{"report_id":"8bd0e6ef-c1ad-4733-83ab-b9b078066d88","version":0,"status":"done","tags":[],"date":"2026-09-23T19:33:21Z","url":{"schema":"http","addr":"totalyarn.com/","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":0,"asn":7018,"as":"AT\u0026T Enterprises, LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"totalyarn.com/","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"title":"TotalYarn :)","dom":{"size":27734,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27725), with no line terminators","md5":"37b0a2ef683534a7e8101560a6637013","sha1":"9507709bb0ee924101cad1e823fcc3d77a5a9eb0","sha256":"59f61ffbf95dc895a60795282abf0649ecbc92a0540d0fcac6829c336204d330","sha512":"e310cb2b1f0f333f1d72e1491d5e44dc690f6c7131db16305ca9d1304447fda71639069da50eeb37b8db2c3509ab4399cc68436f249f3d739ec3293ff75158ef","ssdeep":"768:5A6/ujfisaOoBRG6z26DL6ueSn+fgzsGdOwqRj0hdqhOG9:52iLFdnCo+I4p9","tlshash":"8dc2c855da04ed2fd4378e4e647f7f78d0899637cb6acaa8b39cca4947c283117624d0","dom_hash":"domhash68605ba7553753fd14503e638cac7866","first_seen":"2026-09-23T19:33:30.664135Z","last_seen":"2026-09-23T19:33:30.664135Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"totalyarn.com/","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":0,"asn":7018,"as":"AT\u0026T Enterprises, LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T19:33:21Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"totalyarn.com","ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"domain_registered":"2019-10-29","domain_rank":0,"first_seen":"2026-09-23T19:33:01.748001Z","last_seen":"2026-09-23T19:33:01.748001Z","alert_count":220,"request_count":44,"received_data":1283019,"sent_data":22901,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/2hl-jv8gzqr3q.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"93e686ccf873aaacd7b2dfa136c9767b","sha1":"87419dc94418508db61a3c45021e9f0629141954","sha256":"979065ef372eb7db6294aebcbb698eefcfb433f64fe5d88696a8144be63331db","sha512":"208702652e337b3290d656f334c8cf6554f35bbf40ebc93347a847ab7f91054684efee9251bc7b39737f3fcdc8b68b3dea2f889c1f9bd215fe171de7889170d8","ssdeep":"","tlshash":"e3516259e0a5aadc684302d8941fd00cb1af6b7cde5fd878b3b8e0110b570563a937d9","size":3004,"data":"","first_seen":"2026-09-23T19:33:06.441965Z","last_seen":"2026-09-23T19:33:30.696157Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/3gzxhq9iq6efl.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9bf9dbc74b800fa267570449684371f","sha1":"f0d6dbba42356d79130724e455d81c6a29ee0efb","sha256":"d5de439da1ee98f738ee39179d2461bc242a278520b76b286f1a40fe150f871f","sha512":"3a429af4b79081acedd5064185466e3f06e61d96bff5d5e9dd1ba26a4eb719a655751d64b1606199ef40767b8939955b113a95b8ae4475e95fe8c30b7e3b9a88","ssdeep":"3072:RFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwd0++z:RFLtKOfGWYpyI9vGzD58nwd0++z","tlshash":"4b24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","size":227315,"data":"","first_seen":"2026-07-21T21:27:41.842253Z","last_seen":"2026-09-23T19:33:30.688056Z","times_seen":145,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/17f0hmsv0xu3q.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"85fa0773b8f0d59516242547ed4c2819","sha1":"419996900d2cac0fb560f92f01bcfd330fc6e9a2","sha256":"a528196bb0f1a9d1d3797d638345288034e8a0cb96e553ca86f0055d3b74aee1","sha512":"4aad57c99b6770f07de92a8dcdb4aeb28e58e829163389ec5e673c0138623987613a52fa380820fd6eae2366c04f4e80b6366a03fc5e7c5426ce4cad5fa200e6","ssdeep":"","tlshash":"3c81210da0a5aaeda81305d4681fd00cb0ae6b6cde0edc78baf4b0751e970953b537d5","size":4073,"data":"","first_seen":"2026-09-23T19:33:06.428758Z","last_seen":"2026-09-23T19:33:30.69757Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/2nwqoerny79-z.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"97ec2c098aa29e2f65cac1d51db85a95","sha1":"e1af1e8378ddd1d3acb8935c62d01a4680e19f79","sha256":"e5cac795038a17902959ee55d7b60dc606059f3583a62ee49bff20f068193064","sha512":"dec99e92d2a0494f8dbb5368730dbbab94f0639267c9f1906a7cf85044709ab3d763c262becb5c3d8c452b0b04dc629fc31a025590cb364d340fc1c95c8c65e8","ssdeep":"384:nfCT2eGmqg7vB/iTAkOF9qFudambF7EQ0IcT7N:nfCbGmqg75iMVFIFZmb9IN","tlshash":"85a217a97195f4412ba364a5407f500bf238297a286cd0b0a3e6e8f1bdf01add537f9d","size":22466,"data":"","first_seen":"2026-04-05T14:18:16.598053Z","last_seen":"2026-09-23T19:33:30.692393Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/1gof_1h69v083.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"05c39d27462d78a1434746b24aab79c0","sha1":"9ff7e6cf62ce5bca06a933d3cec545759d683580","sha256":"1793cf2f5aa9a8c780019f6fa8daddb59af8627d5c51bf458b1e4ed42df65e9d","sha512":"42ed47641938726b27e88847f8d7da27c18b766d384d211f9bc6bfc4b30964fb5bbebb342ec764a1bce011a21c124d993b42e4d17b91d0a569cf51a9a94388a4","ssdeep":"768:ZbyKztPpH7KIe3sK+7Y2THBTOQVOv7MLNsnSSzMd:ZbyibTsa7YQBbVPLNsnSSzMd","tlshash":"e5f21b6571e1fdea935781c4443f400df27e2d78991ea464b3fca8a62b6044871b3fea","size":35931,"data":"","first_seen":"2026-09-23T19:33:06.449429Z","last_seen":"2026-09-23T19:33:30.689526Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/2i5s0f-ehfg4b.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d57da90f5a1f7e93aa6ed9aea16fb0f2","sha1":"39fc012f8fb526fa54f2f22222da5283e4d71624","sha256":"c9d6b3905bdc527d9919e532500bd7719f0d07704148016729f37b95966dc828","sha512":"32c0e0bd7b31bb73a699333ebcba5214791bbdbec9384ecc4d3c9faf3eb45075ed17ffbaa6c4bc107d1c1752f91797b3a556b5f065e7326779bdc34f468f8384","ssdeep":"1536:G7eGo8AgaD37OHXVLRMY1oxkYaIIEqu+K936O2fO3aGXyPuhINpK:go2Lz+qOG3E","tlshash":"32b3f9ea73517125d3db50a9c0af0b41b33b19d8241a403cb67dadcb397058962fbb7a","size":111347,"data":"","first_seen":"2026-09-23T19:33:06.411869Z","last_seen":"2026-09-23T19:33:30.704454Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/turbopack-26rrufw8clex6.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54a645322245e7d6b59a063487d2d87c","sha1":"5d7f6a3db9acd567a1134b49a25ecaefc428c2e9","sha256":"19ecc990a0699695d83a6c7c818fd6c1333abb143c40b3242c9f5d55a4e97b3f","sha512":"c8d9b5ee0fdc8376314dbd3143d6b5cde9b97ec245bd88adf9652748b5f3bb4b12860b3b6c24627aa5fd5168e78888970883f18459cbb6fc3e4890224d10cb79","ssdeep":"192:44gMFB68nEsgdLUEGOheYG/lO4jTNWn+S3sBT4fCT3cXXqroor2:44gMFVQg/lrW+ssqCTMKA","tlshash":"f322c7da37a6f07343af94eb906b4004f17984a9145d141cd3aca8eb2c394ae85e7f76","size":10580,"data":"","first_seen":"2026-09-23T19:33:06.410594Z","last_seen":"2026-09-23T19:33:30.680528Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/14mrh2-p_w84d.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","size":54646,"data":"","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-09-24T11:04:03.555882Z","times_seen":17021,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/15orcrkp-_9ct.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f5191b9f61efd6a4f63c5ac7f5c6c41","sha1":"a2b647221f67abacb4a57c79b01575f565cca4eb","sha256":"69a6bb99c3ffab75664c38bcf12faabd4bb9dc7e300605c030168809b21bc0b9","sha512":"eb580a3267a16fea1f40c5b8ac5b596c45ebfc32268d4f7028e6dc3d97218133370ec6ea1771d0a384eeac3e08dbfbedf73333f8de4f5d6188b102d63982eebf","ssdeep":"384:57/ZdkTd93jnTUYqSGUFT32IIIq4emi0B/d+3W16DvXxqpkKM8wjn0ieI+wQhNoT:V+qSNl3gId1B/d+m1mvxqml1jn0iP5","tlshash":"a633d7b232d4faa2539341e0d43f2017f2690c75206d6474b7e89cdb754c88da6bafe5","size":50702,"data":"","first_seen":"2026-03-21T01:08:02.265897Z","last_seen":"2026-09-24T02:47:17.943729Z","times_seen":1918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/29194twgvgfhb.