{"report_id":"8ca7a767-d301-4bad-87cb-9080f7b576af","version":6,"status":"done","tags":[],"date":"2026-03-21T08:29:43Z","url":{"schema":"https","addr":"dotebuff.com/","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"172.67.141.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"dotebuff.com/","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"title":"DOTABUFF.com - Official Website of Dota 2 Statistics","dom":{"size":230100,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39013)","md5":"44c3556f00bd850da08a47dc7904de42","sha1":"529316cbbcab82c2f1869d07af8645c5b91ad112","sha256":"c160f66ad40dd4450eebd28239d35f93a515f16dab3df2b18d3f3c49410f8d5c","sha512":"39f37b512c374f9071c7c0ab98326432a5d26041b01823a83429b6b1041d682e5f438061374aadfce8c3f7601bf96b04ab9b6d6a7429441cc1c50fe0a272425f","ssdeep":"6144:xg/XTqTSvLpak45rOM8LHIAHiSntk2ttoSd/6HhOihUtxTduk:q/DqTSvLpYunm4","tlshash":"7c246001aee800a770064dafb8517f342af2e76b9a964550b13c1e957ff2cae614f731","dom_hash":"domhash60695bf8ae6aa29c1e6076cd0c2b956d","first_seen":"2026-03-21T08:29:49.139476Z","last_seen":"2026-03-21T08:30:20.369141Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"dotebuff.com/","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"172.67.141.32","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-25T08:29:43Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"numclock.info","ip":{"addr":"104.21.34.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-04-12","domain_rank":7116742,"first_seen":"2023-04-12T15:28:36Z","last_seen":"2026-03-15T07:06:04.875996Z","alert_count":0,"request_count":1,"received_data":776,"sent_data":542,"comment":"","tags":null,"fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"kit.fontawesome.com","ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":16651,"first_seen":"2019-03-29T02:12:52Z","last_seen":"2026-03-16T03:26:25.468099Z","alert_count":0,"request_count":1,"received_data":15906,"sent_data":445,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"dotebuff.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-01-09","domain_rank":0,"first_seen":"2026-03-21T08:27:20.095571Z","last_seen":"2026-03-21T08:27:20.095571Z","alert_count":59,"request_count":59,"received_data":3563620,"sent_data":31158,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]}]},{"fqdn":"ka-f.fontawesome.com","ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-10-18","domain_rank":58377,"first_seen":"2019-12-17T06:36:13Z","last_seen":"2026-03-16T10:15:44.063778Z","alert_count":0,"request_count":7,"received_data":407655,"sent_data":3561,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"ru.dotabuff.com","ip":{"addr":"104.20.25.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-06-22","domain_rank":113108,"first_seen":"2013-05-04T10:58:24Z","last_seen":"2026-02-20T13:41:59.425651Z","alert_count":0,"request_count":2,"received_data":2824,"sent_data":1017,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"kit.fontawesome.com/0ad7180e74.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0656f8a045edeaeaead5f07d080a05d","sha1":"4da0712fe57e657ce4781b1acaa4411f184d8e0f","sha256":"1066ad8e925c90a8fc44f5c2faeccad6b8ac38f79632e570ad024dcef1aed53d","sha512":"8dfd9225f3096ffb5aafd01adb4714ed0d3a5097e2e34301b84678d97b8e51002dcc22ae925d25fa9e4a40a9fa804c38ce0c08b6878e789bca17394b70895e2f","ssdeep":"192:MkGliHAg8N/Cps9EyRDEbCpgeMfhhvlLoN6IQEZcJZuKwPXUxb/pfvh3CzYXyl8t:MkKDC7CKhhtqVUMFqnh3CzYXyl8YGce","tlshash":"e062e81c7a81b43a86af7192843f670fb679353b34129461e25cdae49c7ce9da123f1c","size":15298,"data":"","first_seen":"2026-03-21T08:29:49.204575Z","last_seen":"2026-03-21T08:30:20.420615Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"30ce1d454d328abf2647688383e210e3","sha1":"0eeca20f97d5dddfdf32359d402660a002cbcfe2","sha256":"39f7f9d6076e445eb71553eb18d6ae7bc4d9eaa6d07f0865886b122f0948c386","sha512":"14ca80084f0b52bc95ab038c836e5ace546e949573c61652c824806f38d64191e1f8b14b77210ef393f6a89a15f749fb98df6a0157e3fca23532884ecd77de5c","ssdeep":"","tlshash":"f6319d6e26f63132466b393e5b9f6b583631408b5044dd043eac8b859f91d741df2bcd","size":1651,"data":"","first_seen":"2026-02-20T13:42:04.949753Z","last_seen":"2026-03-21T08:30:20.43551Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/knrytpm6uedu.js","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec46f6bdf6b17740284c7a92a889085a","sha1":"c7efc9eea28cef787e944bf95652a2cdb67cc724","sha256":"a5cfcbe6ec6eff141806a7ca54b2833e6f91ff1146cb4e2219fb879d573e996e","sha512":"40bd3931a02f5487bc98511d397b5d000817852d811428eec23f68ae536bb9ae7512e6e7041ba22d30c4109b783342a5bec850e30ea60ccfcfec547c42c74cf0","ssdeep":"6144:yQ6sDjQSyp5fqDaleLtGvhwI7tsUlSSHIXonJQbO:z6sHQSyp5fqDalex6B","tlshash":"0f7495903bd0a84813ab4fbb732bf1d5f86e095f3c14499be104fda0659562afaf1931","size":366876,"data":"","first_seen":"2025-06-27T04:58:45.891011Z","last_seen":"2026-06-27T18:24:20.947909Z","times_seen":89,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dotebuff.com/index_files/e57eb8bc269d5e7f0d285286c43e59d279c6cdcb_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/e57eb8bc269d5e7f0d285286c43e59d279c6cdcb_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9680\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-25d0\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bc164nbCogOialQHhphG0Afl%2BVyTCQrOJG4P7kENDje07ZOMtOc0HJzhq3n35vQe3pIa1gqTiA0p1zc%2FjgRS30udxOQDqtULkMvijA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1dc676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9680,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x184, components 