{"report_id":"88f234c9-7d79-425e-863e-acab332fed52","version":6,"status":"done","tags":[],"date":"2026-03-27T23:04:01Z","url":{"schema":"http","addr":"brett-update.xyz","fqdn":"brett-update.xyz","domain":"brett-update.xyz","tld":"xyz"},"ip":{"addr":"172.67.193.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"brett-update.xyz/","fqdn":"brett-update.xyz","domain":"brett-update.xyz","tld":"xyz"},"title":"BASED BRETT","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"brett-update.xyz","fqdn":"brett-update.xyz","domain":"brett-update.xyz","tld":"xyz"},"ip":{"addr":"172.67.193.100","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-01T23:04:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"brett-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-22T22:20:05.651051Z","alert_count":0,"request_count":1,"received_data":1972,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.basedbrett.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-02-22","domain_rank":0,"first_seen":"2024-12-02T06:19:57.809263Z","last_seen":"2026-03-27T22:03:38.697268Z","alert_count":0,"request_count":2,"received_data":45416,"sent_data":896,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"brett-update.xyz","ip":{"addr":"172.67.193.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-03-27","domain_rank":0,"first_seen":"2026-03-27T22:03:38.031984Z","last_seen":"2026-03-27T22:03:38.031985Z","alert_count":3,"request_count":3,"received_data":3576074,"sent_data":1437,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-03-22T22:16:16.728956Z","alert_count":0,"request_count":2,"received_data":65014,"sent_data":1106,"comment":"","tags":null,"fingerprints":null},{"fqdn":"imagedelivery.net","ip":{"addr":"104.18.2.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2021-04-09","domain_rank":15876,"first_seen":"2021-09-20T12:34:55Z","last_seen":"2026-03-25T22:04:24.776197Z","alert_count":0,"request_count":1,"received_data":97343,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"brett-update.xyz/semantic-button-2.3.3.min.js","fqdn":"brett-update.xyz","domain":"brett-update.xyz","tld":"xyz"},"ip":{"addr":"172.67.193.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f9d58a2f67ae84d495e9a32d39357b85","sha1":"c483d87a189d39eebda041d0f4ef63339a61dd7c","sha256":"ef2a295f49bf4850b4bdf2f9866d42f6c6c0092520d068051955a07dca3b36eb","sha512":"da596658822b686ff91a74a2004662867c83851d95ba8d8356d86e0f929b1b301ff49f39b2db07595953fa5e3888017c507ee67667103cd63184a5a274b77ab6","ssdeep":"768:d+0AShQcI01DGSDGQ+Zxt9bDS1o25ZI0CYzD4pihcU3qYUb4izL7fBR9cic1W2zi:Q5r2fdkfSdrI0GeWJpXt9","tlshash":"7563b4da690ad0d98e5224ded433e516f4254e63ce6df163a23cdcc0746ef26888727b","size":71130,"data":"","first_seen":"2026-03-27T22:03:41.868269Z","last_seen":"2026-03-27T23:55:55.569396Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brett-update.xyz/","fqdn":"brett-update.xyz","domain":"brett-update.xyz","tld":"xyz"},"ip":{"addr":"172.67.193.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"26420b98a16bc8b0a139e59bc6039968","sha1":"5af110f0795e35ee018edbbad948a9aa0968df69","sha256":"7fb01c8ac9c6945226a7deb5bf93724551535beb8887b8952ffd93da61e6278e","sha512":"c38befc0ea0ad5ebb42459f434a3e7532cd7a251b10e0a8ba8dc044a1bc0bda097eeade96777076d32df25129e928ce29af647d52d796b0582c1b1e222914d5e","ssdeep":"96:agsyYUIlzANI4wNIpiu6p+RK7yVQKArHoIbnq9HluU48+9nCGG/k07:ag9TIlk0IpH6p+RUSQKVIbnS+9nm8W","tlshash":"92b1726b33b72430aaab66bf97a74398313060033847c62d3e6c85044fd1f81a6b7dc8","size":5202,"data":"","first_seen":"2026-03-27T22:03:41.90067Z","last_seen":"2026-03-27T23:55:07.115604Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"fonts.gstatic.com/s/londrinasolid/v19/flUiRq6sw40kQEJxWNgkLuudGfvdDwYzlZw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brett-update.xyz/","date":"2026-03-27T23:03:37.