{"report_id":"8670b392-7362-4419-b9e3-0f83cf1d78d5","version":6,"status":"done","tags":[],"date":"2025-11-09T21:20:47Z","url":{"schema":"http","addr":"immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","fqdn":"immortal.rs","domain":"immortal.rs","tld":"rs"},"ip":{"addr":"91.240.21.6","port":0,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"final":{"url":{"schema":"https","addr":"immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","fqdn":"immortal.rs","domain":"immortal.rs","tld":"rs"},"title":"Ez Roblox Beaming","dom":{"size":12545,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (7565)","md5":"f8f76760f76068e7593862b1c54ae3c0","sha1":"1eef73d0caf07e3f753ff57d64cc05ba10bc8be2","sha256":"6c34b1aaaad20dadd07ec6f9b50b25d75a2a71473773c855419d561f770c30e9","sha512":"88de7bec7d37da9c46b2c84920656c9f53eae9175afdae08b83eb9c4b16da57add992575789595c378e77a12b9fe1d80757c82bc73a1915ef78e7b3252b9cea1","ssdeep":"192:mhfvD+LoJf7JXeS7JXex/27xH659Vi2LXvWBde4EoE/iGQX5QICPCBx0Qwj:mFblhL7MlfLzoGiGQJQICPQS","tlshash":"7f42c7756250011e7d9384dbea94b658b60ea1c3ea3fc6f6b9de9250bfc65d3c4c3204","dom_hash":"domhash87e57c54113afb37a1c26c596897eb0b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","fqdn":"immortal.rs","domain":"immortal.rs","tld":"rs"},"ip":{"addr":"91.240.21.6","port":0,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"tags":null,"meta":null,"user":{"country_code":"zz"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-12-14T21:20:47Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-09","alert":"Phishing Block","trigger":"immortal.rs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"immortal.rs","ip":{"addr":"91.240.21.6","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"domain_registered":"2025-10-02","domain_rank":0,"first_seen":"2025-11-09T21:20:48.045525Z","last_seen":"2025-11-09T21:20:48.045525Z","alert_count":10,"request_count":2,"received_data":18037,"sent_data":1035,"comment":"","tags":null,"fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"cdn.tailwindcss.com","ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-07-20","domain_rank":117330,"first_seen":"2018-07-09T05:46:13Z","last_seen":"2025-11-02T22:40:43.723008Z","alert_count":0,"request_count":2,"received_data":815356,"sent_data":814,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2025-11-02T22:17:55.857863Z","alert_count":0,"request_count":3,"received_data":70229,"sent_data":1327,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2025-11-02T23:23:15.317919Z","alert_count":0,"request_count":1,"received_data":13613,"sent_data":469,"comment":"","tags":null,"fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"immortal.rs/assets/js/index.js","fqdn":"immortal.rs","domain":"immortal.rs","tld":"rs"},"ip":{"addr":"91.240.21.6","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"introduction_type":"scriptElement","is_inline":false,"md5":"2f26d69ad83ce8c055ec3f1c34bc22cf","sha1":"29a04ede038e1b9eba4a23c4bea98f074def583f","sha256":"71abc2d649e1b437af3d145a0bb25e9fe792f58b2bddc327a94a25770bdf0ac0","sha512":"a0a0a716021dc121e9fdb2e307b889dbd8c72827fabcfefa55ca7b16670bc9188a0f086be2e4a638a9c8575d1c06e6149362521d48c6f51bc8b6c964de252014","ssdeep":"192:TsEkONV3TJw7nh5oAMz7jR3gUBeE9v9CeEsHEKuvkpsetqW2NQYquulSF+Oss+f8:TsxNE7jpgUEEQv+wtuTZsPUg","tlshash":"4f3261aa30fa0c38557b65bf316f7099b