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"522a72e05f487887850ef329fe1b0701","sha1":"494f7a56156314f889c52da3bf512e7ee6b39bd6","sha256":"ea9d35da190100ace427d810f9ad1797ac63ec34f806f245c91a17b500f5ffa2","sha512":"d61160527101939f8a4247963351d1656012527ceeb23577eb3570343fbf73ade256b8e4f5ae573f96fbd9f7bf0e3e776762a659d3730352714714f75900c827","ssdeep":"3072:lj8jN6o2mZoIFsn4EO0y1BoQGcrZRRI08NxySB:lj8jN6oTZ324EO0+BoQGcFRyNxySB","tlshash":"c4e3f7f935d1f482076b50aac03f0006f22c4db7189e6860e3e5ddda756465de2b3faa","size":145701,"data":"","first_seen":"2026-07-30T03:30:19.032015Z","last_seen":"2026-09-23T19:33:30.677338Z","times_seen":14,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/0hay3mia-3yu6.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8a6550d90c4ddc42fa6354a3ec23f1d0","sha1":"4fa9c78b0f351d1659f342b0c4e6c1e6b7f52655","sha256":"a7e0a2c99e0c77c437b33b8626bc3cf75b617929f6bec0d1e7795f76b7e88b23","sha512":"d0d03b1855710194c8fa02be773507d4fa3ca11006b7194257921f01ce5bc92df2332ee2c4ae20c3a5e5248576420c87466cc9327411f7d3a8b21a2baf17e130","ssdeep":"","tlshash":"1341505ae0a1aaeca84702e8a41fe00cb1af6f7cde5fd878b3b8e41107474453a537d5","size":2375,"data":"","first_seen":"2026-09-23T19:33:06.430884Z","last_seen":"2026-09-23T19:33:30.703643Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"totalyarn.com/products/pencil?_rsc=5CB68i4pnAekjehf","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.097Z","timestamp":1790191971097,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/pencil?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":537,"size_decoded":682,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (368)","md5":"82ae69c20dacd671a7ee30706d85fc24","sha1":"158955afde6e9e6e80cb5f80b91cc0e466ec0d53","sha256":"d905d8d298f0dd18c3141811e2af856a5a407c797df207d953444f2c5c8b530c","sha512":"ae0f7df67bc45c45c3f577a8994f35f2d05f7d5225179c5e2f4340873b5e107262b5ed758a8023662e94aeca474d1e8344ab7e40fb3ea8cbc1d0054950d482bf","ssdeep":"","tlshash":"34f0247344082ed5ace0d818066ae70f612d2633b0b50e6884dc8ca403e943a5a4b5c7","first_seen":"2026-09-23T19:33:06.416826Z","last_seen":"2026-09-23T19:33:30.666445Z","times_seen":2,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/image?url=%2FTotalYarnLogo.png\u0026w=96\u0026q=75","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.259Z","timestamp":1790191970259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/image?url=%2FTotalYarnLogo.png\u0026w=96\u0026q=75 HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 3206\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: dromRKkLYWX0XHDX3jrIwcUMIc3aoSvE8D0HLETqgco\r\ncontent-disposition: attachment; filename=\"TotalYarnLogo.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: STALE\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3206,"size_decoded":3620,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"885b60989a745d8ab36d6e5e9654e7bc","sha1":"4ac73155c4567e1f989de40ccf30897f95ade1b4","sha256":"76ba2644a90b6165f45c70d7de3ac8c1c50c21cddaa12bc4f03d072c44ea81ca","sha512":"e4d8bb3a8f5f236248a339628c060c3b2229dbd57acda7ed7c40df6e32a3977069387d7f43765dce1b066c946af997d53921a652f45ea6b0959831ee743e8181","ssdeep":"","tlshash":"55615c2e01c4b615e13239357f31d142b01b67154165e6280eb35f637e4263ecfaeade","first_seen":"2026-09-23T19:33:06.421765Z","last_seen":"2026-09-23T19:33:30.667729Z","times_seen":2,"resource_available":false,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":551,"receive":161,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/15orcrkp-_9ct.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.241Z","timestamp":1790191970241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/15orcrkp-_9ct.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"c60e-1a00d2f9b36\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50702,"size_decoded":10894,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (27708)","md5":"5f5191b9f61efd6a4f63c5ac7f5c6c41","sha1":"a2b647221f67abacb4a57c79b01575f565cca4eb","sha256":"69a6bb99c3ffab75664c38bcf12faabd4bb9dc7e300605c030168809b21bc0b9","sha512":"eb580a3267a16fea1f40c5b8ac5b596c45ebfc32268d4f7028e6dc3d97218133370ec6ea1771d0a384eeac3e08dbfbedf73333f8de4f5d6188b102d63982eebf","ssdeep":"384:57/ZdkTd93jnTUYqSGUFT32IIIq4emi0B/d+3W16DvXxqpkKM8wjn0ieI+wQhNoT:V+qSNl3gId1B/d+m1mvxqml1jn0iP5","tlshash":"a633d7b232d4faa2539341e0d43f2017f2690c75206d6474b7e89cdb754c88da6bafe5","first_seen":"2026-03-21T01:08:02.265897Z","last_seen":"2026-09-24T02:47:17.943729Z","times_seen":1918,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/pencil?_rsc=c2NrBWOODPupw-DK","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.448Z","timestamp":1790191971448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/pencil?_rsc=c2NrBWOODPupw-DK HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products/$d$slug\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":525,"size_decoded":666,"mime_type":"text/x-component","magic":"ASCII text","md5":"dd5d3c15b9f40ea9fa54b76106a01f64","sha1":"23cc0875fa4001a336ee55c059d10b7c62f62874","sha256":"9e5fb1517907278c529471cbd4e76b24836c5be58bea18718f2f4136c1a82e10","sha512":"55fac6f7099c68bf653da34e41ce4927f9d5dfe63a8a2966fd3aaae0570dbe25ce831cea8af980204b68b16e7fa1da0409344b1a4c86f13714b52ba0e1d5fc63","ssdeep":"","tlshash":"42f02e23d509ec6e2c71cc4c1c5e431f819d5d3b9a7528e5d38cec6c469143657ca1c0","first_seen":"2026-09-23T19:33:06.434733Z","last_seen":"2026-09-23T19:33:30.66976Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/smiski?_rsc=c2NrBWOODPupw-DK","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.591Z","timestamp":1790191971591,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/smiski?_rsc=c2NrBWOODPupw-DK HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products/$d$slug\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":525,"size_decoded":666,"mime_type":"text/x-component","magic":"ASCII text","md5":"dd5d3c15b9f40ea9fa54b76106a01f64","sha1":"23cc0875fa4001a336ee55c059d10b7c62f62874","sha256":"9e5fb1517907278c529471cbd4e76b24836c5be58bea18718f2f4136c1a82e10","sha512":"55fac6f7099c68bf653da34e41ce4927f9d5dfe63a8a2966fd3aaae0570dbe25ce831cea8af980204b68b16e7fa1da0409344b1a4c86f13714b52ba0e1d5fc63","ssdeep":"","tlshash":"42f02e23d509ec6e2c71cc4c1c5e431f819d5d3b9a7528e5d38cec6c469143657ca1c0","first_seen":"2026-09-23T19:33:06.434733Z","last_seen":"2026-09-23T19:33:30.66976Z","times_seen":2,"resource_available":true,"data":null}},"time_used":149,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":149,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products?