo_400Regular.54cc2fb9aeecccedde96c183678cbdd8.ttf HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=604800, public, immutable\r\ncontent-type: application/octet-stream\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: \"6a990d4d-a2b0\"\r\nexpires: Sat, 17 Oct 2026 22:20:37 GMT\r\nlast-modified: Thu, 03 Sep 2026 06:01:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 41648\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":41648,"size_decoded":42185,"mime_type":"application/octet-stream","magic":"TrueType Font data, 13 tables, 1st \"GPOS\", 13 names, Microsoft, language 0x409","md5":"54cc2fb9aeecccedde96c183678cbdd8","sha1":"69635154ccd4f68233cdc59173d6d32de5241d56","sha256":"54565d93f25b94da3d5e9179739b263d49b3247dd0783740eb92865a1d4d5339","sha512":"16ad518d823128026ffc7fdf3e6073e414fdc33bcea03eb7a64b065d28d5e9419404f766b920929994b55fa997f2d05a69b60ab547fcdb8df3143d28dea0153f","ssdeep":"768:3pexu9+JRsS45xxMErzoBSPiyG00qQugHEBzcDeefYOr69kruRGOvMW1:3Yxu9+fy/Si5JZz7VE8","tlshash":"7c137d17d7a2fb1cd92772fa84b5b20289fa77297b7a450fd00a2a73f45d400d84a74e","first_seen":"2025-10-24T10:00:48.048353Z","last_seen":"2026-10-10T22:21:24.855366Z","times_seen":7,"resource_available":false,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":237,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/assets/assets/brand/price-signal-horizontal.10cd8fbef5e7f3cea1d7557c356d858b.png","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.135Z","timestamp":1791670837135,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /assets/assets/brand/price-signal-horizontal.10cd8fbef5e7f3cea1d7557c356d858b.png HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=604800, public, immutable\r\ncontent-type: image/png\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: \"6a990d4c-3a491\"\r\nexpires: Sat, 17 Oct 2026 22:20:37 GMT\r\nlast-modified: Thu, 03 Sep 2026 06:01:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 238737\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":238737,"size_decoded":239261,"mime_type":"image/png","magic":"PNG image data, 1282 x 233, 8-bit/color RGBA, non-interlaced","md5":"10cd8fbef5e7f3cea1d7557c356d858b","sha1":"db900cd4de27694933430e2cc1a817ea9a78011a","sha256":"ea5f3e30f869b13b5627eee21ee39afc4741dcddd8734e664d37ae4f97c082f6","sha512":"9fc384f7441c79832efbe9c3c27e02a09c6c8d8c20dba4346bd2e26819dbf8c01a60eb20bac990163a085228d0ba3d7daba0c619d0589de43f42d86aac79a701","ssdeep":"6144:RdxFLGnTMD32c3mFmqAIysf1/lIFDtRVrjbTeZY//aY:RnFL1D3aIqJBf8bVfTaY","tlshash":"4834221796fbfe1c6d44a147b0a11d4b40c36498831fe7838c72ab5261cd85bbbba368","first_seen":"2026-10-10T22:21:24.861477Z","last_seen":"2026-10-10T22:21:24.861477Z","times_seen":1,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":263,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/assets/assets/durian2.583ab2f9ac31c4b1457f65e9f967f767.jpg","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.137Z","timestamp":1791670837137,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /assets/assets/durian2.583ab2f9ac31c4b1457f65e9f967f767.jpg HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=604800, public, immutable\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: \"6a990d4d-298e7\"\r\nexpires: Sat, 17 Oct 2026 22:20:37 GMT\r\nlast-modified: Thu, 03 Sep 2026 06:01:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 170215\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":170215,"size_decoded":170740,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 716x472, components 