{"report_id":"86d6f715-2039-4895-a39a-fc48ab06d44f","version":0,"status":"done","tags":[],"date":"2026-09-23T09:32:59Z","url":{"schema":"http","addr":"saxanau.pro/","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"172.67.207.162","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"saxanau.pro/","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"title":"Critical Television Journalism · Saxanau","dom":{"size":36087,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2470)","md5":"907862de23190a9c2c7b34c55d796982","sha1":"d39f87ec401a3708c3341cf7415de75a5227ee06","sha256":"6abdd976c41b33c133f5d8509a93d1a28cea0331fbd6ded0b05c9b84aaa11669","sha512":"a4f392263865280ceb6f09b531e0a65fe10e38d8e937a0f3ea04c95867b424efdee16b2810a89e67ac7188979a0829e7167e04fd7961a275ca12610937085285","ssdeep":"768:7qYNpT9bFpT9OPw1zousZrArBFHFpjwULsI+2v4HC/a:7qYLN9d1zNSArBFYOsI+2c","tlshash":"0ff2923175f2603b5163909366abaf4b7aa08117d5a24214b7fddbe80fd3d839e2721c","dom_hash":"domhash148b217211b4a3c79c17db79bcb93f40","first_seen":"2026-09-23T09:24:33.021853Z","last_seen":"2026-09-23T09:33:04.894262Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"saxanau.pro/","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"172.67.207.162","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T09:32:59Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"saxanau.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":5,"received_data":140525,"sent_data":2696,"comment":"","tags":null,"fingerprints":null},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":1,"received_data":4741,"sent_data":516,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":2,"received_data":18480,"sent_data":1059,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"saxanau.pro","ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":40,"request_count":8,"received_data":374358,"sent_data":3950,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-09-20T23:17:00.144243Z","alert_count":0,"request_count":2,"received_data":106472,"sent_data":1140,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"saxanau.pro/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T12:50:34.886868Z","times_seen":438066,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxanau.pro/","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"3c7cb4c7e52ea7ae6ae237016ee563a5","sha1":"551d0337dfde7391d07336308ae09302a7e8530a","sha256":"106e33ba473e4a6993dccca9ceef76a07a244cd0e0caa16774b21f3fbc98416e","sha512":"1e67b6d6bef78600d6e76eb668bc6908955b65ad9eaf244c878a82aa406b1f2ad78984a29e7c91739e55086b9a25abe94c3f3085be36b75d9a8d0f51de7ac607","ssdeep":"192:IGpkGmFpslbd0NOHHlTDXkhwUBy3lg6TI+oU6RNIUBoya7D:PmFpc0hwULsI+V4PB+","tlshash":"f32232353a3ba02c9137603b67bfeb09b12012239012d568fa7ddd585fc0e9759a6b9c","size":10725,"data":"","first_seen":"2026-09-23T09:24:33.049991Z","last_seen":"2026-09-23T09:33:04.919676Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Fira+Sans:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:20.911Z","timestamp":1790155940911,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Fira+Sans:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 23 Sep 2026 09:32:21 GMT\r\ndate: Wed, 23 Sep 2026 09:32:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":9828,"size_decoded":1481,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"5a83ddecd9ad0370bc7f26944cb66496","sha1":"bb12a31955140693efcf3ee043c6f46cc535b1c2","sha256":"7fd880e083f5e9e70278089dd16389feeb5c5be6a5011bad2d746330ed589bcf","sha512":"dc4cee5f5c31973a1d4fce996c591a1c8dd35feacf1090fad81876cdfaf3dba6097ff22976b697903cc999f00bcaaf4eff4a34644d1d11bc5b6eaea9b4416ac3","ssdeep":"192:DyzvK/3qfFppMS3Sx3LYj0eJo1gI3tbG+j7vo9O3uew9F:GQ7JA0Bp2","tlshash":"2712d190406aa548ea971cc173cf7e335d5ea1122061c5ba6ffe1c88edd6c362374b5e","first_seen":"2025-12-24T20:46:59.780912Z","last_seen":"2026-09-23T09:33:04.897107Z","times_seen":14,"resource_available":true,"data":null}},"time_used":615,"timings":{"blocked":-1,"dns":34,"connect":48,"send":0,"wait":67,"receive":0,"ssl":466},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxanau.pro/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:20.918Z","timestamp":1790155940918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxanau.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:05:31 GMT","end":"Sat, 07 Nov 2026 16:04:04 GMT"},"fingerprint":{"sha1":"9C:A1:78:C7:79:FC:17:DD:82:97:58:FC:C2:FD:F6:A2:14:BF:64:53","sha256":"48:CD:2B:63:09:8A:1E:DF:38:B6:A7:0E:A0:ED:24:8D:CC:8C:28:16:11:EA:B5:8C:07:E7:13:21:10:E4:E3:CD"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: saxanau.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Fri, 25 Sep 2026 09:32:20 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2H3EqAKigE%2BCarLLVDu%2FEvCfL6pydJGmqKMNa28KVTFkDUs%2BYS1JVjaAMM3KnFuPCr%2BeLWYdjkrUeQwuW8x36yFC9zNQ80u%2B8c8XG9wWdVoJ0G9Ck%2Bv27E%2BlXk%2Fqcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Wed, 23 Sep 2026 09:32:20 GMT\r\nserver: cloudflare\r\ncf-ray: a3f88aa6d8371525-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-09-23T12:50:34.886868Z","times_seen":438066,"resource_available":true,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"saxanau.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@vscode/codicons@0.0.35/dist/codicon.ttf?79130123c9d3674a686cf03962523e8a","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:24.920Z","timestamp":1790155944920,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@vscode/codicons@0.0.35/dist/codicon.ttf?79130123c9d3674a686cf03962523e8a HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://saxanau.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdn.jsdelivr.net/npm/@vscode/codicons@0.0.35/dist/codicon.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:32:26 GMT\r\ncontent-type: font/ttf\r\ncontent-length: 42134\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.0.35\r\nx-jsd-version-type: version\r\netag: W/\"1296c-rR50VQzqFXODL3BE6O2mk1Qn86M\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230091-FRA\r\nx-cache: HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=My6aWtRmQ6fx1xPHEjKhcRBtwTdeR6HA39JVSh3C%2FvmuPnHASRB1nogbeAmIF4SH7PqUCUHMtR8n8UDCC9IyX3hulO6yk1w%2Fqz%2Fy6jhojx434yGCl1%2FrrsG51kW0LAt6uu4%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a3f88ac82c708be6-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":76140,"size_decoded":43210,"mime_type":"font/ttf","magic":"TrueType Font data, 11 tables, 1st \"GSUB\", 16 names, Macintosh, type 1 string, codiconRegularcodiconcodiconVersion 1.10codiconThe icon font for Visual Studio Codehttp://fontel","md5":"8478f5b3df2158f7e4864473e34efda1","sha1":"ad1e74550cea1573832f7044e8eda6935427f3a3","sha256":"e8eb23d7e283a9a866fb7a55f0096734f5cf947a419ffb99f0b6ffa07b14606d","sha512":"78fa5c9ea787eeb57a08fa2b714ffb51b3e6c132e70d8213cda3ac12bad063ac12e253f2f083329c85d109dfe2775c6a45a5221ae0879efd34aa449cfc886427","ssdeep":"1536:f3m9YRL0IWAUn/3sMKUdbulGAj3epKYvbwzSf0XFZjeO:f29YRAdZ/8MKUh6epK2UzSf0aO","tlshash":"47739d07c3999f2be392da794c74534b42a1844977eb1f43aa3e7ea4d4a2bc90cd47c4","first_seen":"2025-07-09T02:11:48.232558Z","last_seen":"2026-09-23T09:33:04.899316Z","times_seen":22,"resource_available":false,"data":null}},"time_used":1485,"timings":{"blocked":-1,"dns":0,"connect":1064,"send":0,"wait":78,"receive":77,"ssl":120},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnLK3eRhf6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:24.923Z","timestamp":1790155944923,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnLK3eRhf6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saxanau.