_rsc=7h4NYy5eoyMcNlUN","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.752Z","timestamp":1790191971752,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1222,"size_decoded":932,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (729)","md5":"c9705c9e7ac647b4d13cc9301a4a19e2","sha1":"76ede00310e4f7ffec1dc902e949c2334b8753a2","sha256":"b261df497cf09ff4bda80ce3ea50188e0c7dc51502936c9b0f4955580ac3a589","sha512":"cd1a29b97b7d3828ed358166013b80e45b45a322bb5778b286cfd182de6b5fe479aa9819494ba12a75e19138dea3c0ef74c50855679064cd69d9604b3ad083cc","ssdeep":"","tlshash":"4021ac37da04ec5eadb6898d085f931aa26c5a378a781ce6924ddd6d0b850321b861d0","first_seen":"2026-09-23T19:33:06.429987Z","last_seen":"2026-09-23T19:33:30.671039Z","times_seen":2,"resource_available":true,"data":null}},"time_used":147,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":147,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/?_rsc=8nTjltbQWvg6NcbE","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.903Z","timestamp":1790191971903,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /?_rsc=8nTjltbQWvg6NcbE HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4910,"size_decoded":2051,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (4145)","md5":"70190eb2b88e197192a9655c96bc7346","sha1":"4c7f8af754c5d709aca4b057ab0dc6b4a0861fad","sha256":"9d834144992935652e8e572161c3bfc1ba197712fb1469de1bf8c56082a002c9","sha512":"56173646ad8a20f4bc66adbab5a0b9640c0d208ae924e09ecca71b3bb2be03d0e6179a3c9c0496f03475ff8d1af081d48c3180724748ad95c0c07ae236d00d88","ssdeep":"96:YJhJYJBIJ/BkyQ1hINI68w7pNq5AnCUTHNuyDTg0DSQb5bMHSR9/E2CS9i9MtB4n:YJhJYJBIJ/BZQ16qwdNq5ADTHBTg0DS7","tlshash":"6ea1651f8715ae7de5324a9d4c0fe329b2ad1737c6628db9e3eced6c43914b12b06181","first_seen":"2026-09-23T19:33:30.672117Z","last_seen":"2026-09-23T19:33:30.672117Z","times_seen":1,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/favicon.png","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:52.148Z","timestamp":1790191972148,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /favicon.png HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 2265\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"8d9-1a00d2f9ad5\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2265,"size_decoded":2528,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"7738b20720494d26f6e95fa1a68b472b","sha1":"fa75ad6154617941bcb718e6f7a59dc33cd76884","sha256":"73055aabf189eb349c14362e32e28fbe8b6075159b9349df593f2e9d08ff9537","sha512":"14e7d9528db7ac440d16439de2c6aea846a8caa7c9268ba60cc2db74d1c573dc63b128da1ad1f6adfa18f0b803f6838979d5f3f21ef6c02a463f30bddf6de2f8","ssdeep":"","tlshash":"ef414d436e4a371981b6f37e9dff5b07d420fc62442e5404e15c8abd71249032dbea90","first_seen":"2026-09-23T19:33:06.423917Z","last_seen":"2026-09-23T19:33:30.674092Z","times_seen":2,"resource_available":false,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/pencil?_rsc=7h4NYy5eoyMcNlUN","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.432Z","timestamp":1790191971432,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/pencil?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1267,"size_decoded":959,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (774)","md5":"f17dd01d7df2f3fbff702ef4078bfae0","sha1":"595ae363f7b46efc4bbab44f4924ff960ca6a9cf","sha256":"797e4807bac4c450e44487b389dd7efd588e79fcb31643a82fa332f9e692912a","sha512":"a7dc6214d5848a594269db738c306b0cf442e136852fad4284289107c4ba6ef202360b2e9c8f79bdc75a9954c709820ba5acb74fbcca1781678d0d77530e3dec","ssdeep":"","tlshash":"8221ed37e904ed5e69b7894d0c5f931ba26c27379b741cead28cde2c07c91321b462e1","first_seen":"2026-09-23T19:33:06.44557Z","last_seen":"2026-09-23T19:33:30.674867Z","times_seen":2,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":146,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/smiski?_rsc=7h4NYy5eoyMcNlUN","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.589Z","timestamp":1790191971589,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/smiski?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1253,"size_decoded":955,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (758)","md5":"bd560cc502af4f16c46e68add1c99366","sha1":"b55ea2a4d3c1fed30ebfb7bebe6d6974302a5e50","sha256":"d3c966dd109583e7ecb6120d14e4cbd12bde967cf21985fd71e832bd44f22b8a","sha512":"f7e47267a4ee107e9b2afd0b6b4c3cd5aaadbed91b45186a94ddd3718a48ee57b4ca3aac79ef84b92cc2d207e32f2cedd6389c0d3f9a28f6c4de24dcf59196e6","ssdeep":"","tlshash":"4a21c037d904ed5e6d76894d0c1f931b526c17378b751ce6d24cdd2d06895321b461d0","first_seen":"2026-09-23T19:33:06.450644Z","last_seen":"2026-09-23T19:33:30.676014Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/media/83afe278b6a6bb3c-s.p.2bn3s6zvc0dyp.woff2","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.233Z","timestamp":1790191970233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/media/83afe278b6a6bb3c-s.p.2bn3s6zvc0dyp.woff2 HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48432\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"bd30-1a00d2f9b37\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48432,"size_decoded":48716,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48432, version 1.0","md5":"65850a373e258f1c897a2b3d75eb74de","sha1":"1dc044f4824fd5af6bfed67fee48be70fa069f3f","sha256":"c940764593d0fe5d596be327ca7558855e018039fb78509aa21921fd3644c3e4","sha512":"df2683f3dd9724de589451a47bc608c9925d54b874ad97b733dd465ef41f9db75e9e31604762415c2fc1433d050e45fdefc6ecd7ecadf58d1243d9ca5f4bf74b","ssdeep":"768:3IkDHBYoX5Pi4JxTGz9CDR0s1ROSsA8mF77YNt7wFhVq9oN2WfpdqWjBA:tNYoX53xTl/R8W77YNtUFrWoUWvdA","tlshash":"56230251f5f8624a7fc3003fbc317bd862909fe5996ee5d91288f30225611dd29ee017","first_seen":"2025-05-30T12:57:00.85385Z","last_seen":"2026-09-24T11:21:22.053032Z","times_seen":104405,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/29194twgvgfhb.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.244Z","timestamp":1790191970244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/29194twgvgfhb.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"23925-1a00d2f9b36\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":145701,"size_decoded":39403,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"522a72e05f487887850ef329fe1b0701","sha1":"494f7a56156314f889c52da3bf512e7ee6b39bd6","sha256":"ea9d35da190100ace427d810f9ad1797ac63ec34f806f245c91a17b500f5ffa2","sha512":"d61160527101939f8a4247963351d1656012527ceeb23577eb3570343fbf73ade256b8e4f5ae573f96fbd9f7bf0e3e776762a659d3730352714714f75900c827","ssdeep":"3072:lj8jN6o2mZoIFsn4EO0y1BoQGcrZRRI08NxySB:lj8jN6oTZ324EO0+BoQGcFRyNxySB","tlshash":"c4e3f7f935d1f482076b50aac03f0006f22c4db7189e6860e3e5ddda756465de2b3faa","first_seen":"2026-07-30T03:30:19.032015Z","last_seen":"2026-09-23T19:33:30.677338Z","times_seen":14,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/smiski?_rsc=5CB68i4pnAekjehf","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.098Z","timestamp":1790191971098,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/smiski?