{"report_id":"877dfb25-2c36-43c7-a4ae-6383b8c2716b","version":6,"status":"done","tags":[],"date":"2026-05-01T13:56:20Z","url":{"schema":"https","addr":"aveforge.app/","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"aveforge.app/","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"title":"Ave Forge","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"aveforge.app/","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-06-05T13:56:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"webtrack.sale","ip":{"addr":"172.67.220.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-05T23:26:42.853157Z","last_seen":"2026-04-19T22:52:50.517617Z","alert_count":0,"request_count":2,"received_data":4651,"sent_data":839,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"aveforge.app","ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":13,"request_count":13,"received_data":8270985,"sent_data":5725,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"webtrack.sale/script.js","fqdn":"webtrack.sale","domain":"webtrack.sale","tld":"sale"},"ip":{"addr":"172.67.220.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"191315be80746226f807d10f1eb2bad1","sha1":"c30c616414dabeb026a5d0f7583479a517e15187","sha256":"a1471487eb3e8eb93b1a9e056386019ff5eedadea29bbb725b5494fb2e9ad90a","sha512":"62ed43d4a5312894ef30bf9f4579778e8e40833c6321262eb23da81dce2ad0dd9046ff85fccf98f9b60084b170b43566bff83e23763b47dd63b9ae3f18901117","ssdeep":"","tlshash":"f851d7f53185f1f07f692490d17aa620b9392e73b81e4890a6fb4c462b2e40e9431d2c","size":2688,"data":"","first_seen":"2025-12-04T18:46:55.384354Z","last_seen":"2026-05-01T19:53:40.334861Z","times_seen":3236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"webtrack.sale/p/62gzAzvto","fqdn":"webtrack.sale","domain":"webtrack.sale","tld":"sale"},"ip":{"addr":"172.67.220.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:56.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webtrack.sale","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 19:52:55 GMT","end":"Sat, 27 Jun 2026 20:50:17 GMT"},"fingerprint":{"sha1":"96:26:37:92:72:27:EC:AD:98:B7:DA:A8:7E:44:8E:44:29:9E:F9:1A","sha256":"61:C0:9B:77:A8:C1:0A:C4:C4:5D:1D:C2:65:8C:38:FE:BC:3A:F8:CE:13:8C:57:0B:41:A1:50:81:38:BA:7E:DE"}}},"request":{"raw":"GET /p/62gzAzvto HTTP/1.1\r\nHost: webtrack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 13:55:56 GMT\r\ncontent-type: image/gif\r\ncontent-length: 43\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\nvary: Accept-Encoding, rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch\r\nx-dns-prefetch-control: on\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=12STtbEWgslhGTagyKLAm%2BVltorHZUNnDZ7QisQb32OEvuPu7TfXnvY9JokhpIriiSd8UtmIAaTo9wT6t5i9SJok69Z3kMShxlU81T6fu4K3mlypCifQbcPg51tnCpHI\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f4f4966fd77120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 1 x 1","md5":"325472601571f31e1bf00674c368d335","sha1":"2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a","sha256":"b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b","sha512":"717ea0ff7f3f624c268eccb244e24ec1305ab21557abb3d6f1a7e183ff68a2d28f13d1d2af926c9ef6d1fb16dd8cbe34cd98cacf79091dddc7874dcee21ecfdc","ssdeep":"","tlshash":"bf900003ea80c002c2a2c0300e0ccb802b88b0308a28030fb0fc3baeec3a3a20c23000","first_seen":"2023-04-05T06:29:39Z","last_seen":"2026-05-01T20:42:30.855705Z","times_seen":81331,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":35,"dns":20,"connect":3,"send":0,"wait":85,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/bg_hor.png","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:57.095Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /bg_hor.png HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/9cf456584347d1ca.