3","md5":"5933c71c87a082465a199459b2105ab0","sha1":"30bdff14d501d964d55e6b1fbb78ec8ab4bce054","sha256":"799dca2e6de2cfdb2f1f0c56293f54bec147b16cd693cfec4a79f1d2ecd918a2","sha512":"f0007081d48c6a5f6ab543159289ead151ceedd5b241266f13b4972be82c287f3fc8cc2f65f347606fa334200ed9388541281a6c341041d875ed2b2983de1555","ssdeep":"192:zqMer0GvDhvC004plTd+bvttxJem35KxZZG9rkVh2VN3gU/MOuO7EndcmjJ47na8:+N0qhvCD4plsvttxJemeZG9r1N3NDuOz","tlshash":"9412bf09134e78c8f4b67dbb16416e8847c2d22f624326c72de6c4384277bd926b5fe6","first_seen":"2026-02-20T13:42:04.915786Z","last_seen":"2026-07-14T19:54:10.308413Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/29f3bdb799edee196b3079efbcf73aae8923d3b2_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/29f3bdb799edee196b3079efbcf73aae8923d3b2_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 8977\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-2311\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZAvbuxdqb0MlULjDqpzovZrIWHLwGgXsXXGNEpn407VfrJzU9k5l7Fk3T5hT9OeAAQtpKJE7GePSgUnR%2FsbmyCloMsZ%2FyFFrC3cF8g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1dcd76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8977,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"c578e8815ae79229babd9c11b8536437","sha1":"56fd865ea03f8e7047934e05854032dedf52dc31","sha256":"85be929c3f5123279e8840ca7da1e6d9e93270271765ae7b2a4636f1854bb5bc","sha512":"3d36f01e8aacd1a2b08aa8ff1891aa4a576ded821300034002861560bfb32125d447dd0d67c421aee29b984040ec206925f71a83ea3084439f607647215d3fec","ssdeep":"192:R/2K3lze18WB9xrX9A2hEQfZqeRB0rb2sa7x7K5Spxg:vTWnVXm2uQxNRGolVpK","tlshash":"c402bf4d17022fe8f8599c7e297b6e944cdf583d1f120f61eecc2a0e893f151915aa8b","first_seen":"2026-02-20T13:42:04.946526Z","last_seen":"2026-07-14T19:54:10.290089Z","times_seen":6,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/a924305fe8490e61d9f2962271c5f28c7b6e8425_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/a924305fe8490e61d9f2962271c5f28c7b6e8425_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6378\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-18ea\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FrSooMwyuclzeQhvXtssoNFzkUm9t3d3kAzFv0KEE%2BXfMoa9qBaXDzYGVLwkX5FqYqXFWNDw9CsPljiUjW6v3BKJSD5u4%2FEwEedLiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1de276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6378,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 80\", baseline, precision 8, 184x184, components 3","md5":"94df83876de7807a959804f712276262","sha1":"681911d7d7c2e21e63fc106bfff6cc6c0a170797","sha256":"fcc1f5e30b192f8bf9eeb93bcb2d320b9342d3ddfa4af05692029743eca93a4d","sha512":"c6c91c71ca64cdefb6945fd7d141158ada516ae565e65bc584257fd94bd238095d65d99b17a972bbb4053aa28f2e4b6378a1edeb4e1478dd9f37b7def20a2952","ssdeep":"192:0pVwoZMQLsCbvIjupxdZ7PYUPgkkUQGLVk0I:0rwvcISZ7ZPXkFAVk1","tlshash":"23d19f57bd81592427acfbf76da48a4093f748a9bb15208fb534d10ce3f475cc889545","first_seen":"2026-02-20T13:42:04.933458Z","last_seen":"2026-07-14T19:54:10.323323Z","times_seen":6,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f346232336533383439393731616230623037613837373536333934353165623134376233666664342f363837343734373033613266326636393265363936643637373537323265363336663664","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.365Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f346232336533383439393731616230623037613837373536333934353165623134376233666664342f363837343734373033613266326636393265363936643637373537323265363336663664 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 170065\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"29851-6446febf8ecf0\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iToF%2F%2FV4f88J%2BimBz3BL39SkefWTGsgDizwubkaehFtWcfFUDSfFmvc%2FIKO0FUau8dUdWnXtPMPD1%2F4KME8QQ0%2B4r5Zp4uC6TIPlAQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd4776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":170065,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x675, components 3","md5":"21bfc1b1f9a17fbbe727b31882072c13","sha1":"29e19db020e441250061f433f7528817aac87d63","sha256":"5aa6c4ca6e56d4e05e4ad6b5997566e5796323758083055d6180ef4619242ec8","sha512":"288b26ac1feb7aff33932aace924bb16b4cc0cd8ac0e6be97de6b7caef94826187b6ce59f59a6a4574c6bd8269aed2775fa7c19d05d6e47596b2b58abe2ce038","ssdeep":"3072:xigPHCg5vaKejHscU8kDDtq55IsfIklIVpHgiWTYvRVBL2PaQvgE:xFPHx5vBmMcUrvQIsf5+WTcfk1","tlshash":"e9f3131b7c09af3496e1735b31484fab0ba01322a4732463587d934c8727776b9fa75d","first_seen":"2026-02-20T13:42:04.938417Z","last_seen":"2026-07-14T19:54:10.310702Z","times_seen":6,"resource_available":false,"data":null}},"time_used":593,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":113,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/viper-vert-1f9dad7a4de97d5df0b719594abd71e0c999ed7f98a6814278b3b563e5098150.