3","md5":"583ab2f9ac31c4b1457f65e9f967f767","sha1":"76b6266f7e70c4f5069b4f4f5faa4d458bb84c9a","sha256":"18795156ffacdc31aab38841dc2abe1a2c330c54124349cbd5e2fa3fb2e8064a","sha512":"0dceda1c2e39a986bf5c1cc0ca2584bb450b247da54f0290b87bca23608caac5db38dd6741ac670c4f3a753cecdabc2ac478029ee2c6f6dedc2e57eaf28569f3","ssdeep":"3072:GZ8QUbqRaJWw8GpF6M6Y0KXHFsfXQh8AzPF0OSmg9FtLU5WYTR5eJJ:GZ8pqRagVGp+oXHUO8JpmgOgCR5eX","tlshash":"5bf3123b633067ee3f712a5a4f474917b6e38f2eb498a91e37ed4add1fa168210c4105","first_seen":"2026-10-10T22:21:24.863374Z","last_seen":"2026-10-10T22:21:24.863374Z","times_seen":1,"resource_available":false,"data":null}},"time_used":541,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":279,"receive":262,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/api/hot-deals/price-history?country=SG\u0026range=1M\u0026variety=msw","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.706Z","timestamp":1791670837706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /api/hot-deals/price-history?country=SG\u0026range=1M\u0026variety=msw HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: W/\"7d-ujtfnFawoh48M5q5zpABbrgLi+M\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 125\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":125,"size_decoded":1057,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"59d724895d825094208874796a16cc3c","sha1":"ba3b5f9c56b0a21e3c339ab9ce90016eb80b8be3","sha256":"c4a161312a5dc110bf6189706f1bd619f1eb61c412a1e0b8006515b3a936c21e","sha512":"a7cbea3237219768a184e484e18737e45a03c4eac2af418d7ba08716712e3114783309efb4e45839a24d8161f49cb5c4b2b875553659b439e8ae707ce57ff1fa","ssdeep":"","tlshash":"fab02b4e0147107b1c514268c8090d8306c8ea6749300d01d304c11d9d064df1404431","first_seen":"2026-10-10T22:21:24.866164Z","last_seen":"2026-10-10T22:21:24.866164Z","times_seen":1,"resource_available":true,"data":null}},"time_used":268,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":268,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"duriangowhere.com/","fqdn":"duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:20:32.788Z","timestamp":1791670832788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"44:96:7E:6D:B0:0B:A8:C6:F9:93:D9:3D:5B:AB:95:F2:B8:BE:95:04","sha256":"AB:B0:BE:4A:EB:7E:B0:49:E4:31:AB:B2:2B:C4:36:35:E7:97:84:FB:81:56:4F:D9:6B:E4:53:00:CC:D9:61:95"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nalt-svc: h3=\":443\"; ma=2592000\r\nlocation: https://www.duriangowhere.com/\r\nserver: Caddy\r\ncontent-length: 0\r\ndate: Sat, 10 Oct 2026 22:20:33 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Caddy","description":"","website":"https://caddyserver.com","common_platform_enumeration":"cpe:2.3:a:caddyserver:caddy:*:*:*:*:*:*:*:*","icon":"caddy.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-12T10:30:28.949778Z","times_seen":19052762,"resource_available":true,"data":null}},"time_used":1070,"timings":{"blocked":-1,"dns":42,"connect":253,"send":0,"wait":256,"receive":0,"ssl":518},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-10T22:20:33.868Z","timestamp":1791670833868,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: text/html\r\ndate: Sat, 10 Oct 2026 22:20:34 GMT\r\netag: W/\"6a990d4c-4c6\"\r\nlast-modified: Thu, 03 Sep 2026 06:01:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":1222,"size_decoded":1079,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"86103faf6e80ebf0b187d8132bd93b1f","sha1":"2e7f734ab9e7995ef181a98d743ba4c0c9004ce2","sha256":"8dceb083b638328505311a661704a4a261717b35e38b185fdc696e8464fa6d5a","sha512":"4327376776becfecdd6ee352cf1a1edae698f7bbf6497f640d39034d8c9fadbaf5f66b44874e8a52cea76afe17913f9cf51e8fade9974bda99ec4ffbb2b7a11c","ssdeep":"","tlshash":"55216049eee2918a440042365ae4e11d8e06eacf43c9f86478cc6b244f22f049cdf0f4","first_seen":"2026-10-10T22:21:24.868582Z","last_seen":"2026-10-10T22:21:24.868582Z","times_seen":1,"resource_available":true,"data":null}},"time_used":843,"timings":{"blocked":0,"dns":65,"connect":254,"send":0,"wait":261,"receive":0,"ssl":262},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/assets/node_modules/@expo-google-fonts/figtree/700Bold/Figtree_700Bold.c35c3ee5c1bab1acfe1e0d71549dd501.ttf","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.132Z","timestamp":1791670837132,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /assets/node_modules/@expo-google-fonts/figtree/700Bold/Figtree_700Bold.c35c3ee5c1bab1acfe1e0d71549dd501.ttf HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=604800, public, immutable\r\ncontent-type: application/octet-stream\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: \"6a990d4d-9d84\"\r\nexpires: Sat, 17 Oct 2026 22:20:37 GMT\r\nlast-modified: Thu, 03 Sep 2026 06:01:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 40324\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":40324,"size_decoded":40861,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409","md5":"c35c3ee5c1bab1acfe1e0d71549dd501","sha1":"82e096f1e69d1b880b3a0e7c28c03d54a56152c5","sha256":"183bf1a8523731738c72be9aa8236453a21d6a3ed70bd8e5266723b212331dc4","sha512":"7e54e99b3add8f6fda432b13970a4b9bb5e98ddd25645ff726b6cebd7fcb94bc1a3ff7d5ebba8a4160ee90960cd804c65f4e4d46e89d2472d7262ed08ee87a0b","ssdeep":"768:m4IYl67DNYCS2JyZivaVi0upHO9gVJQ26AgYbNZeUpPoeR:NCXkiikXHygV+xWHeUBoM","tlshash":"cb033b11f3136649d35aadbc81b343949739fd347ba2c31b8465e67fecaf9a04c62248","first_seen":"2025-10-23T05:11:17.920149Z","last_seen":"2026-10-10T22:21:24.87312Z","times_seen":78,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/api/sellers/map?country=SG","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.146Z","timestamp":1791670837146,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /api/sellers/map?country=SG HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: W/\"69-zdYRBf40JodyduoNdbMql69CQa4\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 105\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":105,"size_decoded":1037,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"4213cfdd239ae6119f464daff46f1fa4","sha1":"cdd61105fe3426877276ea0d75b32a97af4241ae","sha256":"231b53ec375e47da2c1cba131df8adc9c91d89200a70e0d7aad49b7cd4dee2e3","sha512":"a98b63a03b29b1102015d589c1196f95601d62154c367481efc005baab4c4f2e33e2d8a01f5e6a3dd1effaa670ebb4f3c4813e1443a778ae86ecfab622ce433f","ssdeep":"","tlshash":"6bb0120c351135bbad60e310903d3955cfb462334440007557d88b489f8fa2f246ac3a","first_seen":"2026-10-10T22:21:24.874602Z","last_seen":"2026-10-10T22:21:24.874602Z","times_seen":1,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/api/sellers/delivery-only?country=SG","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.148Z","timestamp":1791670837148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /api/sellers/delivery-only?country=SG HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: W/\"67-ukNWkwUaQtVD4peZTq4jDOHnCV0\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 103\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":103,"size_decoded":1035,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"02fd44722adcc87782ad378c12a22422","sha1":"ba435693051a42d543e297994eae230ce1e7095d","sha256":"f19b56067ebd77c030d1c5282b97dcb5bc2f8582c6d2eb44c830b638ed5a3bad","sha512":"895920b46f04502ae6599c85155983e18850b397c591dd92155521db06447bc2ccfa68d30dab5220d0827b34483093d31c70763766a17c30934be5b84a6c178b","ssdeep":"","tlshash":"cab0120c3901557bac90d310e03d3a468b78a273404000799788cb549f8bb2b246f436","first_seen":"2026-10-10T22:21:24.87727Z","last_seen":"2026-10-10T22:21:24.87727Z","times_seen":1,"resource_available":true,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/api/hot-deals/vendors?limit=100\u0026offset=0\u0026country=SG","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.149Z","timestamp":1791670837149,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /api/hot-deals/vendors?limit=100\u0026offset=0\u0026country=SG HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: W/\"b52-SMGdLQqE3TQNJIiuq0nRZXbk9+0\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 1732\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2898,"size_decoded":2707,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"eec089dc213441eb66a9454826896cb2","sha1":"48c19d2d0a84dd340d2488aeab49d16576e4f7ed","sha256":"57573d16bfce43ea4566b6db1cc9d0f7a2c7a55489b8a71e2fd2bd110ec4b3db","sha512":"1f5b8edfaadf27bbd46c00c18ccd76f73bcce7dd473a4af5f18d6a078612796e7b21c98bba084187c97b755fc2ea4564227d97becc2b60e5ccedd8364cd1c1f2","ssdeep":"","tlshash":"cb51c60fe5181a2849604381988e75c36fbe53f713903ef9e78e471ac3e83be256b052","first_seen":"2026-10-10T22:21:24.879498Z","last_seen":"2026-10-10T22:21:24.879498Z","times_seen":1,"resource_available":true,"data":null}},"time_used":503,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/_expo/static/js/web/AppEntry-44ec2a32d94beb72970a43834cd9ce1c.js","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:34.964Z","timestamp":1791670834964,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /_expo/static/js/web/AppEntry-44ec2a32d94beb72970a43834cd9ce1c.js HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=604800, public, immutable\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\ndate: Sat, 10 Oct 2026 22:20:35 GMT\r\netag: \"6a990d4d-2d7c6e\"\r\nexpires: Sat, 17 Oct 2026 22:20:35 GMT\r\nlast-modified: Thu, 03 Sep 2026 06:01:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nvary: Accept-Encoding\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":2980974,"size_decoded":583765,"mime_type":"application/javascript","magic":"React Native minified JavaScript, ASCII text, with very long lines (43089)","md5":"66240f3c07b895750ff2c4ee36c429f9","sha1":"37b236c27a911b48817ac0d33dd8b58935f2a59d","sha256":"2c82c328f523ddb67a6f57c6a46138cf842f3b891f8e87590cfb4bfa4b3c416a","sha512":"95d0e119571eea5fe32cf0c4c110791af7bdad231144e6171400cd5686a4788647e48e6073c6743c07609fb0cfcca29cf40b35f7406f9051b7c1525352c519b7","ssdeep":"6144:HjBIPxQooR61r0LisxG4hJpTq7ObqsJ2ifdH0xqIWMHjLUQdbMBiVNuPNYJdZcFu:HjB8j+fhUxqODhbBPcFIC6+NGpqi","tlshash":"f925637935e5f5d102c2909d403f1042f22b2ce7016575d0eb929edafea94cda0eaf9e","first_seen":"2026-10-10T22:21:24.880788Z","last_seen":"2026-10-10T22:21:24.880788Z","times_seen":1,"resource_available":true,"data":null}},"time_used":295,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":295,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/assets/assets/msw.626199f45b3443d76ba6b8c96ee87be9.jpg","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.139Z","timestamp":1791670837139,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /assets/assets/msw.626199f45b3443d76ba6b8c96ee87be9.jpg HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=604800, public, immutable\r\ncontent-type: image/jpeg\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: \"6a990d4d-1e9a2\"\r\nexpires: Sat, 17 Oct 2026 22:20:37 GMT\r\nlast-modified: Thu, 03 Sep 2026 06:01:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 125346\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":125346,"size_decoded":125871,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x837, components 