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"dde262d7517a2dcb248cbfa4cd70703c\"\r\nlast-modified: Sun, 26 Apr 2026 00:01:49 GMT\r\ndate: Fri, 01 May 2026 13:55:57 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dToB55KzVYMLE7ZrdJv60d7Q3Z3Qoqs93Af1AZM5RQQRyRlqcS1Za89GZRoMa2Lm86lPK3pPsh3FBf86F02eD%2Fd92RPA69wYrPsULrjetSiZJ5KyBwheEfMpZw4E%2Bhs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4f4969d8730b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1006383,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1920 x 1080, 8-bit/color RGBA, non-interlaced","md5":"dde262d7517a2dcb248cbfa4cd70703c","sha1":"c00cb5e44ee83772afa8aba90f951fd1070a73bf","sha256":"f4648cba7cfb3106bd03ade08467f9011be20911054c30d0a775ab7f421da7ae","sha512":"f0434924d7361d985ed839dcf46c4062ed9f5c397d53a2e8138952f2b40cd2a08bb49c44dac2614f6fcef018cc7f8aed7693469bdabadba2dd373e37ff176a63","ssdeep":"12288:vN7ZG2m/8u/eBU03l3JI7tdMAB6rZ5SKuzOlXmPn+j9EEgBc1jQqhw+z9/+lhCuv:vEd/Ab8bGZ54ipEBW+xQ+vCpvy6zpXa","tlshash":"7025238fdc8e0a20df8ac073915361c98b8d66ff2bbdceb62c78756f4e15c65058a191","first_seen":"2026-05-01T13:56:26.350714Z","last_seen":"2026-05-01T15:12:37.742821Z","times_seen":5,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":136,"receive":266,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/9a4ee768fed045da-s.p.woff2","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:57.103Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /9a4ee768fed045da-s.p.woff2 HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/9cf456584347d1ca.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\netag: \"51eee31e9cbbffe82e6d01f1c5f876a1\"\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:57 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6jQ9ndFR0vX4BRIhSLEhoKTOvjws%2Fg0KuhTuZUuh2BvEIXEv%2FR3OASgOWHmujYmpqThZRyFH0eEd3z68l52EB8y2FBWjh8r8MhWjQCYVuzNTLJHsQDupeKGjgpVn2NA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4f4969e8750b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11768,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 11768, version 1.0","md5":"51eee31e9cbbffe82e6d01f1c5f876a1","sha1":"b522c4d9146d75cc5c142f89a2dd433cf1fc297f","sha256":"967b3909a7d6a5cc6365e9947775060fca15efdb62bc70099aef2e7d86e10205","sha512":"dca4f8c8e31eec966e85c434de6334a81b3f6560ee972c0d5abbf63b9799dd0649df0ac72948936893717a9668a327e42a755e157e3dbf412971497da7e35fa3","ssdeep":"192:9AOQ7tH9Jxj331qYf1WBzfyoweJOHctj/9HiO7q+cAtTiK2qf0TT:yjtdJbqYfCzxwoO8tjoa1ZiKDsTT","tlshash":"5732b08836dba325e434a9983d703d5b040a467f75ca8bc3458c347602bd58aca978ff","first_seen":"2025-06-21T10:13:16.173817Z","last_seen":"2026-05-01T15:12:37.75142Z","times_seen":434,"resource_available":false,"data":null}},"time_used":131,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/bun-1.png","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:57.120Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /bun-1.png HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"1d278de0eda7ae2a28a5fc77890e3191\"\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:57 GMT\r\nserver: cloudflare\r\ncontent-length: 1724\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ntDcGq36ON%2FIJgslkoXvc4rH%2Bgo%2Fg997d%2F11qLbflxXOFqglBCqXN1gUSscaCMSQ1YIy3xK8FPRYjmrJtQsVWbN8q%2BawoOO%2BN%2BICZ08Ds4oUuVZ4NJvtr3fczG%2BlDE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4f496a08770b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1724,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"1d278de0eda7ae2a28a5fc77890e3191","sha1":"6bc3d83dc32d37a49d12a53b152657cf290c0fe2","sha256":"83d6e8ffc419a46dca8dfdf58e6926f12fb29432ddf416edf44d212a710c1258","sha512":"ff6d78a88f7e17a67ac72a10382d48d93ed5feadc129792d084663570475d01b12cc945c4082253da957d3691d8d43e7c9b0f04ae27227e47de70af129bcd71b","ssdeep":"","tlshash":"f931fd3f665211de37b3556ed1377b519e1700f81eac0956b337cc6018a816dec63b84","first_seen":"2026-05-01T13:56:26.363071Z","last_seen":"2026-05-01T15:12:37.744653Z","times_seen":5,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/git-1.png","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:57.125Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /git-1.png HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"02d85219683e608e89da55cbd4962672\"\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:57 