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 25012\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:54:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:54:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:43:34 GMT\r\ncontent-type: font/woff2\r\nage: 149884\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":25012,"size_decoded":25825,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25012, version 1.0","md5":"43eb5ca3942e0f74137d8754629fb9e6","sha1":"df10e9e424a0f840028fe75d99d15775b0384293","sha256":"c753d7153cac2cfeb877264d18f11197ca672d3e04ba1472154a54777a4e354d","sha512":"9efcfdd695c5059ef37e1f95c48ba60f4ef65bb84aeec222a79a8ac6fdff03ad757a1b44959e9648046ee1bbe5c26ca282d1a98c937a8f457ad0b48f09c5204d","ssdeep":"384:OS9urKo7IX4ZLBMEprqwvZNIBZWVu+U3SF5GYz7+LSEaxg2UPGAnZRBMpPPi:Lno7+qLWEFqwxNO89wYQ3GszMVa","tlshash":"40b2e14188f46e81ee96c92154ca6e507cb0315ded2fd324237ee8c6eb87d5074be6e1","first_seen":"2025-09-11T19:19:23.965128Z","last_seen":"2026-09-23T09:33:04.900725Z","times_seen":5400,"resource_available":false,"data":null}},"time_used":4330,"timings":{"blocked":4178,"dns":0,"connect":0,"send":0,"wait":52,"receive":100,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxanau.pro/site_images/05-18_16.jpg","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:24.927Z","timestamp":1790155944927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxanau.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:05:31 GMT","end":"Sat, 07 Nov 2026 16:04:04 GMT"},"fingerprint":{"sha1":"9C:A1:78:C7:79:FC:17:DD:82:97:58:FC:C2:FD:F6:A2:14:BF:64:53","sha256":"48:CD:2B:63:09:8A:1E:DF:38:B6:A7:0E:A0:ED:24:8D:CC:8C:28:16:11:EA:B5:8C:07:E7:13:21:10:E4:E3:CD"}}},"request":{"raw":"GET /site_images/05-18_16.jpg HTTP/1.1\r\nHost: saxanau.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:32:24 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 15 Sep 2026 12:39:05 GMT\r\npriority: u=5,i\r\netag: \"6aa93c69-d8de\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 506\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XRrt%2B%2FeuaseaSNDJrDJh6eSVsiMbGQdxpINg45Kt1qNofJWlctglV0%2BV2JshdMWPyfNQvQgwMnaI1f%2BY8Jp14x3p7GexDKEagwdrZJhXrxN96TZW8Tiec08eT4ghog%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88abfedf61525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 55518\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55518,"size_decoded":56261,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1881x1037, components 3","md5":"ae49489e0596fad725624a8ab755befa","sha1":"f80856f793a1676354f8a29923a5f471cf3bfebd","sha256":"31f8ee68d57e1bd8e89a7c94fef0a02ef5c54fc608daad068f57c0b3afc0000c","sha512":"ecadefc452d3686d6495f7d612f40471c32a54f4fedeccd080df95831e25d4cdd9b393fbef04ecb2386a363cfa9e827df28e3909eb3556249d22d05b8707385a","ssdeep":"1536:KOWCzoW5X2rotF9G5iKOqNJi8z3E8Wj/xzkLcGy:yfUDVG6qNJP34zka","tlshash":"7143e122fb5a1892c1d8233095a71f143a4247f097640722e7e68d61b38ef6d7dae7f1","first_seen":"2026-09-23T09:24:33.041146Z","last_seen":"2026-09-23T09:33:04.901676Z","times_seen":2,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"saxanau.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@vscode/codicons@0.0.35/dist/codicon.css","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:20.912Z","timestamp":1790155940912,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/@vscode/codicons@0.0.35/dist/codicon.css HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:32:24 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4798\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 0.0.35\r\nx-jsd-version-type: version\r\netag: W/\"6de4-rL7GMG7WxP4sGD4JVyuL1jRhSa8\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-eddf8230190-FRA, cache-bma-essb1270031-BMA\r\nx-cache: MISS, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JJNzDd%2BdLLg3yV47JmW23ReR1XaM%2BncOKTgR9Ejpe%2Fur6bEi99vnpzmioXC2T5oI6hLUwkdGfcNU7POv3lltf9e%2BVZX0wNVJVC4mc05dvakT63Mrcg1PBSuQlNKam3M6%2FJ0%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a3f88abf09bb0afe-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":28132,"size_decoded":5922,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"e6958444d765a2dd4fc40a30b95ede0d","sha1":"acbec6306ed6c4fe2c183e09572b8bd6346149af","sha256":"cd14d83eb2e2cd707a3bff3a49a55252ee50312b36225f209a6e02200fc0c009","sha512":"7343168b1972751381e01db16412dc4310296fca4bff4f98ca829a0cee3fc71768c721426f7e1b216709a667c75c20d0e874a64105efecd0c1267d83d26c9ce5","ssdeep":"384:a0vY6uveQzpYiSH6PgZIRskgIG0YUK5KC5GWd+FfoFdrdgw8Vc:awY6usHAWd+FMH8Vc","tlshash":"9fc2f0fed4cc20a0231bf49167ab72d0538df66b8ad95c3dd042aa8cd3e661596873dc","first_seen":"2026-03-04T17:02:14.317232Z","last_seen":"2026-09-23T09:33:04.902995Z","times_seen":3,"resource_available":true,"data":null}},"time_used":3935,"timings":{"blocked":-1,"dns":38,"connect":34,"send":0,"wait":61,"receive":1,"ssl":3800},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxanau.pro/site_images/logo.svg","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:20.922Z","timestamp":1790155940922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxanau.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:05:31 GMT","end":"Sat, 07 Nov 2026 16:04:04 GMT"},"fingerprint":{"sha1":"9C:A1:78:C7:79:FC:17:DD:82:97:58:FC:C2:FD:F6:A2:14:BF:64:53","sha256":"48:CD:2B:63:09:8A:1E:DF:38:B6:A7:0E:A0:ED:24:8D:CC:8C:28:16:11:EA:B5:8C:07:E7:13:21:10:E4:E3:CD"}}},"request":{"raw":"GET /site_images/logo.svg HTTP/1.1\r\nHost: saxanau.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:32:20 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 15 Sep 2026 12:39:06 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4WGsLIqrXC0EZtUgMb1SDkBLnM0PET8NGPZmrTg8uk%2FGCxGF%2BmdbaF4ZV74DMmjk%2FbS64xVp1lTL4WeGFTk5kbDkApdLxFtgVxlnKZ5tjTv4QyXmVEmxBosSarW8aw%3D%3D\"}]}\r\npriority: u=5,i\r\nvary: Accept-Encoding\r\netag: W/\"6aa93c6a-bb9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 506\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88aa6e8381525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3001,"size_decoded":1355,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de5e6ac6d102e39e42347390040a70a2","sha1":"97f110638703ba029c31facf975534bde376eab2","sha256":"3e69fe838f6a42e008877e0d5b3254337f75398b90a2df05d9e8fb5f0ef17b9e","sha512":"30455b3ba02810d67e15ddb2fd5d6f5be6b1edda8007e3d0a5dbcd799dd010ec4ca55b66d45f41d844efc4364e4155bcce86eb8481f0cd716b2bfe9e5aa6e2b0","ssdeep":"","tlshash":"44515b99a62c0125e84dc249cbdefa35500e51c331104191fded8f8a6768cb5be5eb78","first_seen":"2026-09-23T09:24:33.028038Z","last_seen":"2026-09-23T09:33:04.904126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"saxanau.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxanau.pro/site_images/06-18-05-01-10.jpg","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:20.925Z","timestamp":1790155940925,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxanau.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:05:31 GMT","end":"Sat, 07 Nov 2026 16:04:04 GMT"},"fingerprint":{"sha1":"9C:A1:78:C7:79:FC:17:DD:82:97:58:FC:C2:FD:F6:A2:14:BF:64:53","sha256":"48:CD:2B:63:09:8A:1E:DF:38:B6:A7:0E:A0:ED:24:8D:CC:8C:28:16:11:EA:B5:8C:07:E7:13:21:10:E4:E3:CD"}}},"request":{"raw":"GET /site_images/06-18-05-01-10.jpg HTTP/1.1\r\nHost: saxanau.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:32:20 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 15 Sep 2026 12:39:06 GMT\r\npriority: u=5,i\r\netag: \"6aa93c6a-11ddc\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 506\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VU7200k%2BGY5QjT%2BIpOPVC2GbvUAGnJxps4czinJ3N6BGGn9IKedO5GBqKYlnenYs1E2MBS9qlIOZyWwfa%2Fbl%2B5usDGwcWQMXYEjdplucU8TGUes%2FuUQeVid%2BWaq5pw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88aa6e8391525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 73180\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73180,"size_decoded":73928,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1490x994, components 3","md5":"561c4291692fdf5a27b504127b401bb9","sha1":"389319fa694b57ce004c91fb0be6bb077c669ef3","sha256":"61cb6c2fbdea9a032e545bc14211fadd349263d7e295d6832aa5738cc140ff02","sha512":"7660f6799d719047b9c05eca8e62b392084d205111e8dc033e33433b7c011801f30eacc61863ab0a2d5cb7f8696f30becd2815c0841c6e1715c0bfea8b33a830","ssdeep":"1536:jIPNIkbEfGY6eZhPTgl5tiENO82SCbD0v4978nUai7RBdPS:eI4pY6cMAsl2DbgbUai7Tda","tlshash":"616302a82944c74ba62659e8f0637258b546512c1dd8ef13b0872fb094eadf716cf8e4","first_seen":"2026-09-23T09:24:33.034247Z","last_seen":"2026-09-23T09:33:04.905264Z","times_seen":2,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"saxanau.