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/londrinasolid/v19/flUiRq6sw40kQEJxWNgkLuudGfvdDwYzlZw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://brett-update.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 32452\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 10:44:04 GMT\r\nexpires: Fri, 26 Mar 2027 10:44:04 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:41 GMT\r\ncontent-type: font/woff2\r\nage: 130773\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":32452,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 32452, version 1.0","md5":"cc340bb2e0e2e0c0bfd90b5fbd890b40","sha1":"83ee345a304d9e942a64314e74f0d7fcd73faea0","sha256":"ed455d5fb4d1b1e9e1892db85d1026c9e435dc4412ede3244c7ff92ef8b50ad9","sha512":"a00ab49034604eee09895777a483e868bb5d231d338321a3adeda0a6fe1ecb76fad5223c9696151c722726b15f9bdff3ce0f33684cca7cfbc64caa094f82615e","ssdeep":"768:FthbLzWHpGlZjNObWK+vseFMOI4W0r0eWpMG18kzUW3Du27+8+jCJDPneZ:FtN0pMNlK+vssI4pupZOmDu2ijCheZ","tlshash":"3be2e143a49ca050fcf7306be74d193f5a39e18857b67b4d03e8e877b2896112bd3069","first_seen":"2023-05-24T10:37:45Z","last_seen":"2026-06-08T11:33:29.829753Z","times_seen":108,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":132,"dns":0,"connect":0,"send":0,"wait":56,"receive":16,"ssl":105},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/londrinasolid/v19/flUhRq6sw40kQEJxWNgkLuudGfNeKBM.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://brett-update.xyz/","date":"2026-03-27T23:03:37.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:46 GMT","end":"Mon, 01 Jun 2026 08:37:45 GMT"},"fingerprint":{"sha1":"CE:A8:F5:0E:2D:25:9E:74:0C:47:4D:6C:AD:DF:7B:FC:CE:E6:41:7D","sha256":"E1:06:81:F7:22:E3:29:2F:2A:B9:4C:3F:37:46:25:24:5B:C8:B5:7F:9C:3E:54:A2:D2:DD:E0:54:C0:09:12:C1"}}},"request":{"raw":"GET /s/londrinasolid/v19/flUhRq6sw40kQEJxWNgkLuudGfNeKBM.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://brett-update.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 30892\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 26 Mar 2026 03:38:16 GMT\r\nexpires: Fri, 26 Mar 2027 03:38:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 16:34:38 GMT\r\ncontent-type: font/woff2\r\nage: 156321\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":30892,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 30892, version 1.0","md5":"7d1fdb49b470e06cfb7321ca11cf0a6d","sha1":"fb9365c5713f7f7b841b7a4edb40b088a987e54e","sha256":"7ad0db37df9a924eb0fb15f3814f8e9fdf0273fac6cd78292b00582bafa0c634","sha512":"077f5e2d8ac937e753ffc6b345f84275e40cd70160b9ca9e45bc1f4cb9f98080f316f7b6c703bc62327759630e02dc7e56dedfcdc44cad0dfd171c4890d54726","ssdeep":"768:XF8DMy7uxQ2H31si5erYfHn4BnMyRZSGht5mfRBH:XFw0Q2HFsQIlnJSG/kRV","tlshash":"82d2f2caf0f84469e40f480f4b87890f2d91549c693b2aab16b9953373df511ef62d71","first_seen":"2025-06-23T14:11:11.630342Z","last_seen":"2026-06-08T11:33:29.774396Z","times_seen":141,"resource_available":false,"data":null}},"time_used":322,"timings":{"blocked":133,"dns":4,"connect":28,"send":0,"wait":29,"receive":30,"ssl":96},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"imagedelivery.net/cwNlIhFkSHgM59lNYMgaeA/b555872f-5310-41eb-1198-23c70f77a900/public","fqdn":"imagedelivery.net","domain":"imagedelivery.net","tld":"net"},"ip":{"addr":"104.18.2.36","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brett-update.xyz/","date":"2026-03-27T23:03:37.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"imagedelivery.