GMT\r\nserver: cloudflare\r\ncontent-length: 1059\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2Qb2FbF62tFyE3RuXFc3lCEKYtOlTVQSg3qWrFXvuIxoHpmA%2FqnNlNEDQ%2BD%2BPBYTSct7V6PI65XFyZRt8qtEwvfBfyyWnqhdcGdZo2NKYZr%2B5QGeoy%2FRW7%2BIjL4zEU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4f496a087a0b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1059,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"02d85219683e608e89da55cbd4962672","sha1":"14322d1b3f97b0b145b7f2198f1fa164d0c61665","sha256":"d4197984ba95a8c390a02dbd06e57980a1a3066179bfb59b8b00aedd9adeb3b6","sha512":"ab1b5fadebf3de7a4dd28491d416cf1e7e2464c5952d7dba1f8412710b05264a46b23cb074ba2a4013d38320613e4d514aabfc0b576cc03023d9eec96a737eab","ssdeep":"","tlshash":"4211d8e3f5257d9edbd781b012617c7de02567b3b801c95f7531f642621ad08353906e","first_seen":"2026-05-01T13:56:26.36799Z","last_seen":"2026-05-01T15:12:37.754752Z","times_seen":5,"resource_available":false,"data":null}},"time_used":198,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/x-1.png","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:57.123Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /x-1.png HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"53e4e8e950162052722efec214a28abb\"\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:57 GMT\r\nserver: cloudflare\r\ncontent-length: 1014\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PZkvBUivGqhhckaqwelB8rKHkQr2W06ai3EAaOlSSDI1MoCZZ6weDMnRMl6Fcsq35Ebn7vJaKDP1n6O0iUSZQqj0TEPUBJ0PxR9HyIk0qQ2BtFMluaCZ7jBPpF%2FJQ6w%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4f496a08790b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"53e4e8e950162052722efec214a28abb","sha1":"15874079713fd08f85bbc66ad62de89ff57e35e7","sha256":"441a0cb359359152e126d55b9e9aa9bbf58e0b38097328007a6c2c5d36c4b7af","sha512":"39466d1c7fcfdf51fedf9b335bede24b5a9194cf3cae52ccc0a816d188d44c224524a4cde4fa599c439576a4487d975b2037b6cb4464ca8a088b54509d9d01cb","ssdeep":"","tlshash":"0011d88b1106521f9e74c3f005c45dd16fe92eb6d2b09e02fc64ff0416758006a48719","first_seen":"2026-05-01T13:56:26.372085Z","last_seen":"2026-05-01T15:12:37.753915Z","times_seen":5,"resource_available":false,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-05-01T13:55:56.029Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 13:55:56 GMT\r\ncontent-type: text/html;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CLbVAquh5nYMW%2FCwkhweOwgVF6RmcojKcddT%2BOtiDazCbzIt6iF8aDzr83B2x%2BpV5yU0wmNERcCHsJCcs1HE%2BcnGngqqWw9vJ8%2FEbdnsXElab1Fw%2BFMKy9fxD2CoePo%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9f4f49638c2d1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8778,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"a9440d5946b8df0a21a7834f9e10c23a","sha1":"e441779ce5a217bb88f37c686b1ee61eeee63203","sha256":"ca8e24f49e5c631a54eea2a5e9367efba5b2b54709aa13821f5444c8523757f9","sha512":"939d1ffed2ad8648335b1c1786df38b14ee3ef2c2500120816e8f009ce1ddfa1aad3b63aa9e683c65b059856efd47e598d7e67600eb816ed912b2a7bab316f96","ssdeep":"96:5emmEn8LMJzNwijolpXEJ6PCh3DIJBbR4b84tR6DPqcW1EaQaWkbpkbHJPSKarkw:uEniIZwioXaRh3DqdmxtIDSkcpcMc8","tlshash":"6c025582d9d208c6223fc06eb9e3e90a4671d507c649e90f76ed11e46f4edd8c8e324e","first_seen":"2026-05-01T13:56:26.376114Z","last_seen":"2026-05-01T13:56:52.318227Z","times_seen":2,"resource_available":true,"data":null}},"time_used":460,"timings":{"blocked":50,"dns":37,"connect":1,"send":0,"wait":354,"receive":0,"ssl":15},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/9722456a4ad99fe0.css","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:56.