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxanau.pro/favicon.svg","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:22.764Z","timestamp":1790155942764,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxanau.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:05:31 GMT","end":"Sat, 07 Nov 2026 16:04:04 GMT"},"fingerprint":{"sha1":"9C:A1:78:C7:79:FC:17:DD:82:97:58:FC:C2:FD:F6:A2:14:BF:64:53","sha256":"48:CD:2B:63:09:8A:1E:DF:38:B6:A7:0E:A0:ED:24:8D:CC:8C:28:16:11:EA:B5:8C:07:E7:13:21:10:E4:E3:CD"}}},"request":{"raw":"GET /favicon.svg HTTP/1.1\r\nHost: saxanau.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:32:22 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 15 Sep 2026 12:39:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BgEO5Bko2s7wh2EnXZ8FWdLVPGlppPaEku3ygdUkipgfb7TrJstlD%2BolAwYhi9ASdH2WSZK3hUgIf8%2BlCpT7ebVEEbNJtUEswRI%2FYrbyVOMgsWm%2BOfBMFEr6biy%2FpA%3D%3D\"}]}\r\npriority: u=6,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa93c66-bb9\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 506\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88ab26b6e1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3001,"size_decoded":1362,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"de5e6ac6d102e39e42347390040a70a2","sha1":"97f110638703ba029c31facf975534bde376eab2","sha256":"3e69fe838f6a42e008877e0d5b3254337f75398b90a2df05d9e8fb5f0ef17b9e","sha512":"30455b3ba02810d67e15ddb2fd5d6f5be6b1edda8007e3d0a5dbcd799dd010ec4ca55b66d45f41d844efc4364e4155bcce86eb8481f0cd716b2bfe9e5aa6e2b0","ssdeep":"","tlshash":"44515b99a62c0125e84dc249cbdefa35500e51c331104191fded8f8a6768cb5be5eb78","first_seen":"2026-09-23T09:24:33.028038Z","last_seen":"2026-09-23T09:33:04.904126Z","times_seen":2,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"saxanau.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnPKreRhf6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:24.919Z","timestamp":1790155944919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnPKreRhf6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saxanau.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23604\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:54:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:54:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:37 GMT\r\ncontent-type: font/woff2\r\nage: 149884\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23604,"size_decoded":24417,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23604, version 1.0","md5":"aeb66f4f2c7c6a47d3a4d92009525dc9","sha1":"6df4aaf9fe12b3c3d03051f0cc41cdf5e85ffcc8","sha256":"868c1d1412b0b61c6c88c1e42af6d52440ca414004f40ca5330371349613d60c","sha512":"29e4b77f01fc861fedfe7526047167fc2d245e461b348b1e1d786035b3244602598ad49ef689c80104b94692c4901ca08be36119148c8923c1fa8116fd975f9d","ssdeep":"384:8CI1jtrikSeRCuEO67UJzWJJNj/ZCx3ThgFgFW5Puo65b+FV2/6IJlvwTZDnyIKC:8CXeRCuEzGuJRZCx3T9F1GF8/62wTZDH","tlshash":"dab2e1bc8cfd62b4f18f07e9ab148bd64a4a93e0dd49e09038d8c43197c56b291e4e5f","first_seen":"2025-09-12T05:11:32.573857Z","last_seen":"2026-09-23T09:33:04.906818Z","times_seen":1353,"resource_available":false,"data":null}},"time_used":4446,"timings":{"blocked":4179,"dns":0,"connect":0,"send":0,"wait":108,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxanau.pro/","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T09:32:19.957Z","timestamp":1790155939957,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxanau.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:05:31 GMT","end":"Sat, 07 Nov 2026 16:04:04 GMT"},"fingerprint":{"sha1":"9C:A1:78:C7:79:FC:17:DD:82:97:58:FC:C2:FD:F6:A2:14:BF:64:53","sha256":"48:CD:2B:63:09:8A:1E:DF:38:B6:A7:0E:A0:ED:24:8D:CC:8C:28:16:11:EA:B5:8C:07:E7:13:21:10:E4:E3:CD"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: saxanau.