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":537,"size_decoded":682,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (368)","md5":"346a7e704e22c409b6a42e21546af03c","sha1":"de2f1b6af771c9b53d56908122a3308f4b4b37fc","sha256":"4cf96b21232f0b598f69f0a9840ae7d0e115004a8a733c9fa1bf6e6798702b19","sha512":"cb7fe8e9c4c62bf78ca172b074707fa2c4da7eb51f3557ea097593e8ba2ac29271c8c3b766b4d11c5b35d6bbc2a90dab01df3068df093a96453d070070a9fdcf","ssdeep":"","tlshash":"74f0b47345182ed9ace1d858066ae74f662d2533b0b50e68c4dd8ca403e943e5a4b5cb","first_seen":"2026-09-23T19:33:06.432479Z","last_seen":"2026-09-23T19:33:30.677981Z","times_seen":2,"resource_available":true,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/pencil?_rsc=O1J9P368Hg4QOFED","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.567Z","timestamp":1790191971567,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/pencil?_rsc=O1J9P368Hg4QOFED HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products/$d$slug/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1214,"size_decoded":999,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (831)","md5":"fb8723ac0e4c29d14099d6b57ec03c5a","sha1":"cf3df1a9f167ae8feb8a4fbea67286f14dc468c9","sha256":"400c3c61546b6ed5e9cce03bc1cfd9ddd87de090a9c0a1588cb5758690c6061f","sha512":"38b4a7980b40005f72bf93ec20064ab531b678eed6941a060804997f7be6b2e18e9403e3b12662f49bfbd6ee3199237b66ba97a7770eef4f6cba81f8b5a9cab1","ssdeep":"","tlshash":"c621114b9609ef5a94348cad4c9b4736f1ac173786354cfc979cedfc45808a257850a2","first_seen":"2026-09-23T19:33:06.43567Z","last_seen":"2026-09-23T19:33:30.678735Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/?_rsc=7h4NYy5eoyMcNlUN","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.892Z","timestamp":1790191971892,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1090,"size_decoded":875,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (620)","md5":"50c5e4f8b14046dd7541e7bf2efdd0ff","sha1":"000ae9b6b4df6ff7e0dd5fd787f2967078cff1ab","sha256":"3fe136a7a57db09ed495dc783bd1a8541d0a578dfb55f6448f4fe8fbcc86c7df","sha512":"91f56aa91fbc9e33043a50c040aa81a3ab6b1a284fe8e32b268f43f2837a21d23468892ac9896a93c93ff8fe2c5d439a9f58ccc33462ffc0781ad5d6b70961a0","ssdeep":"","tlshash":"b911ef37ea04fc1e69b28d8e0c5f531a936c5b378b741ceac24ded6d07851325b8a1c4","first_seen":"2026-09-23T19:33:30.679511Z","last_seen":"2026-09-23T19:33:30.679511Z","times_seen":1,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/turbopack-26rrufw8clex6.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.245Z","timestamp":1790191970245,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/turbopack-26rrufw8clex6.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"2954-1a00d2f9b35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10580,"size_decoded":4485,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (10580), with no line terminators","md5":"54a645322245e7d6b59a063487d2d87c","sha1":"5d7f6a3db9acd567a1134b49a25ecaefc428c2e9","sha256":"19ecc990a0699695d83a6c7c818fd6c1333abb143c40b3242c9f5d55a4e97b3f","sha512":"c8d9b5ee0fdc8376314dbd3143d6b5cde9b97ec245bd88adf9652748b5f3bb4b12860b3b6c24627aa5fd5168e78888970883f18459cbb6fc3e4890224d10cb79","ssdeep":"192:44gMFB68nEsgdLUEGOheYG/lO4jTNWn+S3sBT4fCT3cXXqroor2:44gMFVQg/lrW+ssqCTMKA","tlshash":"f322c7da37a6f07343af94eb906b4004f17984a9145d141cd3aca8eb2c394ae85e7f76","first_seen":"2026-09-23T19:33:06.410594Z","last_seen":"2026-09-23T19:33:30.680528Z","times_seen":2,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/virgencita?_rsc=5CB68i4pnAekjehf","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.096Z","timestamp":1790191971096,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/virgencita?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":541,"size_decoded":685,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (372)","md5":"70e84f4c847f0e2eed8245d1040aa176","sha1":"55307c0f24d059293daa9d8a6cc4b7234db6ee2a","sha256":"f2881b32b28d7980f0bfb80b2a4b62b4dbff2aba44ea7a162f625c94f2d8778f","sha512":"311761be335839fc68fb2333ef71967597d7d080d9b65ba790de8eec53a9a3b8698dce1e42dcc010ffc8ed7b3b564959ec9632a656150907cca4493085a4f6c1","ssdeep":"","tlshash":"98f0247344082ed5ece0d818066ae70f623d263370f40ea884dc8ca003e943a6a4b5c7","first_seen":"2026-09-23T19:33:06.444506Z","last_seen":"2026-09-23T19:33:30.681343Z","times_seen":2,"resource_available":true,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/image?url=%2Fuploads%2Fsmall_IMG_5073_53ef2a5d2b.PNG\u0026w=640\u0026q=75","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.566Z","timestamp":1790191970566,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/image?url=%2Fuploads%2Fsmall_IMG_5073_53ef2a5d2b.PNG\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 40748\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: G1Xol9OnlVeW4KxH3Z9dk2O0--I1iaDGJuHvk1Q7pX4\r\ncontent-disposition: attachment; filename=\"small_IMG_5073_53ef2a5d2b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40748,"size_decoded":41173,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"084bddac2416da3c54df9fadfbc026aa","sha1":"a78b969d64e3cb0a3f30f5bef4cbd1747f6d3768","sha256":"1b55e897d3a7955796e0ac47dd9f5d9363b4fbe23589a0c626e1ef93543ba57e","sha512":"1ffe4067a4735c5ae5a280fcad2cacac3faa6db1eb1c6602f346747c81ed95762f65a33282f0907145de8e443738f52c4058df1920989595bb5707a2400bf901","ssdeep":"768:73uQw0/8H0CmAf+PmImtUucYWT9iNkz032ym/uFPiDx8oA89ubgT2riGHsLUYG:Xw0UHaZ4jWT9B0mZlx8P89usT2ps1","tlshash":"9603f129b844b4f18f2e621183b4ed9785ebc40b937dfc8cea953663486582c68bb304","first_seen":"2026-09-23T19:33:06.415612Z","last_seen":"2026-09-23T19:33:30.682668Z","times_seen":2,"resource_available":false,"data":null}},"time_used":667,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":568,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/virgencita?_rsc=7h4NYy5eoyMcNlUN","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.273Z","timestamp":1790191971273,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/virgencita?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1238,"size_decoded":945,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (745)","md5":"00ef12ad20bfc8a45152031e028f5c12","sha1":"570bd221309b3dc84b2459924850ce87048fc129","sha256":"45f168d48e110e4586b0ed09f66e57c5abde4fce5f9bd50948cc3bb38640f568","sha512":"133cb1e2406ecaac27076679e9dd341a07594855a5154e204a655da1a1d27a9b4bf43c0156cc4d503ef8222004ae505b3437980fc92a196130ae53bb4cd5c721","ssdeep":"","tlshash":"1b21ca37ea04ec5e69778d8d0c6fc31fa26c26378a742ce6928cdd2d07865321b9a1d0","first_seen":"2026-09-23T19:33:06.437177Z","last_seen":"2026-09-23T19:33:30.683524Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/virgencita?_rsc=_O6s5kzTWVZlEW9T","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.297Z","timestamp":1790191971297,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/virgencita?_rsc=_O6s5kzTWVZlEW9T HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":525,"size_decoded":666,"mime_type":"text/x-component","magic":"ASCII text","md5":"dd5d3c15b9f40ea9fa54b76106a01f64","sha1":"23cc0875fa4001a336ee55c059d10b7c62f62874","sha256":"9e5fb1517907278c529471cbd4e76b24836c5be58bea18718f2f4136c1a82e10","sha512":"55fac6f7099c68bf653da34e41ce4927f9d5dfe63a8a2966fd3aaae0570dbe25ce831cea8af980204b68b16e7fa1da0409344b1a4c86f13714b52ba0e1d5fc63","ssdeep":"","tlshash":"42f02e23d509ec6e2c71cc4c1c5e431f819d5d3b9a7528e5d38cec6c469143657ca1c0","first_seen":"2026-09-23T19:33:06.434733Z","last_seen":"2026-09-23T19:33:30.66976Z","times_seen":2,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/virgencita?