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.355Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/viper-vert-1f9dad7a4de97d5df0b719594abd71e0c999ed7f98a6814278b3b563e5098150.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6095\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-17cf\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pnA01oPF8Ivc1g8QDXvSCZjcw03sURDcsS9PzqKuAmwBsfN5hqTjmEjW58qIgkNE69oUztd5rWYU2HEiQG6HRxu8Crw58yOflNw1Ow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd1776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6095,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 142x188, components 3","md5":"67b276b512ef4619374302222ca0af3d","sha1":"6db91e8185c296e4543bdf25840364fe2c777ede","sha256":"0c63a7cb60d899652269b0fac585c25b45aa9019da4f5776742e6f2152038fb8","sha512":"d3487ad2d07ca64bacfe9415e7dd62fdab491ae28c682ee976e799681520ff09a0be64199f4bdd6186f28b0628b42de59fe60cc8956d792fdea5ee8f401dcb96","ssdeep":"96:IWGjErprMJces3FflIyvx3g2CghcRwZRXClB4XvrD9r+dD567Kugmr6x/Aw5Gbev:+3sFfldvBzXc6//9aLeBgmr6xl5ku","tlshash":"6cc17d5b278b51f873a6bceee008577db21a571c3e642220e990f691e2607cae7cc443","first_seen":"2026-02-20T13:42:04.900507Z","last_seen":"2026-07-14T19:54:10.306049Z","times_seen":6,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/knrytpm6uedu.js","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /knrytpm6uedu.js HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=3,i=?0\r\netag: W/\"6925fd47-5991c\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YjrkSfayxCziUR76xSzTmv5Q5sWsE8%2FNzYkSfygQth5ZVAHiLWlWWMLJ8ljNBsdg2U8AJyAbjnsImjGw8Q5pMtgOv5kaJvfp44%2FagQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e5576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":366876,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ec46f6bdf6b17740284c7a92a889085a","sha1":"c7efc9eea28cef787e944bf95652a2cdb67cc724","sha256":"a5cfcbe6ec6eff141806a7ca54b2833e6f91ff1146cb4e2219fb879d573e996e","sha512":"40bd3931a02f5487bc98511d397b5d000817852d811428eec23f68ae536bb9ae7512e6e7041ba22d30c4109b783342a5bec850e30ea60ccfcfec547c42c74cf0","ssdeep":"6144:yQ6sDjQSyp5fqDaleLtGvhwI7tsUlSSHIXonJQbO:z6sHQSyp5fqDalex6B","tlshash":"0f7495903bd0a84813ab4fbb732bf1d5f86e095f3c14499be104fda0659562afaf1931","first_seen":"2025-06-27T04:58:45.891011Z","last_seen":"2026-06-27T18:24:20.947909Z","times_seen":89,"resource_available":true,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/doom-3b31f2b2a692a4d59e6e7f01abfb13a47fadde69b0d2ab15aa30878c945ad428.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/doom-3b31f2b2a692a4d59e6e7f01abfb13a47fadde69b0d2ab15aa30878c945ad428.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3065\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-bf9\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jtxGavInvQnGjyGTnEznIsmMweeB4dLQFNmXwFXL%2Br7vyJdsbBIjIvt5y%2FQoPgN69ShURzrRWj20DDjeOaI8U9kbhWsuA839cXlx7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e2e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3065,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"491cc08a6e4a3d2c0f04b50d5b96e328","sha1":"baafed92ba25de96bf0c2d47f47710fd5dfa2f39","sha256":"89b23f9eb502ca8741c50d8e698cc14de7ca55369d29ef9e5d7c55ca8d975a36","sha512":"77cde2bde2a96429f1d5e18ffc5276cc0cc15a5f86f64914000a64d853cffa453bd977c8b71aa6ad869e42c9518f228cfae2329ccf854b1b1f4a282020be2c07","ssdeep":"","tlshash":"d251397853125050cc6ede3da6fe13abe48cabc338347a172af281a8a5c0d886b61715","first_seen":"2026-02-20T13:42:04.922043Z","last_seen":"2026-07-14T19:54:10.3176Z","times_seen":6,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/riki-vert-49fbcd2b138b9e1c040b86d005f45bebc33142adbb0d287f2bab15c1dd65505f.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.357Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/riki-vert-49fbcd2b138b9e1c040b86d005f45bebc33142adbb0d287f2bab15c1dd65505f.