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:32:20 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EYM%2F0b1VfU9kS7%2BFVpWtx%2Br4RTCpCo2jSxIjqkm45PvWnymrhEYqMaruFNUqDJqpuj%2FFw3VenUuEPYj1OBqQkqDLY4%2Fn8N3D7bK06aTVDa%2BjKApAmR6tZ8wQ2goF3w%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a3f88aa26c8032fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32103,"size_decoded":8842,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (2470)","md5":"00aca9dbbfd4942f52bb179e26147cce","sha1":"96d3ff0c0ab2f2c10528adb5d4588ea617bdb3ee","sha256":"5ea8cf6c19401291154750eb894197e85e5498b67111a246a3682da3e27ec28d","sha512":"e8bdfc31f2898629e56154e5cd66e60bc6cc21a5bcccaea2e8e3f89f55cfd92a8cc82386246f0e91acfe737a758ea0df461db4118f4e2419b7ad17041d5d3646","ssdeep":"768:XqYh5T9B9OPw1zousZrBszFpjwULsI+2x:XqYH79d1zNCBscOsI+2x","tlshash":"3ee2613579f2513b01a3a09366abaf4b7ea09117d9524210b7fdcbd80fd3d839a6721c","first_seen":"2026-09-23T09:33:04.908171Z","last_seen":"2026-09-23T09:33:04.908171Z","times_seen":1,"resource_available":true,"data":null}},"time_used":517,"timings":{"blocked":0,"dns":167,"connect":34,"send":0,"wait":267,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"saxanau.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Nunito:wght@300;400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:20.908Z","timestamp":1790155940908,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Nunito:wght@300;400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 23 Sep 2026 09:32:21 GMT\r\ndate: Wed, 23 Sep 2026 09:32:21 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7284,"size_decoded":1317,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"557acc9ed2fa0769314e893f0d8d5441","sha1":"ee53fc6a581260eadb9676ab3874a2a633046a84","sha256":"4843c88b39a45cf1b659b93718dde2f12a07b0e03ca6a55f34ffe074db2ebb1a","sha512":"03847b0c278fe0276c3f165eed27f14a14da6d52515d3741fad18ba737a483d21b38395ea0f3458aab477cedc11c8faf558cbb751d6ff4f23a9636b82952d8a1","ssdeep":"192:nHXy0gkJuH+yptkUkH0yXLkeLHbywkkdH:HC9l6DPeo","tlshash":"f2e19891045bd000aa432cc667cf7f37ed4e62113424c57aebfd9898ecabc232224b4e","first_seen":"2025-09-17T01:48:11.924158Z","last_seen":"2026-09-23T09:33:04.910149Z","times_seen":372,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":36,"connect":49,"send":0,"wait":80,"receive":0,"ssl":470},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/Primer/21.1.0/tooltips.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:20.914Z","timestamp":1790155940914,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/Primer/21.1.0/tooltips.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 09:32:21 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 827\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Sun, 03 Dec 2023 00:05:19 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gqE65vU857Jq5nmWYSaQM3yH%2BK26XzCqDRbosuuraxgjCDMRzmanVs7J70II7jlTbaxE25%2FMF1mzW%2FG9G1ZngPSzR%2BxW56S5PzNUO6%2FevvR5IeXVg8JcMS1HayOFSa3MZK7Yk3w1\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: a3f88aa968d10731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3773,"size_decoded":1795,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (3773), with no line terminators","md5":"0c1a0104593ded585bfdffa7ff1900a1","sha1":"3bf1ae10d423c166d19d002113a5a3d990f24354","sha256":"2f84de7f49d19e72a0c2c51d09577cdeb6b67362e345fbcac56e1c96bc468e7e","sha512":"61a4795ca8d47f6b4837076bdba7e93f712ad6c441bcb783ab4e87123518861aa942a42b82dfa8b317dda7c28494c3f4ceea1df5179d20ca50d79741bcc354b5","ssdeep":"","tlshash":"14714796eef33dac8623d02fdec4375886116112c5c62a36f4d796dec8ae2c667c06c4","first_seen":"2026-09-23T09:24:33.026144Z","last_seen":"2026-09-23T09:33:04.913592Z","times_seen":2,"resource_available":true,"data":null}},"time_used":496,"timings":{"blocked":-1,"dns":65,"connect":34,"send":0,"wait":85,"receive":0,"ssl":312},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:24.918Z","timestamp":1790155944918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/nunito/v32/XRXV3I6Li01BKofINeaB.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saxanau.