_rsc=O1J9P368Hg4QOFED","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.430Z","timestamp":1790191971430,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/virgencita?_rsc=O1J9P368Hg4QOFED HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products/$d$slug/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1211,"size_decoded":993,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (828)","md5":"e9659cf210d7685aae01daaa0b53856e","sha1":"b62859ef98493aa9e0c372c3bd18c231012c3abb","sha256":"d2256b754b4839f71ee7336139ea74bda9f692b863b9336cb4c713c3150bc127","sha512":"a46ffdf4370cbaeae003d596fe730ed54c6f7fec62bc2d8a61bdefe0c7610da68ccffcfae7e7c72638f5b71800810935545372b1736c852381db387429844c26","ssdeep":"","tlshash":"b821375fc704ed6d95318c6c0c1b576a615c293386308ee9e7ccdcbc83804b1578a050","first_seen":"2026-09-23T19:33:06.451785Z","last_seen":"2026-09-23T19:33:30.684401Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/yarn.webp","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.536Z","timestamp":1790191970536,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /yarn.webp HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/_next/static/chunks/0juf4917nbm97.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 383464\r\naccept-ranges: bytes\r\ncache-control: public, max-age=0\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"5d9e8-1a00d2f9b2c\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":383464,"size_decoded":383732,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1530, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"59c5bdf0bec6a0d47dd0f4bc1b08738b","sha1":"fe1614131a5b5155330d82da46162404e3db9cdd","sha256":"27f29202b0713e73a2fdd29cf54e7a9c997a1978ccd589a0cc1798265fec945f","sha512":"0ca77de029421f44b83fd938034c3323fabff68bcd6ac4818964c60506b0a8438fc930ebf7fabd2dfad233792f8f9b55580df2e673684afb7bce7557f6ab9b7c","ssdeep":"6144:6nlWzD69SppqUQFzJdhNYLJ3ODjw4cqRk5jI2EX27uz8Oyik69aMDCzy6QLFp:b69SbOhGLN/4P8O27uEMDAup","tlshash":"7b84234506d71a32f7c646c51e5c6b60e4b77ecc06b8ea4f5c91e50a2bac387fb681b0","first_seen":"2026-09-23T19:33:06.425542Z","last_seen":"2026-09-23T19:33:30.68513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":597,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":435,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T19:32:49.564Z","timestamp":1790191969564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:49 GMT\r\ncontent-type: text/html; charset=utf-8\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: STALE\r\nx-nextjs-prerender: 1\r\nx-nextjs-stale-time: 300\r\nx-powered-by: Next.js\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\netag: \"k5315hivdklbb\"\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Webpack","description":"Webpack is an open-source JavaScript module bundler.","website":"https://webpack.js.org/","common_platform_enumeration":"","icon":"Webpack.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Next.js","description":"Next.js is a React framework for developing single page Javascript applications.","website":"https://nextjs.org","common_platform_enumeration":"cpe:2.3:a:zeit:next.js:*:*:*:*:*:*:*:*","icon":"Next.js.svg","categories":["JavaScript frameworks","Web frameworks"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]}],"data":{"size":27632,"size_decoded":5825,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (27623), with no line terminators","md5":"7f7a502aaf6e084370682352315a8603","sha1":"0b4f41bc0439165f19cd7a11fac9b6530d7468d6","sha256":"008072bcd35d3c5a158a35575b07f392f50198559e1e672a2ef56cff480e949a","sha512":"dfa9c41c33c171f3821d28a05d86b1cdcc07fdd3b569825ed2e3ffaf7b03215fcb9fac6039ebca66ab4c01eb5472f9e972351e9a710eda83af6a6c7851953c94","ssdeep":"768:leuSOK3kB/6FoBfG6t26nL6EeAneyAWMjdOwqRj0hdqhOG/:lrBC0LV+sePJo/","tlshash":"53c2c755d600ed2fd4378f4e647f7f78d18a9637ca6acaa8b39cca4947c283217624d0","first_seen":"2026-09-23T19:33:06.447691Z","last_seen":"2026-09-23T19:33:30.686593Z","times_seen":2,"resource_available":true,"data":null}},"time_used":493,"timings":{"blocked":-1,"dns":5,"connect":147,"send":0,"wait":177,"receive":0,"ssl":163},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/3gzxhq9iq6efl.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.242Z","timestamp":1790191970242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/3gzxhq9iq6efl.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"377f3-1a00d2f9b34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":227315,"size_decoded":71318,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"b9bf9dbc74b800fa267570449684371f","sha1":"f0d6dbba42356d79130724e455d81c6a29ee0efb","sha256":"d5de439da1ee98f738ee39179d2461bc242a278520b76b286f1a40fe150f871f","sha512":"3a429af4b79081acedd5064185466e3f06e61d96bff5d5e9dd1ba26a4eb719a655751d64b1606199ef40767b8939955b113a95b8ae4475e95fe8c30b7e3b9a88","ssdeep":"3072:RFLtaNMDfGWY7V70PTIt6h+8BibKNn0ZJGXjFMAL98nwd0++z:RFLtKOfGWYpyI9vGzD58nwd0++z","tlshash":"4b24fbe83995f6626ab302b710af18037338252b280d4d60a251fdddb57845fb17bf9e","first_seen":"2026-07-21T21:27:41.842253Z","last_seen":"2026-09-23T19:33:30.688056Z","times_seen":145,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/1gof_1h69v083.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.247Z","timestamp":1790191970247,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/1gof_1h69v083.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"8c5b-1a00d2f9b36\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35931,"size_decoded":12614,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (12591)","md5":"05c39d27462d78a1434746b24aab79c0","sha1":"9ff7e6cf62ce5bca06a933d3cec545759d683580","sha256":"1793cf2f5aa9a8c780019f6fa8daddb59af8627d5c51bf458b1e4ed42df65e9d","sha512":"42ed47641938726b27e88847f8d7da27c18b766d384d211f9bc6bfc4b30964fb5bbebb342ec764a1bce011a21c124d993b42e4d17b91d0a569cf51a9a94388a4","ssdeep":"768:ZbyKztPpH7KIe3sK+7Y2THBTOQVOv7MLNsnSSzMd:ZbyibTsa7YQBbVPLNsnSSzMd","tlshash":"e5f21b6571e1fdea935781c4443f400df27e2d78991ea464b3fca8a62b6044871b3fea","first_seen":"2026-09-23T19:33:06.449429Z","last_seen":"2026-09-23T19:33:30.689526Z","times_seen":2,"resource_available":true,"data":null}},"time_used":418,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":418,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/0juf4917nbm97.css","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.234Z","timestamp":1790191970234,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/0juf4917nbm97.css HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: text/css; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"4d6e-1a00d2f9b36\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19822,"size_decoded":5451,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (17710)","md5":"46327e4e9380d2ab39f80bd25b2fe6f7","sha1":"ecbdff6bf9ec05c3eace07fa923b103b3ca7ec0d","sha256":"a300a52a6e9b28d9b8a04006c1e5a683ede283de916cd5b0fead2e7197491e6f","sha512":"f72e989d26084e9b9e51750284ea8bd84cfde19ba78ecfa06eabf2c28d5b2d4c24798c43514f7e654e74f1d2a2a27d369a985ceae97c4bd1fa3d494a132648ed","ssdeep":"384:mtjOCCQGZBp8vFCtRybnx/e/HDrwg6Lfe:mXCQEBp8MDrwVC","tlshash":"5492a51e9b45143bad6380e2e1d8ba9df51ab0c1df2563faae8316009fd62f71d93704","first_seen":"2026-09-23T19:33:06.452812Z","last_seen":"2026-09-23T19:33:30.690981Z","times_seen":2,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/2nwqoerny79-z.