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /9722456a4ad99fe0.css HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=huy9d4g28UX4THxxuRdKDdusTeinYr7pKbkYG5QIHqVXo%2BbfHbDGYAGe2zaJvkITHW5mYA17hR0x%2B9oy2TDIpOXvuvdeyivueS9EytO73IHVROYkroTAzouAXRwHqzE%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:56 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"b06c08500e32c56b15dab50d887b0311\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f4f4966b8670b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28062,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28062), with no line terminators","md5":"b06c08500e32c56b15dab50d887b0311","sha1":"e131304fec1b297c8e717e0c7928fe467ea45c45","sha256":"ac50ff87190bea4ef8fba0e895c90a5c177efedef0ceeca4ffaa898129fced01","sha512":"fe09764f0f31f55c043a9395f2c79d6cdfbdf35ada449f097433569aa8d7089139496a6317d0c4acd242bd50346926428f5f168d48b6a73eb6d94d29a3659aea","ssdeep":"384:TpSed283ZcW23qWF7O36AgzyAIfPo8PFEIN4:TpSUJoAgzyAco8PFEw4","tlshash":"bac2c9097e2d3f38ba13a32440c0849c620b775feebd8797acd1265d9d9d78431aca79","first_seen":"2025-06-18T00:26:14.391201Z","last_seen":"2026-05-01T15:12:37.756751Z","times_seen":123,"resource_available":false,"data":null}},"time_used":209,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/css2.css","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:56.908Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /css2.css HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/9cf456584347d1ca.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css;charset=utf-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:57 GMT\r\nserver: cloudflare\r\npriority: u=2,i=?0\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"c1b51d08cc92392478a8d9cec8bc09a7\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xVyVuDZOr9p7WbILbMGBRZOwmtDCgD8h90vwHsyI1%2BI19XUSYHm5v8nLjEp32WWYf1qDNCQ23tO38ZUhATEpOSFdVmciUcP%2Fsm4%2FJtfe1%2FBBWgUrgAIMkT%2B5f70NOFc%3D\"}]}\r\ncf-ray: 9f4f4968a8720b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":372,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c1b51d08cc92392478a8d9cec8bc09a7","sha1":"9dd5fc970703998d8420f95cf23f6871c0de4c5f","sha256":"1620c5b4942fa1bc7dd7c789725f6202ccf5b4c01ee147b3d767c80bb14ccb01","sha512":"48e26787dd23947f2d00e3777046e71220a0c134f0f5de1711c9276855365abdbe7cbdd2614db2244f9406810496e0902d6a2da73ae763ccfe11643bb9283c9a","ssdeep":"","tlshash":"27e0c0400c266a04d7b31cc052cd3e3ade0fa15024419e286fff00d4bd82d566397b1c","first_seen":"2026-05-01T13:56:26.37926Z","last_seen":"2026-05-01T15:12:37.738973Z","times_seen":5,"resource_available":false,"data":null}},"time_used":171,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":171,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/button_green.png","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:57.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /button_green.png HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"d7ddc782d9d1e45b88e5e1ff1e6de83d\"\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:57 GMT\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nNrCXlBV9KGBQMfH3eCafTJaiJLWnjkd4aM6meqJmlUa1UaBa9IbYBKBEx4BK6puxlfG2UBTRPY9L%2BuzXP150tDbm5x41IRO2neLr50R6LQgUuUqDa8uRf%2BGFCfabTA%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9f4f4969d8740b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2482,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 505 x 100, 8-bit/color RGBA, non-interlaced","md5":"d7ddc782d9d1e45b88e5e1ff1e6de83d","sha1":"ca6fbfd2c182f709d955302cc9e45b764112dccc","sha256":"481655af5992727d4ebce531626b97861ccd8d11e03fee64cb18e72d8618aca8","sha512":"aaa7ec8ea5b13a49a97bd047fb54f877119766a3ba9e265f118d279180032ee0c338d202dc48a97208b46b177ab93aa8476f5578d0c7747592b04806995d0bf0","ssdeep":"","tlshash":"ea51d5aa184fe97eb606e38001e982a87af3104c7e605d71f555df2bcbe4a170607d9e","first_seen":"2026-05-01T13:56:26.380867Z","last_seen":"2026-05-01T15:12:37.740855Z","times_seen":5,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":135,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"webtrack.sale/script.js","fqdn":"webtrack.sale","domain":"webtrack.sale","tld":"sale"},"ip":{"addr":"172.67.220.109","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:56.596Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"webtrack.sale","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 29 Mar 2026 19:52:55 GMT","end":"Sat, 27 Jun 2026 20:50:17 