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:27 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:27 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:03:34 GMT\r\ncontent-type: font/woff2\r\nage: 150002\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39128,"size_decoded":39941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39128, version 1.0","md5":"166202cc391c71a57730bed12cbcb159","sha1":"76388dbfe374be06fdc6f9ba38d3f4e479025eeb","sha256":"ba344451eab25b217a165363b1982048a5e5830a0daf36577973955a04cac793","sha512":"9f4d1c14aa729e837b964898a1dd27e99ff674256c43326aa982cc0c17fa8b0d71a0b7df627f03cb4ac6ec7f22f0a19d65302743ff09187ce81414dde74c43e2","ssdeep":"768:lxbc6Qon+A9wOfdj2rELqjOmaLqLqKeI+00t0xIj:layndm0j2cqjOmGq+tbUIj","tlshash":"d9030284fd6a02d8c7fc1f6ef25a9f28272c2078440b6a9c44a79a6bd5975f84dd3330","first_seen":"2025-09-17T01:48:11.920934Z","last_seen":"2026-09-23T13:01:11.265963Z","times_seen":55827,"resource_available":false,"data":null}},"time_used":4395,"timings":{"blocked":4179,"dns":0,"connect":0,"send":0,"wait":128,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9B4kDNxMZdWfMOD5VnSKzeRhf6.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:24.921Z","timestamp":1790155944921,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/firasans/v18/va9B4kDNxMZdWfMOD5VnSKzeRhf6.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saxanau.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24844\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:52 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:16 GMT\r\ncontent-type: font/woff2\r\nage: 149917\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":24844,"size_decoded":25657,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24844, version 1.0","md5":"beb3d7395726910999a3b89eb76e9a4b","sha1":"d8874d8b574e66bf2685d14f8aa36bf72feb3758","sha256":"55e09735e30d8492afac5d59ac433c6b367bb7dd00c46e157cfe95c9fb29e833","sha512":"e4033d3c2d06102d587e9206c3e11e7ea11e5fa72aa3d9b381c46415d685dd3fc64e4ada2fa4b88ec65d74890f912763004dfdf8943dd00740aab9e6adb8ffcd","ssdeep":"384:sZAnNn9nLqJQh+hcMBMj3+YlWQ9djLDp2+uQcOaxpE8VP8Sm+EtKob:8e7Md++Yd7jHpYLOa3EAPlm+YKA","tlshash":"1bb2d0814ed67266b199e4bb07441c25ea0b2e7cd56d8f8fce59c6072a918426e08aac","first_seen":"2025-09-12T01:14:39.303969Z","last_seen":"2026-09-23T09:33:04.915691Z","times_seen":3239,"resource_available":false,"data":null}},"time_used":4381,"timings":{"blocked":4178,"dns":0,"connect":0,"send":0,"wait":71,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"saxanau.pro/site_images/08-0515.jpg","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:24.926Z","timestamp":1790155944926,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxanau.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:05:31 GMT","end":"Sat, 07 Nov 2026 16:04:04 GMT"},"fingerprint":{"sha1":"9C:A1:78:C7:79:FC:17:DD:82:97:58:FC:C2:FD:F6:A2:14:BF:64:53","sha256":"48:CD:2B:63:09:8A:1E:DF:38:B6:A7:0E:A0:ED:24:8D:CC:8C:28:16:11:EA:B5:8C:07:E7:13:21:10:E4:E3:CD"}}},"request":{"raw":"GET /site_images/08-0515.jpg HTTP/1.1\r\nHost: saxanau.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:32:24 GMT\r\ncontent-type: image/jpeg\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 15 Sep 2026 12:39:06 GMT\r\npriority: u=5,i\r\netag: \"6aa93c6a-1c54b\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\nage: 506\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9L9Isrj2uKLljC%2FQs8plSjrFfGePLXX%2B3QlTmX2cg5AR6ukjCo1uBLY6TPrCbbMmDt6a8exnedqS0S3dYyTAfTt1V4fXWvuFsoyUAX%2Fm4UDVS9ZNjz318ExkWaK7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88abfedf51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 116043\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":116043,"size_decoded":116786,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1539x1026, components 3","md5":"44cb9ddc940b3f000a96e544d60eeef4","sha1":"119b70569c4342e19b4f03303d3c5bcbe0662334","sha256":"d1c18672d6469d5ddd048085662f7efbfd6187f5546537723bfa1b1d8c4e96d7","sha512":"9c0a1616c0ba481e0bbbe6d01c538019343b443437986f5152121baeec22310c377edeeb08e574d453f41604827e9bdd75917f7203b413a5d1033b052adb0caa","ssdeep":"3072:YMHQ1EL3RDxlQ8ewZ5vu98U3eX5h8moYR96ob9:YMHQ1ELjiYZ5va3eJymoYR966","tlshash":"07b31275bfd035c9da2409e25b0a16f8c80d4b29b6de92377a845d302d01539a7bf94f","first_seen":"2026-09-23T09:24:33.037494Z","last_seen":"2026-09-23T09:33:04.916584Z","times_seen":2,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":77,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"saxanau.