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 26 Mar 2026 17:47:09 GMT","end":"Wed, 24 Jun 2026 18:47:05 GMT"},"fingerprint":{"sha1":"CC:C1:B3:C8:B4:E7:AF:F8:B1:5B:77:05:D7:23:41:E0:AF:8E:2B:EC","sha256":"5E:B8:62:74:75:E6:3A:CD:82:35:3D:F1:2D:0C:B0:1B:7D:8F:72:A0:2B:7F:31:70:7F:89:23:D4:32:0B:ED:66"}}},"request":{"raw":"GET /cwNlIhFkSHgM59lNYMgaeA/b555872f-5310-41eb-1198-23c70f77a900/public HTTP/1.1\r\nHost: imagedelivery.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brett-update.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:03:37 GMT\r\ncontent-type: image/avif\r\ncontent-length: 96684\r\ncf-ray: 9e320789898956bd-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 744765\r\ncache-control: public,max-age=172800,stale-while-revalidate=7200\r\netag: \"cf7HNBsJ_U9r535awljRTya-DOfb7C9F9CBQfA5-d8DQ\"\r\nserver: cloudflare\r\nvary: accept\r\ncf-images: internal=ok/- q=0 n=10+231 c=0+0 v=2026.3.3 l=96684 f=false\r\ncontent-security-policy: default-src 'none'; navigate-to 'none'; form-action 'none'; img-src data:; style-src 'unsafe-inline';\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":96684,"size_decoded":0,"mime_type":"image/avif","magic":"ISO Media, AVIF Image","md5":"61bd178e85715d527ff3682cc7a65fcf","sha1":"36ea4c910706f11de5348cd47e67251650846534","sha256":"ebb574282785353088fd27d64584e473396062a5391bdbf96a6cb49fe64c7651","sha512":"12341e4c1eb80c0b1854376e8245d51c8113c952cdebda4d1ec64f4e212e5557d67a66c8e69e68c810b2db034baac789204da060b01e8308e119f0400f7fe385","ssdeep":"1536:VWTEblDNKPJUJp8YgHsy1Nd17GhkF5uSUsmmjd5ICJptuAKkHjbTFlwm:VWo5ZwJwKYgM4RGGF5Xmkd553zbHDFld","tlshash":"0d9302a525178416f7dc19b7001550ea893ea5861f61bb638b95f13ced32cc2993ccfe","first_seen":"2026-03-27T22:03:41.873595Z","last_seen":"2026-03-27T23:55:07.110004Z","times_seen":3,"resource_available":false,"data":null}},"time_used":123,"timings":{"blocked":53,"dns":33,"connect":1,"send":0,"wait":11,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Londrina+Solid:wght@50;300;400;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brett-update.xyz/","date":"2026-03-27T23:03:37.304Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:47 GMT","end":"Mon, 01 Jun 2026 08:37:46 GMT"},"fingerprint":{"sha1":"84:E2:03:36:CA:39:FF:65:64:D9:12:E7:E2:28:88:8C:3C:A0:CA:BA","sha256":"45:AF:9C:39:77:2B:D1:D7:B8:04:BB:2C:0E:98:C5:BB:8A:E8:99:A6:C3:AF:7F:90:AA:23:EA:F2:8F:AD:8F:B1"}}},"request":{"raw":"GET /css2?family=Londrina+Solid:wght@50;300;400;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://www.basedbrett.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 27 Mar 2026 23:03:37 GMT\r\ndate: Fri, 27 Mar 2026 23:03:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1286,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"dfe2ea4b76e9fd51d13793cf2b25084c","sha1":"7472845c068719341c1f5aedaf9ee78bbfd93210","sha256":"971c7b080c7992afe67142471a5e510b3dcd8b8b65ba52399a2f34155f83a62f","sha512":"c552380c6e08a0801e16a5a3d1c20082f5cc6428af4ae373371542559628d06238f8a193945c67049ee76d4a40fefa6be0d2975fbc3f416e5e8dea0377da3fa6","ssdeep":"","tlshash":"87217f81082fe504db931cc112ceba36ee5fb0547455dd289ffa28d8bc52e571356b1d","first_seen":"2025-09-30T06:49:19.486431Z","last_seen":"2026-03-27T23:55:07.105864Z","times_seen":7,"resource_available":false,"data":null}},"time_used":250,"timings":{"blocked":108,"dns":1,"connect":15,"send":0,"wait":31,"receive":0,"ssl":92},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.basedbrett.com/apple-touch-icon.png","fqdn":"www.basedbrett.com","domain":"basedbrett.