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.236Z","timestamp":1790191970236,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/2nwqoerny79-z.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"57c2-1a00d2f9b34\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22466,"size_decoded":7850,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (19032)","md5":"97ec2c098aa29e2f65cac1d51db85a95","sha1":"e1af1e8378ddd1d3acb8935c62d01a4680e19f79","sha256":"e5cac795038a17902959ee55d7b60dc606059f3583a62ee49bff20f068193064","sha512":"dec99e92d2a0494f8dbb5368730dbbab94f0639267c9f1906a7cf85044709ab3d763c262becb5c3d8c452b0b04dc629fc31a025590cb364d340fc1c95c8c65e8","ssdeep":"384:nfCT2eGmqg7vB/iTAkOF9qFudambF7EQ0IcT7N:nfCbGmqg75iMVFIFZmb9IN","tlshash":"85a217a97195f4412ba364a5407f500bf238297a286cd0b0a3e6e8f1bdf01add537f9d","first_seen":"2026-04-05T14:18:16.598053Z","last_seen":"2026-09-23T19:33:30.692393Z","times_seen":62,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/virgencita?_rsc=yIp22O3xgPPxC28X","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.276Z","timestamp":1790191971276,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/virgencita?_rsc=yIp22O3xgPPxC28X HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_index\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2332,"size_decoded":1309,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (1827)","md5":"f756d1b487d2f1cc98f49e876ef8581e","sha1":"426d3ee1ad851d1e8b4d7c242c0b6c89cff63fed","sha256":"bb4249cd2795b0eaa68a5736b13077645c9004a12e437f787c66fdfe16131078","sha512":"4661973658ac1aebe9c7f3a8d31e0e0454021f220028f96d624329335bd43982bb25be7889770673a5652ced7337de546a7c456fa9bc1bc6fef8d0878b01d4fb","ssdeep":"","tlshash":"c8410f379a08ed6e7c66859c142fe70a918c093b97744df9d79cfd78429103a7b863c1","first_seen":"2026-09-23T19:33:06.433653Z","last_seen":"2026-09-23T19:33:30.695277Z","times_seen":2,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/virgencita?_rsc=c2NrBWOODPupw-DK","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.418Z","timestamp":1790191971418,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/virgencita?_rsc=c2NrBWOODPupw-DK HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products/$d$slug\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":525,"size_decoded":666,"mime_type":"text/x-component","magic":"ASCII text","md5":"dd5d3c15b9f40ea9fa54b76106a01f64","sha1":"23cc0875fa4001a336ee55c059d10b7c62f62874","sha256":"9e5fb1517907278c529471cbd4e76b24836c5be58bea18718f2f4136c1a82e10","sha512":"55fac6f7099c68bf653da34e41ce4927f9d5dfe63a8a2966fd3aaae0570dbe25ce831cea8af980204b68b16e7fa1da0409344b1a4c86f13714b52ba0e1d5fc63","ssdeep":"","tlshash":"42f02e23d509ec6e2c71cc4c1c5e431f819d5d3b9a7528e5d38cec6c469143657ca1c0","first_seen":"2026-09-23T19:33:06.434733Z","last_seen":"2026-09-23T19:33:30.66976Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/2hl-jv8gzqr3q.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.251Z","timestamp":1790191970251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/2hl-jv8gzqr3q.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"bbc-1a00d2f9b37\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3004,"size_decoded":1661,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3004), with no line terminators","md5":"93e686ccf873aaacd7b2dfa136c9767b","sha1":"87419dc94418508db61a3c45021e9f0629141954","sha256":"979065ef372eb7db6294aebcbb698eefcfb433f64fe5d88696a8144be63331db","sha512":"208702652e337b3290d656f334c8cf6554f35bbf40ebc93347a847ab7f91054684efee9251bc7b39737f3fcdc8b68b3dea2f889c1f9bd215fe171de7889170d8","ssdeep":"","tlshash":"e3516259e0a5aadc684302d8941fd00cb1af6b7cde5fd878b3b8e0110b570563a937d9","first_seen":"2026-09-23T19:33:06.441965Z","last_seen":"2026-09-23T19:33:30.696157Z","times_seen":2,"resource_available":true,"data":null}},"time_used":560,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":560,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/image?url=%2Fuploads%2Fsmall_merlin_1134732b34.JPG\u0026w=640\u0026q=75","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.561Z","timestamp":1790191970561,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/image?url=%2Fuploads%2Fsmall_merlin_1134732b34.JPG\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 12892\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: c384IKA9Lxk16qLfNiaY3RdsKSKXJXLXpFlmXy_1P_E\r\ncontent-disposition: attachment; filename=\"small_merlin_1134732b34.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12892,"size_decoded":13315,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 375x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"a4526d5e59d356a829168f6581b796c5","sha1":"7c6890a1ac3eae3ab7bc746bc883a02d83bfa4a8","sha256":"737f3820a03d2f1935eaa2df362698dd176c2922972572d7a459665f2ff53ff1","sha512":"81e54ed762fed3d1b1a074365a6f6bbd87887b4d32adf74e0173d1a36485eeb365f84ae56f27af9e29c7ba4d3a2ae8ded299462e807124c79b9c66f4c382db38","ssdeep":"192:U3DFlxV0oR8B5Xjb4bqCofiVPGmBdkqr5aGiOL1f3HVXSbx64HiyZqN0b9un13Sj:k0oRrVLLjlaoL1fhSbx77I2Y13SF5","tlshash":"2342d0ed440c2ec9ea61fe4ca5fe1228d8f4d8671b46197354bd8bee648319bf003891","first_seen":"2026-09-23T19:33:06.426597Z","last_seen":"2026-09-23T19:33:30.696844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":572,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/17f0hmsv0xu3q.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.587Z","timestamp":1790191971587,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/17f0hmsv0xu3q.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"fe9-1a00d2f9b36\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4073,"size_decoded":2040,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (4073), with no line terminators","md5":"85fa0773b8f0d59516242547ed4c2819","sha1":"419996900d2cac0fb560f92f01bcfd330fc6e9a2","sha256":"a528196bb0f1a9d1d3797d638345288034e8a0cb96e553ca86f0055d3b74aee1","sha512":"4aad57c99b6770f07de92a8dcdb4aeb28e58e829163389ec5e673c0138623987613a52fa380820fd6eae2366c04f4e80b6366a03fc5e7c5426ce4cad5fa200e6","ssdeep":"","tlshash":"3c81210da0a5aaeda81305d4681fd00cb0ae6b6cde0edc78baf4b0751e970953b537d5","first_seen":"2026-09-23T19:33:06.428758Z","last_seen":"2026-09-23T19:33:30.69757Z","times_seen":2,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/smiski?_rsc=O1J9P368Hg4QOFED","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.596Z","timestamp":1790191971596,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/smiski?