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6434\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-1922\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yoee1sZ3TeDGn0TdOg7QuktDKV69NWnNy%2F4hscq4pZMVfQSF4YnU49615eCUeHaZjGLBXcLnkyaoUI%2BWrAwpaciXauUNzj5MbFUb7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd1c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6434,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 142x188, components 3","md5":"8651ae4212655584a22a4d13955f2dd0","sha1":"355353625dd6866218a4cc7ec35fb149451b2a83","sha256":"b8d68a31418b28a5212aeee91f636562f69698455f1e383508e570890685f576","sha512":"2c7855a1e8c5d5997c73d2343de71be382f5a2ff8ed2855ee8152eeb393e38e8f15b4b4b56bfd46c7536686858227210202574954e6526cce0ea605c082d4989","ssdeep":"96:IWGjEDMx5m/+pYgNt9J8WKcZo7dnZhnG/3PmypUxaS1zdXT8lmH0+cWZ7AeG46ak:+9x56ib67hmuZD86RAeUaacpuh","tlshash":"67d18e46fe5800e5e80a6f0ddd14b35a7a69f2852d15012caeacc3b7e8c5ce583b4bcc","first_seen":"2026-02-20T13:42:04.921115Z","last_seen":"2026-07-14T19:54:10.373142Z","times_seen":6,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/26f0ac2b671484cda369bcae30210eb7c6146ada_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/26f0ac2b671484cda369bcae30210eb7c6146ada_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13014\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-32d6\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mbxw0E4XRX4puaZ8r8T9rku4fKt9DmPm8uM9GsV6G0lHe7N6QHQjaJqQ5sDf%2FvqbONe9%2FJb8tA%2FilYrlPueW%2Fz6q%2B0HVoqXnDGCG5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1de676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13014,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x184, components 3","md5":"64c05c6133aaa3308cb032073ca9042d","sha1":"1eacb62069ee9774ce98bac7f67d331261d80370","sha256":"ce87b05f6ac706c7dc54dad3d5c476d159a9ea7ac88b71ffda4958fef4b1c125","sha512":"d76d5bd86798cfc2310bb95e14405ec1a7aa6a6e99269c10ba717d00c48e0b7cbba774059cf457d4bb8ec6fc9914f76a563b134323ea7094d4a8cb0deb79cba6","ssdeep":"384:EEY9ifx6ivXBZbpGsjTo+keQBgKgKAwEP4bN:XYY4ivNGVmQWKzAwj","tlshash":"0d42d19d0eba3fd9365bc5b6c4a05c7773ec2fb20574cf5e52c44961856b92cc950308","first_seen":"2026-02-20T13:42:04.947379Z","last_seen":"2026-07-14T19:54:10.303078Z","times_seen":6,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-21T08:29:19.889Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dzcv6TWb2kLompOcCZ%2Fu36v8xzvNhh%2F3kpJMu6cQu3NDWLpheIMmD8IuCWgpbWJzyqczsBHeezD%2Bv8iuDRNGYsqVmrn81Q0HA3hyuw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9dfb96976e3f5fac-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]}],"data":{"size":173734,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (621)","md5":"93b0d0bd779998e160a5ee987abf2c21","sha1":"e612e63032f0a338917e5cdc6ca7a9173c2970ca","sha256":"f7b3ae08caedfaf0b958ddcb5a9c16f5e7dccca28e32ab37b69e552738a45495","sha512":"f78087df05d04f76a3761a834040d57cea1be66e11aad2963e563578dc84f30edb1defe1d3d9968cc2f85f6bfc2ec091833729259c55414ac5708aa5acdb758e","ssdeep":"3072:7dveK2Z9xkERy0/kygUXYS8A4bLBwH5Iry8JvOJzx/aEtOVMyimbQUlWjnmxLTzu:7dveb9xkE40/kygUXYS8A4bLBwH5Iryp","tlshash":"43048561e5f510e7024ad2ced9163f0faed2a87feb47460170ad06fa5f96ca2d60b01d","first_seen":"2026-03-21T08:29:49.148945Z","last_seen":"2026-03-21T08:30:20.388844Z","times_seen":2,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":19,"dns":1,"connect":1,"send":0,"wait":247,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/client-aEcIvsvo.css","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.344Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/client-aEcIvsvo.css HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6925fd47-d901\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sCSo1dADxhWBwTgL7MogB9XhrmKsA8v4i5odIwT1uPOtqP6UoeFFZCOtrK1Z%2BeTSgqAdodWWqLvjAoplypcYdC6201g8nYzyQwR9iQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fcd776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":55553,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55552)","md5":"83145261e8d2a384f33d2c87190c81b1","sha1":"b550f149e75fef35052aaa423c66a4f601831b74","sha256":"aab04d2ad896ba89cdcdbb68c586038c97f458e3855d1459b820d158c242dd78","sha512":"2ccaf2b0ff62fbf35cbefaa2a7abb36b0588f049f565955b8d1e66e7f162aa79f6c121ef76f727f1ea8492fd45808e59187fa322d3924d80e6e1c354f8276828","ssdeep":"768:lTndj8G7R9J4ZVfzTQNZwd+ijWrj5qJhd8CZ4LZNCrphdS4+JMgU+X:lhAULg5Z4WS4+JMgU+X","tlshash":"7f43446a69a0503bbc13a1f0e38cb56de61af0d4df3a569e5f9111046bf23f25c9bb04","first_seen":"2026-02-20T13:42:04.88525Z","last_seen":"2026-07-14T19:54:10.325709Z","times_seen":6,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":313,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f69696c692e696f2f465435424d67392e6a7067","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.359Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f69696c692e696f2f465435424d67392e6a7067 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 318715\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"4dcfb-6446febf8410e\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=liBH6mpK1AtJfn2AZ%2B3SA4XZC81k9X91NgizLAvhJMG5xlkRgDrBbPh30PuZe4Fu3drOQ%2Fk3Iu4bLUJ%2Fch3vQP9B6ZhwGAy%2FDkMpSw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd2d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":318715,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1200x800, components 