{"report_id":"88a7b61e-7329-4320-9a89-001af1252b33","version":0,"status":"done","tags":[],"date":"2026-09-23T13:56:42Z","url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.93","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"title":"Meta for Business | Page Appeal","dom":{"size":22080,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (16506)","md5":"86fc4399b271c62e43517950bd705082","sha1":"57632e254af2ac94e6467693b8108332cd75fe0f","sha256":"d301aab0d8797e4ce9f8a65538f50cd480a0857df69e700a6c46c49e184caa50","sha512":"273b66cce14417291282b9cfacd3157aede8f937620961325bfdb73bec596e6f76a6a7b010a023ba6f2697a3b7b0129aac99642fbd73929f3a889f6ba7e9b876","ssdeep":"384:gAoS10lNvEiVDJVAFZnuyr17TpS/BHYO86tM73/+ATcf2W++TaDv:gAmlNvEiVDTmuy57TpS/ZYAIcf2W+++j","tlshash":"c1a209b065b8236e569783f9651b63e821ae651ff2738050f6fc02b957cacd2fd23580","dom_hash":"domhashcec6445d58431e61db842be02e5cd7c3","first_seen":"2026-09-23T13:56:47.426362Z","last_seen":"2026-09-23T13:56:47.426362Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.93","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":["openphish"],"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T13:56:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","ip":{"addr":"172.66.44.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":24,"request_count":6,"received_data":714112,"sent_data":3328,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"static.xx.fbcdn.net","ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"domain_registered":"2007-05-03","domain_rank":4147,"first_seen":"2012-12-01T13:12:13Z","last_seen":"2026-09-21T17:16:36.539108Z","alert_count":0,"request_count":1,"received_data":3779,"sent_data":588,"comment":"","tags":null,"fingerprints":null},{"fqdn":"get.geojs.io","ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-02-18","domain_rank":99948,"first_seen":"2017-03-30T18:44:25Z","last_seen":"2026-09-19T22:15:08.427716Z","alert_count":0,"request_count":1,"received_data":1191,"sent_data":515,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/static/js/main.9ff7820e.js","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c34e3e4e5b7e8078bc9a5ef06c28d2e9","sha1":"1928c2ce5a17771883eeeb763a5de453f5c197d5","sha256":"0fdef61ae64dde1625136fd374133de9493f1e9699487cd62328313d13b9db72","sha512":"b15915ecc77fc4d25f7e101f681a776f1f0787e48ddcebd1a0cc864bdb1d9cd9e7e97b0b9b6c72a381880af32199419a8ab35e52f375236bc6366130aa1b89f7","ssdeep":"6144:kLySw/LuAuh7qF6mLqprrdcL5TLJeg5RFF+414CwDEBKZUMFvMgr1sny1zBs6p6F:kLySw/Ly7qF/KHs5wZnBsOpW","tlshash":"03d45bfa3640f76679b227a6406f900eb37c1d1aec0d8450f2e7ecd96960866703bf59","size":604811,"data":"","first_seen":"2026-07-03T21:27:16.859632Z","last_seen":"2026-09-23T13:56:47.428332Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T13:56:13.270Z","timestamp":1790171773270,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 13:14:56 GMT","end":"Sat, 19 Dec 2026 13:14:55 GMT"},"fingerprint":{"sha1":"36:9E:FD:78:E1:E7:E9:D5:DA:3F:9D:CC:C6:ED:1F:C6:83:DF:B4:D3","sha256":"51:AD:07:B7:A1:C1:57:C6:E7:F4:3A:EB:CE:04:C5:B6:21:DF:3A:BF:72:6B:CF:FD:41:A2:0A:3B:99:F8:03:C0"}}},"request":{"raw":"GET /send_appeal_request HTTP/1.1\r\nHost: xenfaro-mpt-qalzuni-r8x2pe47.