3","md5":"626199f45b3443d76ba6b8c96ee87be9","sha1":"75d10d3a8b80dd69541b44cf1b0b75896d6026a0","sha256":"8dcd70235fe81d3f435002eb2a4627330a03d2806127a261c23e2da8810feda3","sha512":"93e436e23a88d4af7cb4bb31576cf72b2b37ef7bd5c490e42e629de122baeb07e916e7ca15a0ba9ddc7c8a6cf91f073bb43a40725f52d92d276f735fc0ae9ac4","ssdeep":"3072:jXjBQuL2xnkPTJFdWzETvxlmLqvJBdHGnO:jNQ7xnuTxW1evhmO","tlshash":"57c3125836f9ade499233c3ccd5ac502c7c5f4ddaea468d21823e7076cbc4952413be6","first_seen":"2026-10-10T22:21:24.882711Z","last_seen":"2026-10-10T22:21:24.882711Z","times_seen":1,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":256,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/api/analytics/events","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.171Z","timestamp":1791670837171,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"POST /api/analytics/events HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nContent-Type: application/json\r\nContent-Length: 266\r\nOrigin: https://www.duriangowhere.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":266,"data":"{\"events\":[{\"eventId\":\"event-ca901f90-a83f-4290-8c76-63c078d50f49\",\"visitorId\":\"visitor-45bd9d07-2f53-4bd2-bac7-eb5f6556dcb4\",\"sessionId\":\"session-fda752bc-cfb7-45f5-a488-39a5de4447bc\",\"eventName\":\"session_start\",\"occurredAt\":\"2026-10-10T22:20:37.169Z\",\"path\":\"/\"}]}"}},"response":{"raw":"HTTP/2 202 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: W/\"cd-kggVVs7au1CUi2Oksk1eGJAlNR0\"\r\norigin-agent-cluster: ?1\r\nratelimit: limit=300, remaining=298, reset=900\r\nratelimit-policy: 300;w=900\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":205,"size_decoded":1214,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"f6ce80c99e3971f66d85457c373aa576","sha1":"92081556cedabb50948b63a4b24d5e189025351d","sha256":"2c7b72ae0f27b5d932d246e87c2d6cb1da854bdfc64f755093bb9549c72cefdd","sha512":"c47f62c1df2949ec793f603bf5c1f818d8e70f80aec7c1a00025a479c79c2cd80f85ee5c798d502deebb43d2c0bb03184c50e409896a6c2ce3062102e263a6e8","ssdeep":"","tlshash":"b0d0221e360a8d3ebe32c3506018398b8ef16173ca8002c5a39c43004ba556e2002066","first_seen":"2026-10-10T22:21:24.884766Z","last_seen":"2026-10-10T22:21:24.884766Z","times_seen":1,"resource_available":true,"data":null}},"time_used":506,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":506,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/api/analytics/visits","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.175Z","timestamp":1791670837175,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"POST /api/analytics/visits HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nContent-Type: application/json\r\nContent-Length: 183\r\nOrigin: https://www.duriangowhere.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":183,"data":"{\"eventId\":\"8813cc45-22b2-4d41-bb89-24aa47b3109e\",\"pagePath\":\"/\",\"visitorId\":\"visitor-45bd9d07-2f53-4bd2-bac7-eb5f6556dcb4\",\"sessionId\":\"session-fda752bc-cfb7-45f5-a488-39a5de4447bc\"}"}},"response":{"raw":"HTTP/2 201 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: W/\"59-BePGlHBoY4dtB1StL7ajM/6RAcw\"\r\norigin-agent-cluster: ?1\r\nratelimit: limit=300, remaining=299, reset=900\r\nratelimit-policy: 300;w=900\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 89\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"201","status_text":"Created","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":89,"size_decoded":1097,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"473fe08bfc3234c52eb4beaaffd4fee1","sha1":"05e3c694706863876d0754ad2fb6a333fe9101cc","sha256":"a7cb5c10700d0922a28b353eebad50656abb93bd3f4b6a39bad26457a6d32a87","sha512":"8726c1f1e13e536e626dc92d656bd670eed96d8db50c0bfc9928fbfd8f3331d4de21f5df6c0393fef5d082819337c4d32ff9ffacbae8cd8777e12a141ce82c8b","ssdeep":"","tlshash":"feb0120539015432a881c32041283e464778623350001948234c9340ce2f43721154b3","first_seen":"2026-10-10T22:21:24.886121Z","last_seen":"2026-10-10T22:21:24.886121Z","times_seen":1,"resource_available":true,"data":null}},"time_used":502,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":502,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/assets/node_modules/@expo-google-fonts/figtree/400Regular/Figtree_400Regular.fde4a0ff6b61f88efd09f91f41c9a6da.ttf","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.126Z","timestamp":1791670837126,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /assets/node_modules/@expo-google-fonts/figtree/400Regular/Figtree_400Regular.fde4a0ff6b61f88efd09f91f41c9a6da.ttf HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=604800, public, immutable\r\ncontent-type: application/octet-stream\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: \"6a990d4d-9ccc\"\r\nexpires: Sat, 17 Oct 2026 22:20:37 GMT\r\nlast-modified: Thu, 03 Sep 2026 06:01:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 40140\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40140,"size_decoded":40677,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 33 names, Microsoft, language 0x409","md5":"fde4a0ff6b61f88efd09f91f41c9a6da","sha1":"b971ba6c123ca42604ae74840afd8e1ade6926ea","sha256":"4e2e9876c4a908c2cbe410ceb648e4724464a84492bd49cb2d6e7b0d3f769a66","sha512":"e490fd98b8fc51239716e0ab8d6e7d458022be58d0d6f0ede2a6a737cf68aedfaa0a96be4eaf61fb5c6be3d7f1c06ff7c594fb2215fda0d7dc95ad15ea77b493","ssdeep":"768:L8FSsx6L6r0JyZivQX0szDSyTzUtQL21d5HL56sWjAZFcWB3Q93QPf:oC6rEkiI1HqHLb+YccH","tlshash":"aa033b10f303d60de20619bc91b35bd4a3b4fc34eee2d35b5894ea6aec9f8a58d21745","first_seen":"2025-10-12T06:20:16.913774Z","last_seen":"2026-10-10T22:21:24.888061Z","times_seen":107,"resource_available":false,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/api/community/config","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.150Z","timestamp":1791670837150,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /api/community/config HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nContent-Type: application/json\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: zstd\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: W/\"3d1-+CU80LINwCt/Zs79NX3bQUfQBwU\"\r\norigin-agent-cluster: ?1\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin, Accept-Encoding\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 501\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":977,"size_decoded":1475,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"6522b9a3d04dc67c691d54f72cd34962","sha1":"f8253cd0b20dc02b7f66cefd357ddb4147d00705","sha256":"b5ac109fa67b8c560bcaf10b4069d26d2d8135dad55a42e139a4a67088e5a9fa","sha512":"0a3b99226f7eac83e2c4778dafc32ed61d94a29da48d338fd38528db0223ae1975f2f9f774fa8afebf24b5aba45a54eadda430631ae582b1e269726467934ee6","ssdeep":"","tlshash":"7f11b1ec18054dbed675f5e4650f3b8b2b35251b20c8289825ec4f18936b52a6a2583f","first_seen":"2026-10-10T22:21:24.890163Z","last_seen":"2026-10-10T22:21:24.890163Z","times_seen":1,"resource_available":true,"data":null}},"time_used":527,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":527,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/assets/node_modules/@expo-google-fonts/figtree/800ExtraBold/Figtree_800ExtraBold.2960d6e099892183db5484444ed152c0.ttf","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.696Z","timestamp":1791670837696,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /assets/node_modules/@expo-google-fonts/figtree/800ExtraBold/Figtree_800ExtraBold.2960d6e099892183db5484444ed152c0.ttf HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=604800, public, immutable\r\ncontent-type: application/octet-stream\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: \"6a990d4d-9d98\"\r\nexpires: Sat, 17 Oct 2026 22:20:37 GMT\r\nlast-modified: Thu, 03 Sep 2026 06:01:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 