3","md5":"95f6ccc83d189bec541fb60fb81abcd8","sha1":"fbd5ae6e2966f61d802265b6a2f52fb3b97fc73d","sha256":"3ba67216733ebc852b800dad69265b178754b31d94b2072b6f81e12afd759211","sha512":"3bac0d1947714069b3dc5cb1c9b33fa0cff069f85f6e42cfccdca27bbde4166adae2a28aacd682b3865bb6de5485147e8cbaa547536a092e56c71d8fad0c3ad1","ssdeep":"6144:lA61VMBbH2ap9xLMzQnarVcoJ8brGfDdoFHmwGOU+thSVRAJ1t2aBA:ygidHyh6br5qOEEJisA","tlshash":"ca6423b4de0647c478b9422302bbfd435b8404ebdbea8e879956ad2a3178d64cd37429","first_seen":"2026-02-20T13:42:04.907397Z","last_seen":"2026-07-14T19:54:10.314008Z","times_seen":6,"resource_available":false,"data":null}},"time_used":494,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":332,"receive":162,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f692e696d6775722e636f6d2f696d66733948302e6a706567","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f692e696d6775722e636f6d2f696d66733948302e6a706567 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 81341\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"13dbd-6446febf850ae\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QfsGMs1Y%2BHuNhHqFuH7iZiEb1DBX8fds%2FnENbCgLgUjTxfxRmUWUXH%2F475FcLVprQGD%2BzoOpqXuY9JgYH9Tukmiezo3mB8QnaXXH6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd4576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":81341,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x341, components 3","md5":"27e63e02db228eeb9ecce02b8ebe069a","sha1":"745b1a867fb39c77b0adaf91898c9b6d7dc72aa2","sha256":"46cd14df3026d7d9e0716a63c6aeb832d7dc8b4fd3698ef46ae38af54dac4019","sha512":"fcdca8f206508b43d60af746195c1f23a9e30269b3d6c5002bfffe162bf8f028a3124fcf6599fe2e8e7bd5bb6e351f5adfe7524cf95a4a582de6452f171d2e56","ssdeep":"1536:pGU6RLyYqDzeBLzjxebkKZZBWwLGof50S7tS2UYJy166bvKM6IFr0GzOp:pGp9qDzSdekKDduCS27Jyg6b4mrPz6","tlshash":"82831279f24726b99e3609c323f8a60eed39c74dc4fa36f75291d921486a0d9cc93301","first_seen":"2026-02-20T13:42:04.906142Z","last_seen":"2026-07-14T19:54:10.285177Z","times_seen":6,"resource_available":false,"data":null}},"time_used":335,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/weaver-5caaf0b2e66e078d77380e5529e2fbce3265e5ef6bfba029c036ac7616a54ecf.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/weaver-5caaf0b2e66e078d77380e5529e2fbce3265e5ef6bfba029c036ac7616a54ecf.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3092\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-c14\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HycytiBCnQ7HK1CvA5c%2B%2FFUF3zxSJ%2FHDYfqQNJ1GiW81qs0CuwmOM0eSoOoj7trRtlPOIg3DN3Gm49YxTp%2BGr%2BJyITtZ8yUSScIRXw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a0d9676ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3092,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"fc7de809ab74a8fcb272d38adca62922","sha1":"9ae12bce44099164fad76a3a98a33004488a557c","sha256":"eccc4cd14317379ff5aa6d74fd727f2552c622a673672f021e121bb38ad21d24","sha512":"b0ed09fc51817bb49e3a68a5f04c534e9d9495f1b8ee2394fbb4ee2d547991383c25a2768bfc66a6e62c25e6609726f869a9c0af99b1652a40654f705d8d4dfd","ssdeep":"","tlshash":"3851291bfe00e706bd1ba1deca2593fff34ab96076045235aa6905f186318489b4db1b","first_seen":"2026-02-20T13:42:04.897119Z","last_seen":"2026-07-14T19:54:10.322174Z","times_seen":6,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v4-shims.min.css?token=0ad7180e74","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.932Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v4-shims.min.css?token=0ad7180e74 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dotebuff.com/\r\nOrigin: https://dotebuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"43c494a755b81101cd0097c73bf4bd42\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 575a0c6f16652571820285002db8b856.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: i1FDqIwDTfNrndk7PNzoedtYKF8c4nIgn983s-JV1-ke5ycjBDa3NA==\r\nage: 26897638\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9FYgOioJSuD7HwZsUmqd95B%2BmqrUU2UTtUh0rrYvupSXPrlgqleO%2FKAUngwn1wbXTBaDJ1geIv%2Bfpcp0AceVC6Czr4j%2BoCEeMG%2F%2BPoORjlj%2B7H7t\"}]}\r\ncf-ray: 9dfb969e2fa18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":21210,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (20995)","md5":"43c494a755b81101cd0097c73bf4bd42","sha1":"f4102ef32474a0629d2989a777ee5e738af6a6ec","sha256":"c723bc4b9c56380b5ccc209f6c288c26028e2ecad0d27795f665fb01a9f4e9ac","sha512":"7839dd420acce148a9ca85b74bdf7995ce7640eeb0cfacc26eb83e78154b0a59e7ea0ddfe63ebb6becec3b2821b53696a1120c3edcf720d2fe870697bd61418a","ssdeep":"384:/Wl6sTnnbF+PJeQlGngUHPAHyw5+E9mu1t:/O60OJigUHPAHyCtb","tlshash":"199258051b2d90a3b2dc3c6bb4417ee42776278919d64c51e3273c84bee789b31eeb61","first_seen":"2024-12-18T04:50:29.505919Z","last_seen":"2026-08-03T19:40:27.956527Z","times_seen":7283,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":52,"dns":25,"connect":3,"send":0,"wait":46,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/application-324d8d8700ed0c33abec1ebeb744a93a764603b9061985cb003691bee1f8e596.css","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.340Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/application-324d8d8700ed0c33abec1ebeb744a93a764603b9061985cb003691bee1f8e596.css HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6925fd47-5d283\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1BI08NW4DjLiGh0tzx8Xx6fzrqUFVvO1QMMRvBvSKq%2Bf0Q%2BvRyRaoSSNkTccJcInmXLX434s1AvWl9iYEkcNWZ0LAMnFlt5unpq1g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fccc76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":381571,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (50708)","md5":"ed31d3f2212c3b09fbbbc78d5d2c20f4","sha1":"2cd98e16118e02511d58deaf6070dda178ffb172","sha256":"8df603fd01af9b606d46bf1949c689de0d0b43a5c1bcaa3dc2f9d0d8de3a35fc","sha512":"49f9fc4b9550e5bc8bac29763f90feb569e2c8aee4c6acfb9a5dfedf40de78cf3a7949359f39fd0df1d10bc25a46a1c63c7fab42db4abaaeb3ade983f1b314f0","ssdeep":"6144:RS22sc2LHIEaTmWYULM0ua6mvUdQ6yy8olTBHNn8+zRGiYDpZ09mBqhq8Sl:RS2DIEaTmWYULMzHN8+zRGiYDpwqJ","tlshash":"a0841a61d2452169b327c26efdc1b79d767be212c5030fbdf42a3a6cdac65c91232b18","first_seen":"2026-02-20T13:42:04.928046Z","last_seen":"2026-07-14T19:54:10.339029Z","times_seen":6,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":268,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/assets/fontawesome-webfont-c9a0a23a23a3f6f7165cba218b40483a0b1750d92b49c40842f1d8f566f5f421.woff","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:21.186Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /assets/fontawesome-webfont-c9a0a23a23a3f6f7165cba218b40483a0b1750d92b49c40842f1d8f566f5f421.woff HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/index_files/application-324d8d8700ed0c33abec1ebeb744a93a764603b9061985cb003691bee1f8e596.css\r\nCookie: uv=mn02h3qj-eexi5rp6\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ddH16AiRXugqj52Q68WTiBxQLlPM8X%2Bijjs2Oa2trvfSIgIjPXMlvxu%2BJ7%2BSystMsDV6TXBGkUL%2FIRaTTB%2BRdw%2B0H9NDgD7HW07TPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969f6cba76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"2bab86c044593964e6da167d8123ae16","sha1":"0f14e146c55d34381c623cba9de158ebaad1f8cb","sha256":"6fe129ef00142b2df5eee5e0de857696aebfb271e8461aada8d9af87a6dda637","sha512":"f4865b2a7cb4d283b0d167d80fcfe1e220e64d0d5058cea5f0019c79f7a4223fbe838b4625f4afe274cc789a5795d8120a57a0c5f19e7e80ceb64beafdf0b825","ssdeep":"","tlshash":"93d02b9e5043628b4812156039c219c2268c12f6b43a85e82d86d49752a867ece9ba8c","first_seen":"2026-03-21T08:29:49.156009Z","last_seen":"2026-03-21T08:30:20.373431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":242,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":242,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/modal.css","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.347Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/modal.css HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=2,i=?0\r\netag: W/\"6925fd47-dda\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ua8lr9NbhGhQiin%2BdUhba2ycjns0LuJTcDpUtvcbOVIhMICUQEPWLPJ61X0TbaAPTy7gTjw56B0DEHDbjxfjo1SwhrOK7xgdqagSJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fce276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3546,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with CRLF line terminators","md5":"efc8a1584096699c3ba0a16f212856fc","sha1":"e66d7e89bcc73fc9c39f2cd1498eee159e65b217","sha256":"401ef6b566741473b220048aeb632cf1ad06c9e9ed0760ac48d71bbfecaeff69","sha512":"af4fee8b3347456dd97fc2355c83fe20fe4736681b279c8763e613aed5a131f2c7e37992010ebe83341b837d3737dd5528371af831122e8d9ab99856b0831ab7","ssdeep":"","tlshash":"88715506458d388b2236612af725ba04e6f6807f9e1913ed39d53b686ff42608534fcc","first_seen":"2026-02-20T13:42:04.935839Z","last_seen":"2026-07-14T19:54:10.305378Z","times_seen":6,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":223,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f69696c692e696f2f336d67496134742e6a7067","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f69696c692e696f2f336d67496134742e6a7067 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 126369\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"1eda1-6446febf86fef\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pq%2FlxUPnzwJou5o6bApqFPA8evwVewIU%2BrVc4lmhaS6ipZTF8bdaM%2F8T04GdNn32eydgrl%2BqEBhX3kd%2BWNQRYKkt6ADa5H4ZVjCGUg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd3d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":126369,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1200x451, components 