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://brett-update.xyz/","date":"2026-03-27T23:03:37.824Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basedbrett.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 12:30:33 GMT","end":"Sun, 07 Jun 2026 13:29:07 GMT"},"fingerprint":{"sha1":"B9:51:8C:49:64:ED:FC:9D:67:92:31:BE:26:D5:6D:70:74:55:9F:ED","sha256":"45:2E:7E:56:43:97:34:CB:80:EA:25:E0:D2:DF:1A:6B:19:FD:87:12:C0:DF:93:96:02:2B:34:4C:61:62:38:AA"}}},"request":{"raw":"GET /apple-touch-icon.png HTTP/1.1\r\nHost: www.basedbrett.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brett-update.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Fri, 27 Mar 2026 23:03:37 GMT\r\ncontent-type: image/png\r\ncontent-length: 25134\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 0\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"apple-touch-icon.png\"\r\netag: \"d5d95b1b5e525f76be5c6b5a21614bc5\"\r\nlast-modified: Fri, 27 Mar 2026 22:03:14 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::t4m6c-1774648994214-ba14922417ff\r\ncf-cache-status: REVALIDATED\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RPzyriAteZnfXlSFqCKRPH1LnP2Z747w2Ags0jQwF0iel5sLt0jpoMbeMx16kvIpbqgB0b6zEg6Bhya9g2yoTHdH0m540COFc93ZofbnWZXetxCCqzLPF%2Fbq3Uak7nkSi0glCys%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e32078d69c9712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":25134,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced","md5":"d5d95b1b5e525f76be5c6b5a21614bc5","sha1":"db7b3bc79a56db97fb66996d855ba4cddbc560ba","sha256":"566ff7223bc18d16faeadd70f69f54ca623de0ceb140dc3509210ee0e1a4e7ba","sha512":"a31bbf20a8b101505c19a402013394d2bf7e8c41f7c0c3c96bbfcc3abc92d1eb1d28f57c4f4e159a3c7f15670859f9ab094d6d70b6ddce6a5033774b11108d78","ssdeep":"768:RmfPZUMGH1lmki6Vi+ZMu3babnNT8W+SOtoCI:QfRvGH1EZH6USntoCI","tlshash":"43b2f1735735904cd4c7ca8bc6915831e36a2a3c2c3599e7b05d1f4a67d9bf0e9538e0","first_seen":"2024-10-20T13:24:03.330745Z","last_seen":"2026-03-28T19:52:21.309927Z","times_seen":12,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brett-update.xyz/","fqdn":"brett-update.xyz","domain":"brett-update.xyz","tld":"xyz"},"ip":{"addr":"172.67.193.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-27T23:03:36.952Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brett-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:27:20 GMT","end":"Thu, 25 Jun 2026 18:27:19 GMT"},"fingerprint":{"sha1":"66:A4:FB:48:46:C1:45:AC:83:F6:8D:DD:63:D2:6E:77:75:2E:E1:18","sha256":"52:24:41:7A:A4:7C:52:39:DB:C2:D3:A7:EC:2B:BB:08:43:50:49:C9:7D:17:64:8F:8E:98:79:27:DA:83:1F:96"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: brett-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:03:37 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:55:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ldn2PxiDpALsFU0tgQF4YF2zV%2FvNr6thi%2BUoaVBQ5oOolZ7Wx5uOe%2BkC2Cvkqh5xhz1m%2Ff0DWH70TkwUcoJYVOUKhCRHOfa%2B0X8arQOhhD94xABKf2nqJx8JhjwvXJBsRaZl\"}]}\r\nage: 3623\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncf-ray: 9e3207884c4956a4-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":67044,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (520)","md5":"5edde6b8aa779c8a2235dfcaeb2f386a","sha1":"952ba3e73fd94bb30e5b43073ee83a6cbf7ad1c6","sha256":"71ea837ed175b3f8a67947b03f010b4329e42916308efde464f6ab59ff24b0e1","sha512":"d90c0035040975eb06aef21b0b83442b823015c8bb5e626d3bb89112dbafa4c4bc3e7f5cdf15d878ced6aea2bc1f4402cc6d3d84482d4b4ab6d1f721cacc49d2","ssdeep":"768:yl8BPA9nF6334sMGP2J8ATPkrxDNwblZmkTWIDAEKmIlZfJBdqrGHW:O82I33a+EKmIlZfJBdqrGHW","tlshash":"e463a722e3a3042561228ed5a7b76f5d31604143d607ca19f3ad16e4efdadebdc23788","first_seen":"2026-03-27T22:03:41.881081Z","last_seen":"2026-03-27T23:55:07.113468Z","times_seen":3,"resource_available":false,"data":null}},"time_used":114,"timings":{"blocked":50,"dns":36,"connect":1,"send":0,"wait":14,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"brett-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"brett-update.xyz/semantic-button-2.3.3.min.js","fqdn":"brett-update.xyz","domain":"brett-update.xyz","tld":"xyz"},"ip":{"addr":"172.67.193.