GMT"},"fingerprint":{"sha1":"96:26:37:92:72:27:EC:AD:98:B7:DA:A8:7E:44:8E:44:29:9E:F9:1A","sha256":"61:C0:9B:77:A8:C1:0A:C4:C4:5D:1D:C2:65:8C:38:FE:BC:3A:F8:CE:13:8C:57:0B:41:A1:50:81:38:BA:7E:DE"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: webtrack.sale\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 01 May 2026 13:55:56 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=86400, must-revalidate\r\ncontent-encoding: gzip\r\ncontent-security-policy: default-src 'self'; img-src 'self' https: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https:; frame-ancestors 'self' ;\r\netag: W/\"a80-19b10c8d5a0\"\r\nlast-modified: Fri, 12 Dec 2025 04:19:16 GMT\r\nvary: Accept-Encoding, Accept-Encoding\r\nx-dns-prefetch-control: on\r\ncf-cache-status: EXPIRED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HV9gbnvyYhwJpv8zeTJ5rTBfUjFQCPpg3qHsRNIAmqucE9Pv4AQtulZZOjiJNh%2F6b79%2B85kbNDVXQPlTPMhzt%2F7JxvY%2FCkBpQwJrhmmoBKyC2vV%2BuDRN6Hs7%2FkbnqyAo\"}]}\r\nserver: cloudflare\r\ncf-ray: 9f4f4966fd6c120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2688,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2687)","md5":"191315be80746226f807d10f1eb2bad1","sha1":"c30c616414dabeb026a5d0f7583479a517e15187","sha256":"a1471487eb3e8eb93b1a9e056386019ff5eedadea29bbb725b5494fb2e9ad90a","sha512":"62ed43d4a5312894ef30bf9f4579778e8e40833c6321262eb23da81dce2ad0dd9046ff85fccf98f9b60084b170b43566bff83e23763b47dd63b9ae3f18901117","ssdeep":"","tlshash":"f851d7f53185f1f07f692490d17aa620b9392e73b81e4890a6fb4c462b2e40e9431d2c","first_seen":"2025-12-04T18:46:55.384354Z","last_seen":"2026-05-01T19:53:40.334861Z","times_seen":3236,"resource_available":true,"data":null}},"time_used":171,"timings":{"blocked":37,"dns":22,"connect":1,"send":0,"wait":92,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/9cf456584347d1ca.css","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:56.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /9cf456584347d1ca.css HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FIVpQcx3TkRC464Wx7PLeYk5IljLl1NFKmYOuM1fL4vQ%2FADdQrztKi9b63ZyFR7QUyXrM9KL%2FMPqd6D6D%2FUnSyehGaI9lS0W74VWZ7ci5VQvPPmfoy51zWhqBdcR6Lg%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:56 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"c2a37d5e48affff735fb2e83463d6b06\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9f4f4966b8680b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81265,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c2a37d5e48affff735fb2e83463d6b06","sha1":"0d439808f4d58385016bf11b3d11c82bd3e43a97","sha256":"76fb6911565cb80550ef1aaeed6c31c19339e634e389dcd9cc62781540c648fb","sha512":"34d00dc79bae456a30abd57e340c0c836ce585e408b1fec5893c7d4268410c59d3637277204871e082342112866931b7cfbeb561112c8c9e60f5a86e79898443","ssdeep":"1536:Dp6qRmkRXJs83iI8udsVynSuqn7PEL988R9881A:F6qckRXJs8r8esVyfqz1","tlshash":"e783c764a22aed7fec2354b6537cfc1c5118b184ee2117eafa1325225ec27f21d7a760","first_seen":"2026-05-01T13:56:26.383508Z","last_seen":"2026-05-01T15:12:37.735859Z","times_seen":5,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":132,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/assets/eleven.js","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:56.600Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /assets/eleven.js HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/javascript;charset=utf-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dCfddCFqJAPps2GbCLLvg%2B74o7u5lxR9eGZe5IPN8D%2FKRl5x5gAAZrFGVLAT5TET8mXBwID6PhsLpp52PmTrxu8LXvxUf%2FMTJXLevqn1GdGwfr8AjK8CrZYd%2FqVX6t4%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 00:01:50 GMT\r\ndate: Fri, 01 May 2026 13:55:56 