3","md5":"f9a8ee10995a000e4fe87b11c6dba748","sha1":"de9b6d393911ec38a5fe9f1a8954b8b922ffe27a","sha256":"5d7fe3f71b82aa9baaf9f9bbd570388d97bd49c59f5d96935aecd050b9672b2c","sha512":"cb2e9b9726d399c876c43fb369706aa87f1d9638c8d3f2e52413b5fa76dea25cf55f2eecf9c9491c5caa6f5de42606cdd430d649cb9fbf01f1e13b3014b3d751","ssdeep":"3072:M4kd0yTUC2AzxGtmewfgTRGcJVPJ6g6rfotjXW+TDhFYO96pTW9H:sXjzQUe02DZjmqDUOU2","tlshash":"fcc312de66ab228bbd360021d1867e4aacc15040fd961bd906249c6f9fe2f11e6cf7d4","first_seen":"2026-02-20T13:42:04.901883Z","last_seen":"2026-07-14T19:54:10.37074Z","times_seen":6,"resource_available":false,"data":null}},"time_used":356,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/f98683676d8c3c088bcc0d1b51ca61d77e66cc88_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/f98683676d8c3c088bcc0d1b51ca61d77e66cc88_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9243\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-241b\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sWj7n6DOZVOxy5la8AQA%2FA%2BlfgGljJqmWb2iRENN1fZToswXzz000SeN38LC2%2FjxplEC2B17EpgswUYLV4v0fyJJuCL23Su2AL6xIg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a0d8776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9243,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"1416b7f1d8c784de5e3f2c65a9c69479","sha1":"72c98de86c8f7553a46a36f52f4a6a8c99d12cbd","sha256":"57cab724d8bd1b8b73da9873122f56cadcbc877a7e6946a1338a4d6858d2c632","sha512":"4001840fb522d4094656089b73c71100da5fe0a5e0aba292a631816ef66b7eea862e88eea37a06648b823163461de30e65d38e0bef21fcc27bac4679767cc4bd","ssdeep":"192:m+snv1ARHrq8fsMZeJyhvh1MZ9x1Hqc9lFGGLYhKMrXTLPyv:m+01yJfAEhIZDpqAUgAKMj34","tlshash":"0312b086130c0fcaf051dac041e48e796af41928761d2fb345ecba361fa3e654b09e1b","first_seen":"2026-02-20T13:42:04.895764Z","last_seen":"2026-07-14T19:54:10.337679Z","times_seen":6,"resource_available":false,"data":null}},"time_used":182,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/e8e1e2e1982c628ae27f1664c7b5bec9f5b1ac92_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/e8e1e2e1982c628ae27f1664c7b5bec9f5b1ac92_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12412\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-307c\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e5F%2BD%2FdMqU57i7AnQpazoTqOcOJXqL5B5FQccjfLkVOTrlONPmmX%2F2Tz2QWf5bHO4v%2F6IKg6TY3m9D%2FAha1M7MXbZPn2pQO1qwot7g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a0d9276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12412,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"9e997b1ef29e1b0a2395d0b435390c04","sha1":"b757c353b4102bf2d22b85dd9ef8f2c2248bddaf","sha256":"419aa43c904cd133fb31b119e4bf86785c5447cb197b5f82c14b632b09c9aa03","sha512":"ffb77a30f3b1de5f8887d71e76e514275da93363cb170adb5e265458ad41948256fed10efe9d30b7ca24220e99e39bc7e83a285f7cd34236477cf8ff13366e7c","ssdeep":"384:9ZPVFDgR8Q2zneHk+OZd5Sfh0Ks1UBo1b:9ZPVZznMOZd5o0KsK61b","tlshash":"e442aebd52cf32d7b07a89e579681f23b6c6e12215c5a701c4d815b8a1ea344afac287","first_seen":"2026-02-20T13:42:04.929193Z","last_seen":"2026-07-14T19:54:10.328502Z","times_seen":6,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/dfc8fe9997cc39a03eb9691c55bd7d688e642579_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/dfc8fe9997cc39a03eb9691c55bd7d688e642579_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 4649\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-1229\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8BLk%2FZT1Ir2FtX7eOEa7HQP2G80W6jwza8PlI6Bl6DWxmqmxIu8hUHWeDpiTv1QJOLrFGTcXRB9KESILn%2FXX%2Br3Aze%2FgnqjsSfHb5w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1de976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4649,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 184x184, components 1","md5":"b31afb4da903ab9ffba392b93b807eea","sha1":"dc5e16472397ebe37a679a86e64b01d27ce01dad","sha256":"7b756fb51b050a0c55be23df63cf4844ec5fa00681c4736b5efa349c8a1ec39f","sha512":"6b5efc4639d508c0f11c42aacf9f43e9226d14d239897210198d49536e0eccdd5dc088c24dda40f885dd4205b84cad4b29221a23b9b316249080641817f28133","ssdeep":"96:WhBsvRFN4wWLFZn9JI4k3f1AdGjxmZ1PweTzptnAaG3mVX62Dv:gAJ6t9JydAdGNmZtw8DnAaG3r2b","tlshash":"ada17d5232d7e724bffa6578caea0343d50d24b87822d6b9244c109de2cdeb2481032b","first_seen":"2026-02-20T13:42:04.935131Z","last_seen":"2026-07-14T19:54:10.34229Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-regular-400.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:21.184Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-regular-400.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dotebuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 25476\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\netag: \"eedc5426d4ce1dec29ed9f448d7aa544\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 fb60bb37778839b51bfea3a34907efd0.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: lL_tyswPnuKq861evokKN0wCOshgCt3jrUzbxrvWMMLEm8eip8xWbg==\r\nage: 25933718\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L97m8Gf8uBQCbNP8XBQ19yxvU%2Fs26Gi18Ols%2BwkjNbBX91PRzRe25mOVMNdS6G4unB58mPYFDKEQlak70msvULJ0Hr%2F59Dav%2Fp3RiMN6QkJjUrY2\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dfb969f6871783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25476,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 25476, version 