_rsc=O1J9P368Hg4QOFED HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products/$d$slug/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1200,"size_decoded":998,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (815)","md5":"1d792ec3c4f3efaadf0cb4fab76286f6","sha1":"fa5ac24b576238e2ee6bb328db5743d58aa102ec","sha256":"861c418e3825de52736ccf10550431a430a98439d9dc003ca486e9d667418fef","sha512":"69eacec0d67403b6d0656ce08ce3996d8c1477e952277c469e9b5363271b3148d4517aa54d991ccae9ac6253322cc2aa6343161d2130190bb65be766de440315","ssdeep":"","tlshash":"e321e11b8b28deae8430885c0c0f631a63ea2e37c6759ddcd6ccedbc41405a25bc6091","first_seen":"2026-09-23T19:33:06.419084Z","last_seen":"2026-09-23T19:33:30.698237Z","times_seen":2,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/14mrh2-p_w84d.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.250Z","timestamp":1790191970250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/14mrh2-p_w84d.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"d576-1a00d2f9b35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54646,"size_decoded":13210,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (54644), with no line terminators","md5":"2c6890538a7dca3df0f031d8acf1bf06","sha1":"c516eec44b0e1d433f4bb380271297e7eaf3ca15","sha256":"a3ac200f3ab8bfa57cf78882057741ddb5c0fbc9e2490c5d951c099b37484206","sha512":"ca54d71ce89709406d40dcbf86d9425bc74cbf7127291992d2b3f974300009b3f372f6a806ac2bc44e7f30d9ba6e2b6442754814e20dbff8fc4928cb992aa693","ssdeep":"384:2sUWst5gWTnrYV3uXeqbkJdeUtdaVmzlhjuNf9zXYpDuYNb4x2pk81FZTDxJRiGD:vUWstOoS3HSqD95hdFQcCDFZ1dqFY+V","tlshash":"b333ea753295faa303db91d9c0370012f2780d7130ad64b4b395d8af399dd8a92faf69","first_seen":"2026-03-18T18:55:57.692711Z","last_seen":"2026-09-24T11:04:03.555882Z","times_seen":17021,"resource_available":true,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":415,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/image?url=%2Fuploads%2Fsmall_pencil_bf785313d3.PNG\u0026w=640\u0026q=75","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.564Z","timestamp":1790191970564,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/image?url=%2Fuploads%2Fsmall_pencil_bf785313d3.PNG\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 13946\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: gNBo0_9AplyhvTHntCRomy9AJ1zgqH9H8I2R8UIIx4c\r\ncontent-disposition: attachment; filename=\"small_pencil_bf785313d3.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13946,"size_decoded":14369,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 375x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b9d48cfef6f3ad52f8b6d456b63f0ecc","sha1":"135cf36708c825dba2e2ced697afda947030103b","sha256":"80d068d3ff40a65ca1bd31e7b424689b2f40275ce0a87f47f08d91f14208c787","sha512":"9b7bfd943ede102462c543210937e523d1fbe807ceb5381ad87feddf42d4071d0140915bb392d8d80dc0898c34d8c6e74679a8d22f34848c9c217b61a86545e4","ssdeep":"192:DtySyVoN4GviRQik6jLzmg3YxRa2SBBKTuzSoiYDV1NABz7xq4rnVtMne3MG:bgoC1ksLh3YxVyBKTu+o50Hx/t","tlshash":"7252e02a9d8d41fc38886846dd42f49c714bbee3914b84d423211b878479979f8afa83","first_seen":"2026-09-23T19:33:06.443248Z","last_seen":"2026-09-23T19:33:30.69965Z","times_seen":2,"resource_available":false,"data":null}},"time_used":592,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":570,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/merlin-ducky?_rsc=5CB68i4pnAekjehf","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.099Z","timestamp":1790191971099,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/merlin-ducky?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":543,"size_decoded":687,"mime_type":"text/x-component","magic":"ASCII text, with very long lines (374)","md5":"58c090c566ca4bcddf60e62a2b37c69e","sha1":"11d310856736cba0e646afa409a07085783f8dee","sha256":"6b95fdc1e48c82df2f4bac859eb3392b5cc9696e086b22186ec58cc569686588","sha512":"66fcbd998b7f3c6cfb2baf111978dddee479de8442ff3da4b3d885bbf551870b1a72e85a7ff789e6695b667337f9bcb23514024bcbbe3d4f76f1000f57c47de7","ssdeep":"","tlshash":"58f0247248082ed9ace0d818066ae70f613d253374b40e68c4ec8ca403f943e6a4b5cb","first_seen":"2026-09-23T19:33:06.417943Z","last_seen":"2026-09-23T19:33:30.700477Z","times_seen":2,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products?_rsc=5CB68i4pnAekjehf","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.268Z","timestamp":1790191971268,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products?_rsc=5CB68i4pnAekjehf HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_tree\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":430,"size_decoded":650,"mime_type":"text/x-component","magic":"ASCII text","md5":"fc2bb7ec870415ef8f70a50426b334c9","sha1":"bb75ce05cbfd2af19a36dfb414b76eb83d381bd6","sha256":"2874f2629c65414c76f76c9ce41e54523f739339664d9518efc0efdc7af27c49","sha512":"e99ee3ba89ba8ef80fe654e7a219eeb2f945ac3f001917d03f6b40d74ff1e39a311bb69e2e739cbc7014bdea1d22fb3e552042038c8ae3bda35c7380bc818d39","ssdeep":"","tlshash":"eee0e57344082d85a8e0d854036ae70f6529162370b50da884dd8c9403e543a5b8b5c7","first_seen":"2026-09-23T19:33:06.427764Z","last_seen":"2026-09-23T19:33:30.701279Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/merlin-ducky?_rsc=7h4NYy5eoyMcNlUN","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.716Z","timestamp":1790191971716,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/merlin-ducky?_rsc=7h4NYy5eoyMcNlUN HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /_head\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1300,"size_decoded":980,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (805)","md5":"9e2fbf9b0c3b1962f6e0eb55e5e62283","sha1":"572728c3a7b62a5dfe06dfd6d3bcf8e6f4c45d00","sha256":"bcdbdf6bb4dbef13b8688a4e2e5db339ad0deca00635ec4d9c551acc667ab748","sha512":"95162acf91e88dcc3f153f1f7e59e817526a378ba7f91f500ec16562a4b77437614378a3d5aee6606653ce1467331857bc99609c81418d7cd29c2ecd0a95a83a","ssdeep":"","tlshash":"5a21d037ea04ec5e6d76898d0c5f931a62ac27379a746cf6d24cdd2d06c90721b491e0","first_seen":"2026-09-23T19:33:06.446743Z","last_seen":"2026-09-23T19:33:30.702075Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/merlin-ducky?_rsc=c2NrBWOODPupw-DK","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.744Z","timestamp":1790191971744,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/merlin-ducky?_rsc=c2NrBWOODPupw-DK HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products/$d$slug\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":525,"size_decoded":666,"mime_type":"text/x-component","magic":"ASCII text","md5":"dd5d3c15b9f40ea9fa54b76106a01f64","sha1":"23cc0875fa4001a336ee55c059d10b7c62f62874","sha256":"9e5fb1517907278c529471cbd4e76b24836c5be58bea18718f2f4136c1a82e10","sha512":"55fac6f7099c68bf653da34e41ce4927f9d5dfe63a8a2966fd3aaae0570dbe25ce831cea8af980204b68b16e7fa1da0409344b1a4c86f13714b52ba0e1d5fc63","ssdeep":"","tlshash":"42f02e23d509ec6e2c71cc4c1c5e431f819d5d3b9a7528e5d38cec6c469143657ca1c0","first_seen":"2026-09-23T19:33:06.434733Z","last_seen":"2026-09-23T19:33:30.66976Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products/merlin-ducky?