1635107a805ed47b25c12a86fc5a28dcf3bb4","size":11733,"data":"","first_seen":"2025-09-14T15:37:52.703935Z","last_seen":"2026-01-06T10:32:49.910405Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","size":407279,"data":"","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-01T17:50:01.802649Z","times_seen":38907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/toastify-js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ad021d2665fe83c661dc7922d027296","sha1":"463daed435d271de8a229b0d52a377299a09e4d3","sha256":"c2961464726cc1114365874c0f91cb1c04f06f66c71c2d092bbb22fa06acac1a","sha512":"72bbd1c5d00cc17838745636027ad637cb0f91e8a08c9fce8ff8f9cc797d68dc61679383f157780a2e81c3a67005d4c3e2caace356dd8b2b8097054e604a1611","ssdeep":"96:Nzr4zuSiDAem09LyWVM0NckGwnc6E82tITPBR7QC3305Qi58w1NV:FrlS1ALyQVNc5hWPLV33KQi58wDV","tlshash":"a6e1224db1421b360dc7e5d5702e560db132d2f84ad1194cb9bdebe1da20e81e1e3b76","size":6776,"data":"","first_seen":"2025-04-09T18:19:05.958548Z","last_seen":"2026-06-01T04:46:29.907634Z","times_seen":1226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","fqdn":"immortal.rs","domain":"immortal.rs","tld":"rs"},"ip":{"addr":"91.240.21.6","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-11-09T21:20:25.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"immortal.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 12:03:28 GMT","end":"Wed, 31 Dec 2025 12:03:27 GMT"},"fingerprint":{"sha1":"86:4F:EA:59:49:E9:23:6E:B4:F8:8B:90:87:C4:A6:58:6F:54:60:7A","sha256":"4C:B7:BE:E2:9E:66:7E:2C:11:C2:4B:CC:F4:DE:35:8E:0B:72:ED:1D:0B:C9:01:72:B6:A3:BE:79:56:06:58:37"}}},"request":{"raw":"GET /?code=MTEzNzQyNzc3OTEzNTkwMTI2 HTTP/1.1\r\nHost: immortal.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Sun, 09 Nov 2025 21:20:24 GMT\r\nContent-Type: text/html; charset=UTF-8\r\nContent-Encoding: gzip\r\nContent-Length: 2049\r\nEggy-Wall: 9.72\r\nAbuse: abuse@eggywall.cc\r\nAccess-Control-Allow-Credentials: true\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nExpires: Thu, 19 Nov 1981 08:52:00 GMT\r\nCache-Control: no-store, no-cache, must-revalidate\r\nVary: Accept-Encoding\r\nPragma: no-cache\r\nSet-Cookie: Eggy_Wall_9.72=abuse@eggywall.cc; SameSite=Lax; path=/; Secure\nPHPSESSID=dhd73934m688h4hh2n7bc5c6tt; path=/\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Tailwind CSS","description":"Tailwind is a utility-first CSS framework.","website":"https://tailwindcss.com/","common_platform_enumeration":"","icon":"tailwindcss.svg","categories":["UI frameworks"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":5237,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (1020)","md5":"a739138c92147d43f69509cdd630f8df","sha1":"280b05fe6193ad629bf8dfbe998a63719f12a963","sha256":"91027109578b2052e4bdd2a6dfb68c6130fed73f966196af1f239dffdf741357","sha512":"8ad29116dd13a1293256371a228f3538dea09d388754f801ab215f68cf8e0ac8c741068171a1bb6ff4cbedb03bb4649b25d27d27baebcfe31de29c06dc146e86","ssdeep":"96:MEh5V2nLoJXL8EK6iGIhlLEYnLukq+R8ER5METCiCCBxBVSlaKu:Ph5MnLoJ78ERiGT5OCPCBxt5","tlshash":"6eb195b191e8068d30834566777672a8db4fd05bf66b99487afed3f05f82cc1c443248","first_seen":"2025-11-09T21:20:49.904106Z","last_seen":"2025-11-09T21:20:49.904106Z","times_seen":1,"resource_available":false,"data":null}},"time_used":653,"timings":{"blocked":156,"dns":105,"connect":21,"send":0,"wait":341,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-09","alert":"Phishing Block","trigger":"immortal.rs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","date":"2025-11-09T21:20:25.