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://brett-update.xyz/","date":"2026-03-27T23:03:37.145Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brett-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:27:20 GMT","end":"Thu, 25 Jun 2026 18:27:19 GMT"},"fingerprint":{"sha1":"66:A4:FB:48:46:C1:45:AC:83:F6:8D:DD:63:D2:6E:77:75:2E:E1:18","sha256":"52:24:41:7A:A4:7C:52:39:DB:C2:D3:A7:EC:2B:BB:08:43:50:49:C9:7D:17:64:8F:8E:98:79:27:DA:83:1F:96"}}},"request":{"raw":"GET /semantic-button-2.3.3.min.js HTTP/1.1\r\nHost: brett-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brett-update.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:03:37 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncast-mode: default\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000\r\nlast-modified: Fri, 27 Mar 2026 18:55:10 GMT\r\netag: W/\"115da-19d30a67bf8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 3623\r\npriority: u=2,i=?0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UE9IQjNlWQqIDcKt6wHrpQPxjXMd5PXh4epPPDSmX4l3h6rn5C%2BRvcsVCbEAaMNVi85sa1xgXUXUgBihU1oja%2F9fjLuNf8GWpUbcwEultHnZHLF9uLH5eKcm2FNysFa2WD2X\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: accept-encoding\r\ncf-ray: 9e320789280cb505-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":71130,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"f9d58a2f67ae84d495e9a32d39357b85","sha1":"c483d87a189d39eebda041d0f4ef63339a61dd7c","sha256":"ef2a295f49bf4850b4bdf2f9866d42f6c6c0092520d068051955a07dca3b36eb","sha512":"da596658822b686ff91a74a2004662867c83851d95ba8d8356d86e0f929b1b301ff49f39b2db07595953fa5e3888017c507ee67667103cd63184a5a274b77ab6","ssdeep":"768:d+0AShQcI01DGSDGQ+Zxt9bDS1o25ZI0CYzD4pihcU3qYUb4izL7fBR9cic1W2zi:Q5r2fdkfSdrI0GeWJpXt9","tlshash":"7563b4da690ad0d98e5224ded433e516f4254e63ce6df163a23cdcc0746ef26888727b","first_seen":"2026-03-27T22:03:41.868269Z","last_seen":"2026-03-27T23:55:55.569396Z","times_seen":5,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"brett-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.basedbrett.com/assets/index-c35801cf.css","fqdn":"www.basedbrett.com","domain":"basedbrett.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://brett-update.xyz/","date":"2026-03-27T23:03:37.148Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"basedbrett.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 12:30:33 GMT","end":"Sun, 07 Jun 2026 13:29:07 GMT"},"fingerprint":{"sha1":"B9:51:8C:49:64:ED:FC:9D:67:92:31:BE:26:D5:6D:70:74:55:9F:ED","sha256":"45:2E:7E:56:43:97:34:CB:80:EA:25:E0:D2:DF:1A:6B:19:FD:87:12:C0:DF:93:96:02:2B:34:4C:61:62:38:AA"}}},"request":{"raw":"GET /assets/index-c35801cf.css HTTP/1.1\r\nHost: www.basedbrett.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://brett-update.