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"e28c89f8964236aec24f22a889ed5efb\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9f4f4966b8690b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7113933,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"62851808d35a19a388e28322acb50c32","sha1":"9246ecbbf04b8321f24277696e6da8e50e453c3b","sha256":"1dcc048947d4b37eb39849e83a5a99a6e5d5448d0871e1a2f1265c0c2b956ad5","sha512":"d1a55d3b22d1ee3091f90b55fa323ab28cea8348c4f9b8fcfd9dba59bb8174720004b5fd0ae42d72bbd2f648be559898aefbade4ba6478c6d2267bd8c8dddf84","ssdeep":"24576:apfRyhK29Fcq5jIDfgVoOVta8ZIWAcFBra+y:aK4MO","tlshash":"c42507cf27d9b5551212307b3d1a2093e4aecc99b98ccd94f797ac2ef84c72ca1b5624","first_seen":"2026-04-24T15:23:09.416345Z","last_seen":"2026-05-01T20:18:02.720069Z","times_seen":53,"resource_available":false,"data":null}},"time_used":809,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":632,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/dis-1.png","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:57.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /dis-1.png HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/png\r\netag: \"5b0134481ed450f4a1add179b4423971\"\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:57 GMT\r\nserver: cloudflare\r\ncontent-length: 907\r\naccept-ranges: bytes\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LcymHWnQxn7NGOJ1ER6Jgq4tT6hUM%2FT0wTZdZwQGMsfzn5X%2BMCHDZN%2F4vi45I7pXkaUpFs7DgdapqxQBjqsB66KMTND4qEi8XjCZr%2BwOHCRUP0YTMstPE9QL0zBpdLg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9f4f496a08780b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":907,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit colormap, non-interlaced","md5":"5b0134481ed450f4a1add179b4423971","sha1":"bbcd35e3842a2326741fc4efa0f017de09b64799","sha256":"6d3212b411ce982c27040461f665c2216b7d9bb46266edc5afeb51e273eab8f2","sha512":"3db7570475ac155d0926105c2de99c5bf64e231f342d39720fa3b2218165e01fe7481ad5781ac148f88d29bee44c6bb58c6403aa859d030a3bcfead1e4b3d8ee","ssdeep":"","tlshash":"441163faf6206592d67808fc121004680caa535a6496cf08ab69d3af6e1de50d69ec8a","first_seen":"2026-05-01T13:56:26.385286Z","last_seen":"2026-05-01T15:12:37.752355Z","times_seen":5,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"aveforge.app/favicon.ico","fqdn":"aveforge.app","domain":"aveforge.app","tld":"app"},"ip":{"addr":"104.21.20.204","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://aveforge.app/","date":"2026-05-01T13:55:58.098Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"aveforge.app","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Sat, 25 Apr 2026 22:10:21 GMT","end":"Fri, 24 Jul 2026 22:10:20 GMT"},"fingerprint":{"sha1":"BE:32:9A:D2:58:3E:34:2E:9A:3D:D2:5C:81:21:0E:C0:06:A5:88:E6","sha256":"71:BF:3B:C4:5A:73:15:DC:70:37:FD:9B:A6:C5:76:0D:FA:BE:9A:BF:58:2D:E8:FE:68:E9:6C:DD:76:6A:FC:47"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: aveforge.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://aveforge.app/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: image/x-icon\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Rum5z4FpEGnV0WIHIP4RofeWbFm%2B3PkunjE9UQ4sXt3e8rfXcZSpNhcORPIW111Dozugh9GubFkc7qUjfOEvUVqVpyn0K9vUfPsaIVK6dwzsfjgtuSoLYBD7lx%2F%2FkAA%3D\"}]}\r\nlast-modified: Sun, 26 Apr 2026 00:01:48 GMT\r\ndate: Fri, 01 May 2026 13:55:58 GMT\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\netag: W/\"c2e8808feeb05b7fddd9e507d64b4f7b\"\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9f4f497028960b59-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":0,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"c2e8808feeb05b7fddd9e507d64b4f7b","sha1":"1c8c3d7ef7f90bfdae5468bff7f6f9b49fd67e5e","sha256":"1a7ffa80882fe440fb3d521ba4067eb30c2993cd3561be345aa3d674b622e2b3","sha512":"397e19ae4580ee6b8f2eb8f844ff7be33a8359462c6b6c67a7b0f3e9be41b3891bb3c9e473aa9d14c4922e669d5ecf571e65ffbe0dead1e295312da0f9694013","ssdeep":"96:k11tjbbBGCRIT1NGHWmT6fVn2i+Z9kqC2QWy:i3jbbJaHdAgEi+PHNQf","tlshash":"8c910a343ee3810ae55146f1e9e2c7b353a4526d0235ef5e4285c0ec76592e87ba36dc","first_seen":"2026-05-01T13:56:26.388584Z","last_seen":"2026-05-01T15:12:37.746486Z","times_seen":5,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-05-01","alert":"Sinkholed","trigger":"aveforge.app","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}}]}