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 05:49:32 GMT","end":"Wed, 24 Dec 2025 06:49:31 GMT"},"fingerprint":{"sha1":"37:B8:AE:00:DB:7A:73:F7:AF:A6:35:4D:DA:CC:E2:3F:A9:F6:2D:08","sha256":"8A:02:37:DD:0E:05:31:6F:04:7F:E2:CF:14:B9:C1:2D:68:75:CC:A6:F5:E5:82:4D:53:69:13:D3:A5:8B:B9:A4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://immortal.rs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Sun, 09 Nov 2025 21:20:25 GMT\r\ncache-control: max-age=14400\r\nlocation: /3.4.17\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: fra1::iad1::pjf8m-1762721907859-cf07fe015536\r\nvary: accept-encoding\r\nage: 637\r\ncf-cache-status: HIT\r\ncf-ray: 99c05aa14bc8b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-01T18:10:49.760673Z","times_seen":16013365,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":53,"dns":33,"connect":2,"send":0,"wait":5,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/lucide-static@0.321.0/font/lucide.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","date":"2025-11-09T21:20:25.763Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/lucide-static@0.321.0/font/lucide.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://immortal.rs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 21:20:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 10769\r\ncf-ray: 99c05aa10a855ebd-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.321.0\r\nx-jsd-version-type: version\r\netag: W/\"e4d0-S1AyHC7dh6+eEaE2Q16Kp7oXjME\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230095-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nage: 1392240\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=bO%2BdThAYbdRSHWdHc3M98lHRWd1oiQMX8wj5z%2B9IUnu14RXwUGxoFsHFqu6dGoV2NYD8%2B6BAfW5lHndX5BWLpH1SV5Wzh64XTmmlpXHf7pYUjSTPSEStdkIw9N0SMtg0EzM%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58576,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (58235)","md5":"65efb689445a2ab7a12ff82c5262817f","sha1":"4b50321c2edd87af9e11a136435e8aa7ba178cc1","sha256":"d640cd5e8da281a99320b2948d45928b9efc620a1ede57186b45b78b0e06ee4f","sha512":"e9669aa5291445a60e948ced0e9b72547c4cccd71201b62648367a7dc8bf0569bdb6013c5d92d2023a40ead77fc0a4409fca7eb4d7ce211affcdf84381c4956a","ssdeep":"384:cclTkI0vKSwYZkm4nsratodxsLzLcp2BMtBbtGmL:VlTkI0vKSwYKmF7XsLfccBM0g","tlshash":"8943c5e8e88812ec7731c403e740a658add6f120dee15d23f46f950e6fe126687c6e79","first_seen":"2025-09-14T15:37:52.715491Z","last_seen":"2026-05-30T08:35:16.70965Z","times_seen":36,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":15,"dns":1,"connect":1,"send":0,"wait":16,"receive":1,"ssl":15},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/7/7e/Roblox_Logo_2022.jpg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","date":"2025-11-09T21:20:26.321Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Wed, 15 Oct 2025 07:25:45 GMT","end":"Tue, 13 Jan 2026 07:25:44 GMT"},"fingerprint":{"sha1":"4F:30:D3:13:28:19:1F:F1:40:FE:1E:F5:B4:A8:89:FD:9E:AC:EC:AD","sha256":"2E:EF:3D:23:1B:2B:63:B9:1F:1A:F1:5A:43:84:9A:6A:40:7F:00:3E:4B:E6:48:EB:EB:7B:3D:2A:90:B7:F4:7E"}}},"request":{"raw":"GET /wikipedia/commons/7/7e/Roblox_Logo_2022.jpg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://immortal.rs/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 08 Nov 2025 22:05:24 GMT\r\netag: 05c6ccc35ef412bdc98826415709ade0\r\nserver: ATS/9.2.11\r\ncontent-type: image/jpeg\r\nx-object-meta-sha1base36: bp7eygctzoh00xacdbf5lvrw2apo3fv\r\nlast-modified: Tue, 30 Aug 2022 05:44:28 GMT\r\ncontent-length: 12302\r\nage: 83701\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/299\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=-6YENBehWdFoNus000H4VwKmAAAAAFvdNti4PamA_4LcdGfdrcGyTn1e52dQr1j-;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Mon, 09 Nov 2026 00:00:00 GMT\r\nx-request-id: 94834997-7a5d-4879-a994-b41c0a211e17\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:9.2.11","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12302,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 400x400, components 3","md5":"05c6ccc35ef412bdc98826415709ade0","sha1":"6429c04958295a48bfd295d18a369e9671a9686b","sha256":"f119de94438af85967f4b3e8f370687af7e082d89d5016af8d78d17fe0237351","sha512":"1d5aacc40c924825e4ab9c890c5b105e62d893de2b2190e27192e7ce918dc58da26e42f72e4083c2a6279e0885524e55bf6184b74aa3efaec0168fb754109caf","ssdeep":"192:sGYhCyJiD/XpVoylwH6gPv7gUdydDdPmeVIoxnzFH8/4m2:sGYh/U/Xfbl0NDHEdDdPQoxn+b2","tlshash":"ff425a7343ed8a29e45d13361c992b20972a6f05a49fd32bf44c5f0913bd2fa1d188cb","first_seen":"2025-06-11T14:04:53.061058Z","last_seen":"2026-05-28T12:17:58.835906Z","times_seen":26,"resource_available":false,"data":null}},"time_used":204,"timings":{"blocked":0,"dns":114,"connect":19,"send":0,"wait":38,"receive":3,"ssl":30},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/toastify-js/src/toastify.min.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","date":"2025-11-09T21:20:25.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/toastify-js/src/toastify.min.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://immortal.rs/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 21:20:25 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 764\r\ncf-ray: 99c05aa10a9d5ebd-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.12.0\r\nx-jsd-version-type: version\r\netag: W/\"5f3-jwZ992YPl6Rltrg8VXdpdDMeoq4\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230078-FRA, cache-vie6374-VIE\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 11059\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=mgTzOh8EHMI4hA23Ls%2B13mLkCsRJDT%2FGujRp7r0NSqB9hLofdNhPdZHVfmP24FjXSGYFwtMAOKMintsFCcp64frzyRr4R05Nk07w%2F8fg9mOHajFJ2RJuax4Mmi14vKSrdHE%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1523,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1052)","md5":"db2891f706f78468be11056f775fd374","sha1":"8f067df7660f97a465b6b83c55776974331ea2ae","sha256":"8bd3431dccc301d16d4d177209f25195ee36ef3aaffcb1be9f7f1b523a1bece5","sha512":"1bc9b9a2f23d344f1131ceec5090d3e6775ad3bae59e7861430cd8560b99e057cd6a7bc498942bc8a76c36cdd1390b29c18fb36874e07be79fee20cf8874d295","ssdeep":"","tlshash":"c73111b15a042e2d6c63d8e7654ce68de4136590fbef16c6accb215dc4867a45833a81","first_seen":"2025-04-16T02:31:25.841441Z","last_seen":"2026-06-01T17:30:52.791713Z","times_seen":1122,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":17,"dns":7,"connect":2,"send":0,"wait":15,"receive":0,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/toastify-js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.16.174.