_rsc=O1J9P368Hg4QOFED","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.750Z","timestamp":1790191971750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products/merlin-ducky?_rsc=O1J9P368Hg4QOFED HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products/$d$slug/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1307,"size_decoded":1066,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (922)","md5":"d03cfd27d6c451883caf57d4b77995ed","sha1":"e94835761076746397f7934434062a0206999483","sha256":"434d0864ecd4b01d15bdc3f3d9e6959613649afc67ade004b761e352b08d2bca","sha512":"a33488ea373007e62a273ace4e261348d8dc71e8ae06de080e3fce16e1097da123c00e9e6b7d16c6c937aaf6e30003240237ba1b2271c9d033dee8334abddc04","ssdeep":"","tlshash":"4c21104fde18e97e5430c85d0c5fa73ab2e91a3785354de8d6dcedbc49a04b627490c1","first_seen":"2026-09-23T19:33:06.413Z","last_seen":"2026-09-23T19:33:30.702851Z","times_seen":2,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/0hay3mia-3yu6.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:52.014Z","timestamp":1790191972014,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/0hay3mia-3yu6.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:52 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"947-1a00d2f9b36\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2375,"size_decoded":1502,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2375), with no line terminators","md5":"8a6550d90c4ddc42fa6354a3ec23f1d0","sha1":"4fa9c78b0f351d1659f342b0c4e6c1e6b7f52655","sha256":"a7e0a2c99e0c77c437b33b8626bc3cf75b617929f6bec0d1e7795f76b7e88b23","sha512":"d0d03b1855710194c8fa02be773507d4fa3ca11006b7194257921f01ce5bc92df2332ee2c4ae20c3a5e5248576420c87466cc9327411f7d3a8b21a2baf17e130","ssdeep":"","tlshash":"1341505ae0a1aaeca84702e8a41fe00cb1af6f7cde5fd878b3b8e41107474453a537d5","first_seen":"2026-09-23T19:33:06.430884Z","last_seen":"2026-09-23T19:33:30.703643Z","times_seen":2,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/static/chunks/2i5s0f-ehfg4b.js","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.248Z","timestamp":1790191970248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/static/chunks/2i5s0f-ehfg4b.js HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: application/javascript; charset=UTF-8\r\ncache-control: public, max-age=31536000, immutable\r\naccept-ranges: bytes\r\nlast-modified: Mon, 17 Aug 2026 00:46:58 GMT\r\netag: W/\"1b2f3-1a00d2f9b35\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":111347,"size_decoded":36886,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d57da90f5a1f7e93aa6ed9aea16fb0f2","sha1":"39fc012f8fb526fa54f2f22222da5283e4d71624","sha256":"c9d6b3905bdc527d9919e532500bd7719f0d07704148016729f37b95966dc828","sha512":"32c0e0bd7b31bb73a699333ebcba5214791bbdbec9384ecc4d3c9faf3eb45075ed17ffbaa6c4bc107d1c1752f91797b3a556b5f065e7326779bdc34f468f8384","ssdeep":"1536:G7eGo8AgaD37OHXVLRMY1oxkYaIIEqu+K936O2fO3aGXyPuhINpK:go2Lz+qOG3E","tlshash":"32b3f9ea73517125d3db50a9c0af0b41b33b19d8241a403cb67dadcb397058962fbb7a","first_seen":"2026-09-23T19:33:06.411869Z","last_seen":"2026-09-23T19:33:30.704454Z","times_seen":2,"resource_available":true,"data":null}},"time_used":417,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":417,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/_next/image?url=%2Fuploads%2Fsmall_smiski_b484fc6e8b.JPG\u0026w=640\u0026q=75","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:50.563Z","timestamp":1790191970563,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /_next/image?url=%2Fuploads%2Fsmall_smiski_b484fc6e8b.JPG\u0026w=640\u0026q=75 HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://totalyarn.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:50 GMT\r\ncontent-type: image/webp\r\ncontent-length: 18376\r\nvary: Accept\r\ncache-control: public, max-age=14400, must-revalidate\r\netag: vFjx_Qgul0BiiWwLJuHel_TuqjRY1tmDqzCgmMKDN18\r\ncontent-disposition: attachment; filename=\"small_smiski_b484fc6e8b.webp\"\r\ncontent-security-policy: script-src 'none'; frame-src 'none'; sandbox;\r\nx-nextjs-cache: HIT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18376,"size_decoded":18799,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 375x500, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"8b540086619e50a007d0eaa564ba3c27","sha1":"d766955c19fb546f0057a77f854fddda1da6642e","sha256":"bc58f1fd082e974062896c0b26e1de97f4eeaa3458d6d983ab30a098c283375f","sha512":"bedbb96208ed0795b40cee861854839cd0facd9de7854320bc8868a123c0f45ac763af7de83728c03cd11fb6dd39d0ccc7b3ff326f352e14c9ebab3c2b084fa7","ssdeep":"384:ugK5n5HDXGBw5dQ1ijjwojj2Pvysn3hgdw5H2QmNU70mm:uln5DEwk1mwojj2iWhgdwwNL","tlshash":"ec82e19834abfc5959e616de0e71caf0cc9185547fc70e300e8c6efa5a0346f31da858","first_seen":"2026-09-23T19:33:06.422844Z","last_seen":"2026-09-23T19:33:30.705268Z","times_seen":2,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":571,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"totalyarn.com/products?_rsc=u2Wueao__XdOruSe","fqdn":"totalyarn.com","domain":"totalyarn.com","tld":"com"},"ip":{"addr":"76.214.226.95","port":443,"asn":7018,"as":"ATT-INTERNET4","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://totalyarn.com/","date":"2026-09-23T19:32:51.866Z","timestamp":1790191971866,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"totalyarn.com","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Fri, 31 Jul 2026 21:18:26 GMT","end":"Thu, 29 Oct 2026 21:18:25 GMT"},"fingerprint":{"sha1":"B6:0F:CA:49:A1:6E:93:86:CD:04:35:7C:5B:25:CF:E5:50:8A:7D:C7","sha256":"29:D1:38:9F:CD:C0:41:4B:D5:2B:7B:8C:BC:42:9B:0B:57:C0:22:29:37:DC:1D:A7:D1:69:3B:E3:04:F7:B5:F5"}}},"request":{"raw":"GET /products?_rsc=u2Wueao__XdOruSe HTTP/1.1\r\nHost: totalyarn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://totalyarn.com/\r\nrsc: 1\r\nnext-router-prefetch: 1\r\nnext-router-segment-prefetch: /products/__PAGE__\r\nnext-url: /\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Wed, 23 Sep 2026 19:32:51 GMT\r\ncontent-type: text/x-component\r\nvary: rsc, next-router-state-tree, next-router-prefetch, next-router-segment-prefetch, Accept-Encoding\r\nx-nextjs-cache: HIT\r\nx-nextjs-prerender: 1\r\nx-nextjs-postponed: 2\r\ncache-control: s-maxage=60, stale-while-revalidate=31535940\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3351,"size_decoded":1569,"mime_type":"text/x-component","magic":"Unicode text, UTF-8 text, with very long lines (2964)","md5":"53e1c18e6355167b7918db401fea67f5","sha1":"5925329ff39de0b5952ee1a9be8c73cf8feb8889","sha256":"99799bdab25771df4284add9bca87df23abe675cf27a34546dc453cc0e92b6de","sha512":"3f20bd993dc50e258641618916b8b43dd7444af49e56c6461bf01bd409744cdb65a882e4efa6a0b33bf7b12c5c323cdf4909ab7d44d6c7a04234eb3b26decc2b","ssdeep":"","tlshash":"7961744f4b64aa7dd23145a98c4fa739b2ec2737427189a99bdcecfc86c05e1660a091","first_seen":"2026-09-23T19:33:06.438355Z","last_seen":"2026-09-23T19:33:30.706094Z","times_seen":2,"resource_available":true,"data":null}},"time_used":143,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"totalyarn.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"totalyarn.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}