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 13:56:13 GMT\r\ncontent-type: text/html; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=0,i\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1bMzsE2J9kv5%2F7FW3VyDt2KDP66Siw0j8mPzS%2F9DJYiRhvG0Pjk5K83MZD2a1dnTKv3M20F9DurLD6wb%2BGuexVrTcekpH%2Fp2n%2Fq9VxdTnBdgGaTbrsHUYEFs%2FsN1TiRWUfOOBc0Q2Q9EyD5tikg0uVJyHbH4eYJfbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3fa0d2f2d873181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]}],"data":{"size":715,"size_decoded":1115,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (715), with no line terminators","md5":"0a14c25d2f2bcfc8f3d00c00c134377b","sha1":"d797ca37c0af78baeee64d6bbbb84811e2a0db0b","sha256":"a58328410243ee73ef5a6ec6c27d0432ed8678a4aa7c0a31fd9ce19d2827e176","sha512":"0ea5c39c786730925abd3e87402e273036c5fc5f2ff60ef3f05490c2bc6e641ba4fa6d13aaea275aab27d55e4bc1b00046f4e29ed2e5fc5ea3edd3a047c9b4a1","ssdeep":"","tlshash":"7001c013cc20d48ca270937bfd72b03cc98ab908aa51ac54b8c614ab49d4ba28856d11","first_seen":"2026-07-03T21:27:16.91103Z","last_seen":"2026-09-23T13:56:47.427714Z","times_seen":198,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":11,"connect":17,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/static/js/main.9ff7820e.js","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","date":"2026-09-23T13:56:13.534Z","timestamp":1790171773534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 13:14:56 GMT","end":"Sat, 19 Dec 2026 13:14:55 GMT"},"fingerprint":{"sha1":"36:9E:FD:78:E1:E7:E9:D5:DA:3F:9D:CC:C6:ED:1F:C6:83:DF:B4:D3","sha256":"51:AD:07:B7:A1:C1:57:C6:E7:F4:3A:EB:CE:04:C5:B6:21:DF:3A:BF:72:6B:CF:FD:41:A2:0A:3B:99:F8:03:C0"}}},"request":{"raw":"GET /static/js/main.9ff7820e.js HTTP/1.1\r\nHost: xenfaro-mpt-qalzuni-r8x2pe47.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 13:56:13 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=3,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MvBJ3GtZ2LRARzRgwBL%2FRe47Pn6x9aaYqFDTHd%2FzEIjkmck2Y%2FB2StF4IIUES441kP%2B9JBZ2ttuy9wxlhLWC8ibTJeGymccadr6FMETKONyNgj9iSFjPw6xCAHeq49%2F61ehmJT9fzq8meNnSZxO%2FVdNLaB7%2F0zkKYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"400905987e68c21d3403026844430906\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3fa0d309b373181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":604811,"size_decoded":184557,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"c34e3e4e5b7e8078bc9a5ef06c28d2e9","sha1":"1928c2ce5a17771883eeeb763a5de453f5c197d5","sha256":"0fdef61ae64dde1625136fd374133de9493f1e9699487cd62328313d13b9db72","sha512":"b15915ecc77fc4d25f7e101f681a776f1f0787e48ddcebd1a0cc864bdb1d9cd9e7e97b0b9b6c72a381880af32199419a8ab35e52f375236bc6366130aa1b89f7","ssdeep":"6144:kLySw/LuAuh7qF6mLqprrdcL5TLJeg5RFF+414CwDEBKZUMFvMgr1sny1zBs6p6F:kLySw/Ly7qF/KHs5wZnBsOpW","tlshash":"03d45bfa3640f76679b227a6406f900eb37c1d1aec0d8450f2e7ecd96960866703bf59","first_seen":"2026-07-03T21:27:16.859632Z","last_seen":"2026-09-23T13:56:47.428332Z","times_seen":197,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.xx.fbcdn.net/rsrc.php/v4/yS/r/ZirYDPWh0YD.png","fqdn":"static.xx.fbcdn.net","domain":"fbcdn.net","tld":"net"},"ip":{"addr":"31.13.72.12","port":443,"asn":32934,"as":"FACEBOOK","country":"Sweden","country_code":"SE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","date":"2026-09-23T13:56:13.919Z","timestamp":1790171773919,"http_version":"HTTP/3","security_state":"","security_info":null,"request":{"raw":"GET /rsrc.php/v4/yS/r/ZirYDPWh0YD.png HTTP/1.1\r\nHost: static.xx.fbcdn.