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"saxanau.pro/custom.css","fqdn":"saxanau.pro","domain":"saxanau.pro","tld":"pro"},"ip":{"addr":"104.21.85.161","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:20.915Z","timestamp":1790155940915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"saxanau.pro","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 09 Aug 2026 15:05:31 GMT","end":"Sat, 07 Nov 2026 16:04:04 GMT"},"fingerprint":{"sha1":"9C:A1:78:C7:79:FC:17:DD:82:97:58:FC:C2:FD:F6:A2:14:BF:64:53","sha256":"48:CD:2B:63:09:8A:1E:DF:38:B6:A7:0E:A0:ED:24:8D:CC:8C:28:16:11:EA:B5:8C:07:E7:13:21:10:E4:E3:CD"}}},"request":{"raw":"GET /custom.css HTTP/1.1\r\nHost: saxanau.pro\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://saxanau.pro/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Wed, 23 Sep 2026 09:32:20 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 15 Sep 2026 12:39:02 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3DJcsIq2xUmNtZH00BfM62djziuImHRv11CWMvnBFGxPWKzoJzkcoC3uENvwptWILvKDq%2BhjINeODN6ROoNQzujc1eWAYcUPpOyJ5%2Fb3eNup5qBnUMyZ698FCrheKQ%3D%3D\"}]}\r\npriority: u=2,i=?0\r\nvary: Accept-Encoding\r\netag: W/\"6aa93c66-14a54\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\ncontent-encoding: gzip\r\nage: 506\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a3f88aa6d8361525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84564,"size_decoded":13376,"mime_type":"text/css","magic":"ASCII text, with very long lines (487)","md5":"70df7b374034942c735e5e4367ef0d41","sha1":"fcc1b2eb80e3145409d8d2825333f296113a44b5","sha256":"af15d95f56994dedd040b7169bbb7d893f36e3105fd61ca958345faa0704b0e0","sha512":"b2bf857e046e8db3315bba5ca590bd3cda804eac2987c780f483197e37981d81d1fadfde62eea946f9018b61439a18722914678fe3240a05de9dae647ae6abd7","ssdeep":"768:M+GNsJ3izGDsKoG32pv6JE7TH5hupH1KdcYqEhhyfFfoVZEh0LFpvQlkph6T+shl:M+z3/DMUYqElJvQlk7iPVQU","tlshash":"e7835321b794b028f13bdc5a75c0aace7124c4c2d5671aadfb55b66cc2ca1e71b3238d","first_seen":"2026-09-23T09:24:33.032755Z","last_seen":"2026-09-23T09:33:04.917995Z","times_seen":2,"resource_available":true,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"saxanau.pro","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"saxanau.pro","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/firasans/v18/va9E4kDNxMZdWfMOD5Vvl4jL.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://saxanau.pro/","date":"2026-09-23T09:32:24.915Z","timestamp":1790155944915,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/firasans/v18/va9E4kDNxMZdWfMOD5Vvl4jL.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://saxanau.pro\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23872\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:53:52 GMT\r\nexpires: Tue, 21 Sep 2027 15:53:52 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:47:12 GMT\r\ncontent-type: font/woff2\r\nage: 149917\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23872,"size_decoded":24685,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23872, version 1.0","md5":"d26e1b11589f2c2744eadc0ac2ffae94","sha1":"4e1f0a8ef07782f138d7336b3cc430241268c442","sha256":"3e38d8c01fe97529fbf0a086bf958d724b723ca7fc8be77b4ba5745f6259b6ca","sha512":"da2576aa68565be3b9cba3aa385d346478cf51dcf7b0014bddb5e5b078716e1a5e76e2af239190386559af5ba4ed698e2a411ee19d4a7ed0816a363b02204ef9","ssdeep":"384:DUqVLiC4FUoceXZvdFbdOlzImvufqOFJlnCpqFOjFNJeDzwT4qsq6IICM:pinSo1RdFdOlzImoFap4UNYDu4qsq6I6","tlshash":"04b2e17ddb928543a4b129f19b027cdda153058efa655d673f163961953f22ac8008cb","first_seen":"2025-09-11T19:19:23.887858Z","last_seen":"2026-09-23T12:20:43.424238Z","times_seen":8639,"resource_available":false,"data":null}},"time_used":4389,"timings":{"blocked":-1,"dns":4036,"connect":149,"send":0,"wait":50,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}