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","date":"2025-11-09T21:20:25.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo RSA Domain Validation Secure Server CA","organization":"Sectigo Limited"},"validity":{"start":"Fri, 25 Apr 2025 00:00:00 GMT","end":"Mon, 04 May 2026 23:59:59 GMT"},"fingerprint":{"sha1":"A6:DD:A1:61:65:41:D0:8F:18:9A:2F:B3:5C:A4:20:AA:B2:8C:AD:1F","sha256":"20:CE:80:8C:8A:B7:48:3B:0B:A0:F2:AC:61:42:83:EC:54:84:A8:FA:4C:2D:98:10:FF:8B:FA:A5:1D:F5:21:28"}}},"request":{"raw":"GET /npm/toastify-js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://immortal.rs/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 21:20:25 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2294\r\ncf-ray: 99c05aa10a8d5ebd-OSL\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.12.0\r\nx-jsd-version-type: version\r\netag: W/\"1a78-Rj2u1DXScd6KIpsNUqN3KZoJ5NM\"\r\ncontent-encoding: br\r\nx-served-by: cache-fra-eddf8230089-FRA, cache-bma-essb1270051-BMA\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\naccept-ranges: bytes\r\nage: 6153\r\ncf-cache-status: HIT\r\nreport-to: {\"endpoints\":[{\"url\":\"https:\\/\\/a.nel.cloudflare.com\\/report\\/v4?s=LQBCNuUbxSUGEzYQcioFpgMLf9FQHr1zqeDVzDQ8%2BTWuzY0jFj7W7%2B4J2C0%2BZTP5frXBekZqFMwqc4NVaNjvGxICec8Ye90stqIJQFgaWbLm7ODFskCvJQyl1yqZTzRXfDw%3D\"}],\"group\":\"cf-nel\",\"max_age\":604800}\r\nnel: {\"success_fraction\":0.01,\"report_to\":\"cf-nel\",\"max_age\":604800}\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6776,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (6311)","md5":"7ad021d2665fe83c661dc7922d027296","sha1":"463daed435d271de8a229b0d52a377299a09e4d3","sha256":"c2961464726cc1114365874c0f91cb1c04f06f66c71c2d092bbb22fa06acac1a","sha512":"72bbd1c5d00cc17838745636027ad637cb0f91e8a08c9fce8ff8f9cc797d68dc61679383f157780a2e81c3a67005d4c3e2caace356dd8b2b8097054e604a1611","ssdeep":"96:Nzr4zuSiDAem09LyWVM0NckGwnc6E82tITPBR7QC3305Qi58w1NV:FrlS1ALyQVNc5hWPLV33KQi58wDV","tlshash":"a6e1224db1421b360dc7e5d5702e560db132d2f84ad1194cb9bdebe1da20e81e1e3b76","first_seen":"2025-04-09T18:19:05.958548Z","last_seen":"2026-06-01T04:46:29.907634Z","times_seen":1226,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":14,"dns":1,"connect":4,"send":0,"wait":12,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"immortal.rs/assets/js/index.js","fqdn":"immortal.rs","domain":"immortal.rs","tld":"rs"},"ip":{"addr":"91.240.21.6","port":443,"asn":59939,"as":"WIBO Baltic UAB","country":"Lithuania","country_code":"LT"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","date":"2025-11-09T21:20:25.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"immortal.rs","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Thu, 02 Oct 2025 12:03:28 GMT","end":"Wed, 31 Dec 2025 12:03:27 GMT"},"fingerprint":{"sha1":"86:4F:EA:59:49:E9:23:6E:B4:F8:8B:90:87:C4:A6:58:6F:54:60:7A","sha256":"4C:B7:BE:E2:9E:66:7E:2C:11:C2:4B:CC:F4:DE:35:8E:0B:72:ED:1D:0B:C9:01:72:B6:A3:BE:79:56:06:58:37"}}},"request":{"raw":"GET /assets/js/index.js HTTP/1.1\r\nHost: immortal.rs\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2\r\nCookie: Eggy_Wall_9.72=abuse@eggywall.cc; PHPSESSID=dhd73934m688h4hh2n7bc5c6tt\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: Apache/2.4.52 (Ubuntu)\r\nDate: Sun, 09 Nov 2025 21:20:24 GMT\r\nContent-Type: text/javascript\r\nContent-Encoding: gzip\r\nContent-Length: 3192\r\nEggy-Wall: 9.72\r\nAbuse: abuse@eggywall.cc\r\nAccept-Ranges: bytes\r\nEtag: \"2dd5-63c7a41a0d540-gzip\"\r\nCross-Origin-Opener-Policy: same-origin-allow-popups\r\nLast-Modified: Sat, 16 Aug 2025 12:00:45 GMT\r\nAccess-Control-Allow-Credentials: true\r\nVary: Accept-Encoding\r\nSet-Cookie: Eggy_Wall_9.72=abuse@eggywall.cc; SameSite=Lax; path=/; Secure\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":11733,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1411)","md5":"2f26d69ad83ce8c055ec3f1c34bc22cf","sha1":"29a04ede038e1b9eba4a23c4bea98f074def583f","sha256":"71abc2d649e1b437af3d145a0bb25e9fe792f58b2bddc327a94a25770bdf0ac0","sha512":"a0a0a716021dc121e9fdb2e307b889dbd8c72827fabcfefa55ca7b16670bc9188a0f086be2e4a638a9c8575d1c06e6149362521d48c6f51bc8b6c964de252014","ssdeep":"192:TsEkONV3TJw7nh5oAMz7jR3gUBeE9v9CeEsHEKuvkpsetqW2NQYquulSF+Oss+f8:TsxNE7jpgUEEQv+wtuTZsPUg","tlshash":"4f3261aa30fa0c38557b65bf316f7099b1635107a805ed47b25c12a86fc5a28dcf3bb4","first_seen":"2025-09-14T15:37:52.703935Z","last_seen":"2026-01-06T10:32:49.910405Z","times_seen":10,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2025-11-09","alert":"Phishing Block","trigger":"immortal.rs","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-11-09","alert":"Sinkholed","trigger":"immortal.rs","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.tailwindcss.com/3.4.17","fqdn":"cdn.tailwindcss.com","domain":"tailwindcss.com","tld":"com"},"ip":{"addr":"104.20.19.83","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://immortal.rs/?code=MTEzNzQyNzc3OTEzNTkwMTI2","date":"2025-11-09T21:20:25.878Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tailwindcss.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 25 Sep 2025 05:49:32 GMT","end":"Wed, 24 Dec 2025 06:49:31 GMT"},"fingerprint":{"sha1":"37:B8:AE:00:DB:7A:73:F7:AF:A6:35:4D:DA:CC:E2:3F:A9:F6:2D:08","sha256":"8A:02:37:DD:0E:05:31:6F:04:7F:E2:CF:14:B9:C1:2D:68:75:CC:A6:F5:E5:82:4D:53:69:13:D3:A5:8B:B9:A4"}}},"request":{"raw":"GET /3.4.17 HTTP/1.1\r\nHost: cdn.tailwindcss.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://immortal.rs/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 09 Nov 2025 21:20:25 GMT\r\ncontent-type: text/javascript\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::iad1::f7qtx-1754703953616-47530b9ea371\r\nlast-modified: Sat, 09 Aug 2025 01:45:54 GMT\r\nvary: accept-encoding\r\nage: 1368320\r\ncf-cache-status: HIT\r\ncf-ray: 99c05aa1acf0b28a-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":407279,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (52853)","md5":"7a614b9a197e532c00d09a23b0996b5f","sha1":"1ff1738a40f3716e30e9031b181b0955ae578955","sha256":"176e894661aa9cdc9a5cba6c720044cbbf7b8bd80d1c9a142a7c24b1b6c50d15","sha512":"a67bc26f52d938358471be5671ff4b79e11af4e68b486aaf73a35a4c9bf3777aab51101af81563b4e5b7ba4b04dd8971fcfa9ee2c41fb10a0c1ee5604a99abd6","ssdeep":"12288:fpgrZxSAoNbJb0Wie75aUXGuyQZhK4O0s:RCVoNB0Wie75aUWmnO0s","tlshash":"e8844aa57396702647eb51e850ea1042f2beaa38840c44bcf7edd4da39e5e4440fbf79","first_seen":"2025-07-28T16:58:08.903462Z","last_seen":"2026-06-01T17:50:01.802649Z","times_seen":38907,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}