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nx-fatal-request: static.xx.fbcdn.net\r\npragma: no-cache\r\ncache-control: private, no-cache, no-store, must-revalidate\r\nexpires: Sat, 01 Jan 2000 00:00:00 GMT\r\ntiming-allow-origin: *\r\nreporting-endpoints: permissions_policy=\"https://www.xx.facebook.com/ajax/browser_error_reports/\"\r\nreport-to: {\"max_age\":21600,\"endpoints\":[{\"url\":\"https:\\/\\/www.xx.facebook.com\\/ajax\\/browser_error_reports\\/\"}],\"group\":\"permissions_policy\"}\r\ncontent-security-policy: default-src blob: 'self';script-src *.facebook.com *.fbcdn.net 127.0.0.1:* blob: 'self' 'nonce-LbsBOIAH';style-src 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';font-src data: blob: 'self';img-src data: blob: 'self';media-src data: blob: 'self';child-src data: blob: 'self';frame-src data: blob: 'self';manifest-src data: blob: 'self';object-src data: blob: 'self';worker-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c\u0026minimize=0;\r\ndocument-policy: force-load-at-top, include-js-call-stacks-in-crash-reports\r\npermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to=\"permissions_policy\"\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nx-xss-protection: 0\r\norigin-agent-cluster: ?1\r\ncontent-type: text/html; charset=\"utf-8\"\r\nx-fb-debug: 8VeztcJai+H5b60ohsu9SZWlGcSVjjooOYkrLQTpHlvEu8qUmZcnZ++MXXAEfP7kG9fqAOnWb6XUVESB7Xgp2A==\r\ncontent-length: 0\r\nproxy-status: http_request_error; e_proxy=\"AcRvphFR9rFvaFXroNp6IEFkZ0KOLAE6L3NFMHJMiscnfpcNOzhXOq0MYGdJdUZSXKpAAWK3jMF7k_9E3Wme\"; e_fb_twtaskhandle=\"AcTDVgAivAlcnO18tgratc6gIrrsIAFdiIpHVUjjziAQ5XYFmNu_TwvpwWQsydqP1wCG6MrkuVyn0WWgFLUBrcq7gX740EhuV2bAqQdPxN0fta8\"; e_upip=\"AcQrfO379XemHX5VKFWaUVLzcG-D0QhpHSuNemLdwi3iCDVkvIZo4Y_vWtjHkcXrK2Xp7c660BnROx4qxqjbHvmim-OkvcYfLllP9GDD2LE\"; e_fb_zone=\"AcTGSGRn8bIKPw2YYcZKLIKbPxwycolmsG0yTeTsr8nf_OKKLlNv9R8QIMkpGeI3\"; e_clientaddr=\"AcTHW1JiLHLspIishwbWLd80sSWbckYM4mDscDnm-DqfnIN3DQ8zsFS6yaArf3TW4Nja2sB1RQMpZ-PmoSXVdjMN8_sOO56-hsiumY24pNl5CCAO\"; e_fb_vipaddr=\"AcTiPu7ILhNCohTF1t8kti7jZ_x55VDqBvXnNsTXmG20tA0Ogi6Q3oCnUWXd12aZtU5DOxMUJEnpwI0roKCyh-m2DR3wKDoe3JVFAMGN\", http_request_error; e_proxy=\"AcTaOtOsxtgBV6L2hQ4XL0liTYc-0a1DfbZTmwQxip_gi0vsf_zDBGuuKR-poou1DEhlxNIDBm6qzbei\"; e_fb_vipaddr=\"AcRA1JCcXtO74VTCwcGyv-TNOqgL6FpXAHioW7rkHwK14MC2DTiT5qV9ANMDNu0oowwCpwQ\"; e_fb_twtaskhandle=\"AcQkVBX4B5PZIr78zgOkRhqAgVuzfpUqpLzd1WD5bCMty7e7g1tPHk28sdYm8AJtVdO9o2c5zW9whjGiL-8ZB_Bjuk_-1mWGJ6I\"; e_fb_zone=\"AcQnaYD03YBgYIZo1_Qtl0TUNtrJUms3dmTnt0J1q-TfM2oboJqkAIOAmU9BRQ\"; e_clientaddr=\"AcQc7Cr5g2iusTbVAVjHLAefV8-ohBf2Zo7NSq7TgkeqEp8hJpYNU_BI_JKAw8Js6wIg12XJjBkt3RpRBxs\"\r\ndate: Wed, 23 Sep 2026 13:56:14 GMT\r\nx-fb-connection-quality: EXCELLENT; q=0.9, rtt=10, rtx=0, c=23, mss=1232, tbw=5069, tp=9, tpl=0, uplat=2, ullat=-1\r\nalt-svc: h3=\":443\"; ma=86400\r\npriority: u=6,i\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-24T00:27:32.070317Z","times_seen":18626328,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"get.geojs.io/v1/ip/geo.json","fqdn":"get.geojs.io","domain":"geojs.io","tld":"io"},"ip":{"addr":"104.26.1.