40344\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40344,"size_decoded":40881,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409","md5":"2960d6e099892183db5484444ed152c0","sha1":"d97c21729dc73543014923ccc5b9d5c4e02ebb09","sha256":"da5147648b41db54c9d4ddd628702152721caf063c23dacee8786ee980681074","sha512":"fb5a95c1570b8f5fb29bd79ceb9dd89da2d720a9afd514e7a29fbe659601f2cac4ce02d4ce98261b36f865e8d4052e6c1628fc4dad292aa0df47010332235117","ssdeep":"768:nJiMFn6zDNYWJJyZiva3S444444hO38KKbPnnH1iIR0a8g2:nrEkiifMK6PncIy7b","tlshash":"f7032a65f313eb49d38a69fc40778390a379fd3cea95db0b5095b66bfc8b8a54d00680","first_seen":"2025-12-04T04:01:43.58555Z","last_seen":"2026-10-10T22:21:24.892808Z","times_seen":11,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":265,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/api/analytics/events","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.726Z","timestamp":1791670837726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"POST /api/analytics/events HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/json\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nContent-Type: application/json\r\nContent-Length: 843\r\nOrigin: https://www.duriangowhere.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":843,"data":"{\"events\":[{\"eventId\":\"event-1ed68d16-be59-4483-83c5-5f168ced84c2\",\"visitorId\":\"visitor-45bd9d07-2f53-4bd2-bac7-eb5f6556dcb4\",\"sessionId\":\"session-fda752bc-cfb7-45f5-a488-39a5de4447bc\",\"eventName\":\"screen_view\",\"occurredAt\":\"2026-10-10T22:20:37.170Z\",\"screenName\":\"Home\",\"path\":\"/\"},{\"eventId\":\"event-58e7edc7-d9bf-41ee-9375-08cbfc357463\",\"visitorId\":\"visitor-45bd9d07-2f53-4bd2-bac7-eb5f6556dcb4\",\"sessionId\":\"session-fda752bc-cfb7-45f5-a488-39a5de4447bc\",\"eventName\":\"screen_exit\",\"occurredAt\":\"2026-10-10T22:20:37.174Z\",\"screenName\":\"Home\",\"path\":\"/\",\"durationMs\":4},{\"eventId\":\"event-0e407dc8-e8f2-460a-9301-5d0c01b580e6\",\"visitorId\":\"visitor-45bd9d07-2f53-4bd2-bac7-eb5f6556dcb4\",\"sessionId\":\"session-fda752bc-cfb7-45f5-a488-39a5de4447bc\",\"eventName\":\"screen_view\",\"occurredAt\":\"2026-10-10T22:20:37.174Z\",\"screenName\":\"Home\",\"path\":\"/\"}]}"}},"response":{"raw":"HTTP/2 202 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-security-policy: default-src 'self';base-uri 'self';font-src 'self' https: data:;form-action 'self';frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline'\r\ncontent-type: application/json; charset=utf-8\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: same-origin\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: W/\"cd-jN/fbyaCHDY3UgsdKnX1muo5Uuo\"\r\norigin-agent-cluster: ?1\r\nratelimit: limit=300, remaining=297, reset=900\r\nratelimit-policy: 300;w=900\r\nreferrer-policy: strict-origin-when-cross-origin, no-referrer\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nvary: Origin\r\nx-content-type-options: nosniff, nosniff\r\nx-dns-prefetch-control: off\r\nx-download-options: noopen\r\nx-frame-options: DENY, SAMEORIGIN\r\nx-permitted-cross-domain-policies: none\r\nx-xss-protection: 0\r\ncontent-length: 205\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":205,"size_decoded":1214,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"32ade011171b0e297dc4d344a71ecefe","sha1":"8cdfdf6f26821c3637520b1d2a75f59aea3952ea","sha256":"5dd56f9a4377fdaf43db70a372adfecfcd83b5382ccf2b68c70d968e2c39174e","sha512":"1747f49e03efe1af1af9c18fcad1116717fbcc55470e882352bf1d1eccaab4b53af38991c2296851fec8f3350512ca53a0d1db5fedb9d8510cc92622fa2f3d85","ssdeep":"","tlshash":"d4d0221e3e050dbebf32c39090a83d878ef13573cb8002c6a29843004ba556e2408026","first_seen":"2026-10-10T22:21:24.894403Z","last_seen":"2026-10-10T22:21:24.894403Z","times_seen":1,"resource_available":true,"data":null}},"time_used":267,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/favicon.ico","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:36.229Z","timestamp":1791670836229,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-type: image/x-icon\r\ndate: Sat, 10 Oct 2026 22:20:36 GMT\r\netag: \"6a990d4c-38ae\"\r\nlast-modified: Thu, 03 Sep 2026 06:01:48 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 14510\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":14510,"size_decoded":14945,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel","md5":"1f44ae3a48e866ee50854364951c0ab5","sha1":"463417c81f81c88bb88af0b242e912df47af4bcd","sha256":"821b6ce9230829abc0b1233da211f6b57f55d4af64afd64924cabd1ce3fdb654","sha512":"86ea50cdb7648de9399f75745e96d986d4cd3d8f4cb22d25ccd815b5c89c57afcfef428545fc44699ac8ca07c498b0828fc413b0256acb1108797c5c5fd5017f","ssdeep":"48:+7I9vqh0Z1Yl3YURM9kX05xRF8vnuCRuvt63dDhVrOHQ7uOCOb:+7IHfqaj5fiv1Z9P7ueb","tlshash":"38524f02b839c45cf9e245b9673be601deab6d23c373c5608c4a35e94c379c335ab956","first_seen":"2026-10-10T22:21:24.895903Z","last_seen":"2026-10-10T22:21:24.895903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":303,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.duriangowhere.com/assets/node_modules/@expo-google-fonts/figtree/600SemiBold/Figtree_600SemiBold.0aea8911a39371620ecd59ab2a49e642.ttf","fqdn":"www.duriangowhere.com","domain":"duriangowhere.com","tld":"com"},"ip":{"addr":"18.136.237.222","port":443,"asn":16509,"as":"AMAZON-02","country":"Singapore","country_code":"SG"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.duriangowhere.com/","date":"2026-10-10T22:20:37.123Z","timestamp":1791670837123,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.duriangowhere.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 07 Oct 2026 20:49:54 GMT","end":"Tue, 05 Jan 2027 20:49:53 GMT"},"fingerprint":{"sha1":"40:A3:82:42:4E:DB:4B:3B:30:40:C4:8F:01:3C:88:A5:C7:A0:F2:99","sha256":"AD:EE:D4:5C:39:74:5C:DF:F8:A9:58:24:06:30:3B:B5:57:EB:16:F1:9E:45:C5:70:47:B2:26:A2:4F:56:8C:E0"}}},"request":{"raw":"GET /assets/node_modules/@expo-google-fonts/figtree/600SemiBold/Figtree_600SemiBold.0aea8911a39371620ecd59ab2a49e642.ttf HTTP/1.1\r\nHost: www.duriangowhere.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://www.duriangowhere.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: max-age=604800, public, immutable\r\ncontent-type: application/octet-stream\r\ndate: Sat, 10 Oct 2026 22:20:37 GMT\r\netag: \"6a990d4d-9da8\"\r\nexpires: Sat, 17 Oct 2026 22:20:37 GMT\r\nlast-modified: Thu, 03 Sep 2026 06:01:49 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: Caddy, nginx/1.28.3 (Ubuntu)\r\nstrict-transport-security: max-age=31536000\r\nx-content-type-options: nosniff\r\nx-frame-options: DENY\r\ncontent-length: 40360\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.3","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":40360,"size_decoded":40897,"mime_type":"application/octet-stream","magic":"TrueType Font data, 16 tables, 1st \"GDEF\", 35 names, Microsoft, language 0x409","md5":"0aea8911a39371620ecd59ab2a49e642","sha1":"17f9c71ec7a0e79fe74b6e0f14b64f3b55dae9cb","sha256":"1b76aae525b51758fc0c9c5096f33d90831657d3ad2fe3c34fb7e666d76f8960","sha512":"65703e645d4e932925d4c52e07488c5d623b245480ff01f4caf166e90e4c29c99f46b7f1388d687ef53c81f157ebbc0a904661de810fe3d0a615c483974cd945","ssdeep":"768:OI4ajP6zDNYP5JyZivaW0aMZiROWYPxzJSY1wJdxj:UavPfkiij2Y9kd","tlshash":"50032963b343970dd2566cf88173c390a7b8bc39bd92d31bb895e95eec9e8a04d21644","first_seen":"2025-12-03T16:24:46.010392Z","last_seen":"2026-10-10T22:21:24.898047Z","times_seen":50,"resource_available":false,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-10","alert":"Sinkholed","trigger":"www.duriangowhere.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}