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Mar 2026 23:03:37 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncontent-length: 4166\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\nage: 54936\r\ncache-control: public, max-age=14400, must-revalidate\r\ncontent-disposition: inline; filename=\"index-c35801cf.css\"\r\ncontent-encoding: br\r\netag: \"a09f26b26b206e5a5f316168dcd7e4e1\"\r\nlast-modified: Fri, 27 Mar 2026 06:47:36 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000\r\nx-vercel-cache: HIT\r\nx-vercel-id: arn1::h8qm5-1774648993438-d327df7f7a89\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gKGXupZJJBrhPHoaNvnREDtqdShM06qdnWDds06jJhDzxGS2xWqmQDE6orYkh1sFz%2B0ciAsqgk3xTYvNZ5j5p0NC0tzHkFDxb1kHVASRK4oSzkI38F2LJfY9%2BJWpwBHqOykNrz8%3D\"}]}\r\ncf-ray: 9e3207897f30712b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18313,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (18312)","md5":"29b3a84382f953cc46a072a7aa4c1b08","sha1":"c4650e9c3f62de90eae7f6e42e4f56fda1a49bd0","sha256":"c35801cfd42fb94cd9482c080ded2a96ebc8b0a89e49f7a57c9120a10b1f5d08","sha512":"138d3b1b67fa6cf771dd4039d04012d1fbd142115c14f9503691052e871d5275bc3d4960a62df24d8969ec1e68800e48a6af86e584920d349839383cdced7968","ssdeep":"192:exwOW9JyW9JyOeEsfsXQfldftJGX5yIVwjJz5A7Z/K/HZNO59sfFsfzsfXDtr:ww3XQtZt47Z/K/HZNvr","tlshash":"1a82756b5aa4203abd16e0d1c6c4b66db92df0d6df3f46b8e9c6510437e23f60cda904","first_seen":"2025-09-30T06:49:19.491513Z","last_seen":"2026-03-27T23:55:07.102605Z","times_seen":5,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":43,"dns":23,"connect":1,"send":0,"wait":71,"receive":1,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"brett-update.xyz/secureproxy?e=jscdn/getFile","fqdn":"brett-update.xyz","domain":"brett-update.xyz","tld":"xyz"},"ip":{"addr":"172.67.193.100","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://brett-update.xyz/","date":"2026-03-27T23:03:37.354Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"brett-update.xyz","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Fri, 27 Mar 2026 18:27:20 GMT","end":"Thu, 25 Jun 2026 18:27:19 GMT"},"fingerprint":{"sha1":"66:A4:FB:48:46:C1:45:AC:83:F6:8D:DD:63:D2:6E:77:75:2E:E1:18","sha256":"52:24:41:7A:A4:7C:52:39:DB:C2:D3:A7:EC:2B:BB:08:43:50:49:C9:7D:17:64:8F:8E:98:79:27:DA:83:1F:96"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: brett-update.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://brett-update.xyz/\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://brett-update.xyz\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":37,"data":"{\"permit_key\":\"2efvk8o08evuub28q2k6\"}"}},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Fri, 27 Mar 2026 23:03:37 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TV53bdEpb7BQw70ToydABm1WUXt0OcUMbQig41owxD5j5MHX0rC4aLkIBqBLzEzxtk2VBpUt6pC5LfsfJD43i4kSEo9hlGcttx5daWOXpshnhso%2BmRZ%2B5aNnoUDMpL8SFIqHG9w%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\nx-frame-options: SAMEORIGIN\r\npriority: u=4,i=?0\r\ncf-ray: 9e32078a780eb505-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3434701,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"84827513e9e83e8bb7cd9c8475773832","sha1":"c83ea48ebde4613991f1b7c51c5e8f6c5e165fd6","sha256":"d666acc382250618a966091da5ca0e9bfa06dee018a09db73b5bb48c59b15cd7","sha512":"93fd7ff03e5a8937e5308bf9539a61886b1ff3746de00de980290066bab8efb3922a5eaa7ebdc9df6e938c32ad3571fcd51b44bf5fdf534102546081f72ac875","ssdeep":"24576:7XUo6V8/8Yae0PgGswPpBroS7InwbjtsJshJuEbd4fuQL:DUz7OwPEZJsKN","tlshash":"222523061d4bf9e54f8c2bbab4bb2d4724509f43488c54cbdb62f8c07528bb681de65b","first_seen":"2026-03-27T22:03:41.897373Z","last_seen":"2026-03-27T23:55:55.565178Z","times_seen":5,"resource_available":false,"data":null}},"time_used":1161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":477,"receive":684,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-27","alert":"Sinkholed","trigger":"brett-update.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}