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","date":"2026-09-23T13:56:13.931Z","timestamp":1790171773931,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"geojs.io","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 13 Aug 2026 16:49:05 GMT","end":"Wed, 11 Nov 2026 17:48:54 GMT"},"fingerprint":{"sha1":"97:C3:25:F9:83:2A:76:05:E8:D4:76:4A:DA:52:15:59:ED:A6:05:42","sha256":"FC:04:B1:34:4B:26:76:42:CC:F8:96:7A:3F:5C:0F:DD:75:17:97:D6:AE:93:C5:45:AF:58:15:9D:3C:57:C9:25"}}},"request":{"raw":"GET /v1/ip/geo.json HTTP/1.1\r\nHost: get.geojs.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/\r\nOrigin: https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Wed, 23 Sep 2026 13:56:14 GMT\r\ncontent-type: application/json\r\nserver: cloudflare\r\ncache-control: max-age=0, must-revalidate\r\nlast-modified: Wed, 23 Sep 2026 13:56:14 GMT\r\nx-request-id: d77755932945b1b1f15e1a51de83b82d-ASH\r\nstrict-transport-security: max-age=15552000; includeSubDomains; preload\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\ngeojs-backend: ash-01\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8K7mOI%2Fvir2v633BeOq%2B7aluAygHme3csNZSSkPeSiADcoRqURcfm%2BpvbNO1%2FDIDc1ENL0c6wi3t29lcMNVrVQG6wBPCMQBc2bJzRDSJi8GcUqGTNRdTtydfG3nbBg%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: a3fa0d33297f0daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":302,"size_decoded":1089,"mime_type":"application/json","magic":"JSON text data","md5":"ba540de15d483c46e5118413d084fdfa","sha1":"0009dff22dcf2be0fc5c5da8e523a002b79a7b93","sha256":"1ea1f8b0c835d4642f61950f0628b1426d3def8894bce0189a9fe737d4fdfc65","sha512":"4bd9529fed88cad0efaa357d04c7e19a3719594fd409aceaeced522482cd4f31e837d9185d224ea49a94d5bc52c4636f68385d2a8923411ee8b9ab27d5b9cf0f","ssdeep":"","tlshash":"e1e0269544fcaf29a83b829a013e096b25fa910282ca68098eb43f08c2c00996001b1b","first_seen":"2026-06-07T21:44:43.947771Z","last_seen":"2026-09-23T15:06:47.582739Z","times_seen":4130,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":2,"connect":1,"send":0,"wait":138,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/logo192.png","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","date":"2026-09-23T13:56:14.069Z","timestamp":1790171774069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 13:14:56 GMT","end":"Sat, 19 Dec 2026 13:14:55 GMT"},"fingerprint":{"sha1":"36:9E:FD:78:E1:E7:E9:D5:DA:3F:9D:CC:C6:ED:1F:C6:83:DF:B4:D3","sha256":"51:AD:07:B7:A1:C1:57:C6:E7:F4:3A:EB:CE:04:C5:B6:21:DF:3A:BF:72:6B:CF:FD:41:A2:0A:3B:99:F8:03:C0"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: xenfaro-mpt-qalzuni-r8x2pe47.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 13:56:14 GMT\r\ncontent-type: image/png\r\ncontent-length: 5347\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\netag: \"fa61cd1a426f788b23866d09edb90401\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9dDWr1cWx30HkuymsacsfpZTx5Lryd%2B106O%2F6FTZWOPdK0SyOYxXzqMqEpIxzCknyMpFZCxk2yUNuO%2BJiwxslRb2u6CCR2BpH6RNim5cXTgPzxRtUwA9n7qlgmSY1WKryGhpbFm5TRyYJWT2kzwaXSc25Uw7tNrtDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\ncf-ray: a3fa0d33f82b3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5347,"size_decoded":6136,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-09-23T22:32:55.981644Z","times_seen":15140,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/static/css/main.1ab92d2f.css","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","date":"2026-09-23T13:56:13.536Z","timestamp":1790171773536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 13:14:56 GMT","end":"Sat, 19 Dec 2026 13:14:55 GMT"},"fingerprint":{"sha1":"36:9E:FD:78:E1:E7:E9:D5:DA:3F:9D:CC:C6:ED:1F:C6:83:DF:B4:D3","sha256":"51:AD:07:B7:A1:C1:57:C6:E7:F4:3A:EB:CE:04:C5:B6:21:DF:3A:BF:72:6B:CF:FD:41:A2:0A:3B:99:F8:03:C0"}}},"request":{"raw":"GET /static/css/main.1ab92d2f.css HTTP/1.1\r\nHost: xenfaro-mpt-qalzuni-r8x2pe47.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 13:56:13 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=2,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YTYoUaFI0wREo6l%2FLwAGOslYq4AmJgpJw%2FO9G%2Fl3%2F631bYJOw4iWT%2B6ZalcoAuE%2BuC9iQ51%2Ff6gw2nX6ffuQEYdnWUO4zLJM2T2R0K4uXEYCDQEamhcu3QVJy41a8QFdre%2FCrhNOeN1mB9nCGMzlOGmz2224h7NTkg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"51a04497d27630860ed0c0293bf277b7\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3fa0d309b3a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81803,"size_decoded":33699,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (64353)","md5":"2f3a5b28572b113057d13f1785c64152","sha1":"2581f1254c60c3526a1fd4f638a94e3096143411","sha256":"147901b289f7f5244ce3bd43a42e76c4c3cef8b3991d61a78b03799114cb9bc3","sha512":"c0955e436f2c09a3d6f1989d6f8a238cce7ea9192d64d812a42ba5b4bdaca7eccff35ec851fc4784c184f87a3c5916427d897c8bb4cfc22fc1c47a099c792001","ssdeep":"1536:a2dINsZqx09l02Fkj74LbH19TSoGT5YS+tfJoy0:a2dINsZqsl02W4bTSLibLe","tlshash":"b283fa1c5bc500bbfc13c9f2f1d4a7d4a12ea284ed250bfdd446725ae2c72e91a63e51","first_seen":"2026-07-04T20:44:07.552398Z","last_seen":"2026-09-23T13:56:47.431474Z","times_seen":399,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/static/media/meta.5c1d88c5d04223effff596d4fe467064.svg","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","date":"2026-09-23T13:56:13.916Z","timestamp":1790171773916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 13:14:56 GMT","end":"Sat, 19 Dec 2026 13:14:55 GMT"},"fingerprint":{"sha1":"36:9E:FD:78:E1:E7:E9:D5:DA:3F:9D:CC:C6:ED:1F:C6:83:DF:B4:D3","sha256":"51:AD:07:B7:A1:C1:57:C6:E7:F4:3A:EB:CE:04:C5:B6:21:DF:3A:BF:72:6B:CF:FD:41:A2:0A:3B:99:F8:03:C0"}}},"request":{"raw":"GET /static/media/meta.5c1d88c5d04223effff596d4fe467064.svg HTTP/1.1\r\nHost: xenfaro-mpt-qalzuni-r8x2pe47.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 13:56:13 GMT\r\ncontent-type: image/svg+xml\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=5,i\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TvjQhOKLs%2BoHAbLLG5cl04Xk25WxGB8u7mBNBDo19ghaA4R55V5BN3iGyQX%2F3UN5Dage70QQtRd2YRXP0%2Fjn3HJhSrQs73UAybinLXbChrSDaupAkZ0cV9KODTBV9Fc%2FEQOt5HZgEJT3HXmLv83n5JNaAR5lXMR84A%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"06367edd4322d4420cf92fd725314f8d\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3fa0d32fc8a3181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12365,"size_decoded":4888,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f409a28abf39a2f1e8a1d07e7fdac67","sha1":"4151a28ca709c054bb24f16802e1c66302716eb6","sha256":"1bce6bcd554cf223149803a9902378f6d66dd914e5d6c3943182348535711d27","sha512":"6cc8ebf56298e071d7cc57e7f7ad9818272b41517afa043faabe4683bb6a61adb286d6902e589e89d8da9ec81884caec3e8143c41107d30e8b665c8a2f7f135d","ssdeep":"192:azZL7+d/uGmeNM0mIb1L9d22PJ20De7SIpFJ8+u5l:azUd/DOB+xwIJ20DeDpF2nl","tlshash":"ae4297f2f31de5a2b285dba8ec22543651ae18fbfb7481a1c0e4ef6e64240d14c4ded1","first_seen":"2023-05-24T20:52:41Z","last_seen":"2026-09-23T13:56:47.432269Z","times_seen":4468,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":48,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/favicon.ico","fqdn":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","domain":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","tld":"pages.dev"},"ip":{"addr":"172.66.44.93","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request","date":"2026-09-23T13:56:14.070Z","timestamp":1790171774070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 20 Sep 2026 13:14:56 GMT","end":"Sat, 19 Dec 2026 13:14:55 GMT"},"fingerprint":{"sha1":"36:9E:FD:78:E1:E7:E9:D5:DA:3F:9D:CC:C6:ED:1F:C6:83:DF:B4:D3","sha256":"51:AD:07:B7:A1:C1:57:C6:E7:F4:3A:EB:CE:04:C5:B6:21:DF:3A:BF:72:6B:CF:FD:41:A2:0A:3B:99:F8:03:C0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: xenfaro-mpt-qalzuni-r8x2pe47.pages.dev\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://xenfaro-mpt-qalzuni-r8x2pe47.pages.dev/send_appeal_request\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 13:56:14 GMT\r\ncontent-type: image/x-icon\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=0, must-revalidate\r\npriority: u=6,i=?0\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AxYe0k3J8hMCDTLTkYn4v%2FhPRfx3%2Fut%2Fud21P6i94MNO3Kl%2BWf1%2BlJ39tAkC6P%2BEdiJ4BSysajvHMe1zPgeCQR9wzAnf7aLwUrdn1XpVEU0N1eZxSn%2Bl9ACwzVdTTgQ8rmQZIPDg4zOpahkihTagPPHu6nPsevkrtg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"f9f7b21d70f1f7ca06b1df25a84512b4\"\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: a3fa0d33f8343181-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4286,"size_decoded":1943,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel","md5":"5e1f5addac24d740cec0c41d5f99cd20","sha1":"0bce047ed832d7011b4ea2a91ee924694984b0dd","sha256":"75476d4fa93c73823ba9efd9f14068fce0af20f9e2183bc978fb30c2df2c55c7","sha512":"4250cb442f2354d761dedf759d263c137359bf14931ede1db9e2b52f695c2763b176651189f06213ec4eb750cab831e3b08eb35663e662e7a34dd1564a0ff3ad","ssdeep":"48:4uAboK9GQaB8x25GcsxiY/9QL72n5Otrx:gGQ+8x2gzMPEUFx","tlshash":"6e919734705468f4f5075a370adaf37101bbaeeee83a69508dbcf91340306c59d2ae8b","first_seen":"2024-05-30T07:56:00Z","last_seen":"2026-09-23T13:56:47.432835Z","times_seen":13827,"resource_available":false,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cira_dns","sensor_type":"DNS","title":"CIRA Canadian Shield DNS","description":"CIRA Canadian Shield DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cira.ca/en/canadian-shield/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"xenfaro-mpt-qalzuni-r8x2pe47.pages.dev","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}