775.1280","md5":"eedc5426d4ce1dec29ed9f448d7aa544","sha1":"806b0faeaf798a61d5d8fd6dcc91b65324f60908","sha256":"e71a997056207afc56d91dd0d9fc9a71ef860ddbd73e22960243c4bc0f760a3f","sha512":"874921520c75c9876b0b6016dbb03b1a93458c97da46c4189b6a5aef5b6b4020cbe6928c95cf84c05b565bb04ab27004f851c47a504b3a89d0d1ad5d18cfd23f","ssdeep":"768:MAuBipVRut5I5PJwMgwJee/jjFN3CjNgOsc2O9:MrBgE3yrJZ/qjNgTcr9","tlshash":"f8b2f2240a4c64574f5f8e3f9c30a42fea61d314026217a6b2da13053d99dafdf4e366","first_seen":"2024-12-20T05:38:41.493614Z","last_seen":"2026-08-04T12:03:38.970544Z","times_seen":1141,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f666231616639316661613863363364353766303631363265303365373665336236613362346131392f363837343734373033613266326636393265363936643637373537323265363336663664","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f666231616639316661613863363364353766303631363265303365373665336236613362346131392f363837343734373033613266326636393265363936643637373537323265363336663664 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 193534\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"2f3fe-6446febf8cdaf\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=95aY8eYogfZwVl2zpWf%2F%2B7kCISc4Xcn201jfcPj74S%2FAn5RNHz9aMJNZXr9mDQHTD2nXpViL0h6POfoMlT8hRtZByUJtIdQ5YujKwQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd4276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":193534,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x675, components 3","md5":"2ed8ce8b3be278a5c9f415eb66e2b372","sha1":"ef532660954c8386977c29724f4d431d3c912c9e","sha256":"a02d8d47ebabe24bd88076fdd6887d644fd77b2b0f031bdf766a92bd630aa0d5","sha512":"df5d8e766b8bf7f768898648ae074eb18ca394a0f6e73c145388e2c322b98bc2363d86cdcb293a9bc388b19c414d8278d51ff8b73a0ceb9c8a61062c8f4d6b4d","ssdeep":"3072:qCG/vFjiXXaDNHxooonHppYJ0ovek5RD8qq/ExpMoO96iL88BWdSs4pcF3QvUQxz:qCGnFjuk5xoo+pYCovrRD0KaPL88BWds","tlshash":"b81413552cd8dda1b8beb9c5052857446b74a74e74f4a68908813947b0ebef0c3aeb31","first_seen":"2026-02-20T13:42:04.942953Z","last_seen":"2026-07-14T19:54:10.340522Z","times_seen":6,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/earth-spirit-97dc368767a82295c254619a9526578399462ef4a2c536f4feb3e7632d6d9fd6.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/earth-spirit-97dc368767a82295c254619a9526578399462ef4a2c536f4feb3e7632d6d9fd6.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3327\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-cff\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eyc2e6rQ3rLYwdkjunsXR49xF0G3YS3Vog5PrrrBXNEll4hfO%2BattycQGbx%2BKQ%2BbO4Dybst6MLVNEOr005ymKSDYXySyrDC2gytorg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e1976ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3327,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"4b5cea96925260b16c80fb272bed7ea5","sha1":"0045e781303d75615d6c9fe9c1d66ee40481dae3","sha256":"63dbea4648252293670bf95cad4569a3ef72ebcd5a237338c809c919ec38a3b5","sha512":"8afaa0a9fd895e86551c81f4bf0d02eeeb812659409fde91063cfe5de0293b9df7cb7842519e19eb0f2712e961e5646e943ba4a8e78c7e2dd242b74bcb31fe07","ssdeep":"","tlshash":"6d614cb4da024322fd63c2394ebe67ff98692590713c1d1f351040a5da2046d5bebd5f","first_seen":"2026-02-20T13:42:04.918121Z","last_seen":"2026-07-14T19:54:10.364965Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/tidehunter-89034daeb395b0cb9799f5c7b79220310407c382823b012f3c23d0a98f7d7e0a.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/tidehunter-89034daeb395b0cb9799f5c7b79220310407c382823b012f3c23d0a98f7d7e0a.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2927\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-b6f\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3Ulpgnlf3GyYTjTij3zNU1YNLLXZKN0vNTNlbT%2FtpKgiYxAznXirWwle5voNs%2FDBcs9Wt3nuyCJSA2CZ2yFySTh%2FrX9Ypof0gVR4dQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e1d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2927,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"e5b143a9a2e0b09585b7aa540dea814f","sha1":"dd4319ef216ea26d3566d56be57b196c65eca171","sha256":"1cd564a937d63fc93eebbdee247520b4e789d9057f09383716c107cff6d00cfa","sha512":"bd6c7d59fbae3e9df146d1086b73342821b2c786101ef9984b6ea227739d9c087172c6c5a914c0a41e8cc1957dcf38c4af6fbcf0a22d2864247308e45fd582a9","ssdeep":"","tlshash":"af514b674b959048e923296f69bc6bea20459de62e90350534d0c3ecc38228de38ddac","first_seen":"2026-02-20T13:42:04.948177Z","last_seen":"2026-07-14T19:54:10.332815Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/Screenshot_1.png","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/Screenshot_1.png HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/png\r\ncontent-length: 1334\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-536\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bEl25XThum9eflR57lOUqRSoP7VuO2Q283a2gLuTkS2WU9%2BBQBE68So6%2FQLWeL%2B9drhnbG9%2Fc%2F0kg%2Fy%2FDtN9J9zEL7tlcwz0%2FCESfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e5176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1334,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 124 x 34, 8-bit/color RGBA, non-interlaced","md5":"53ecfd983beda6264bb6fbed7770f345","sha1":"b2f227ba48762905c739389b756f25ca7e18b9b3","sha256":"6c04bbe6885c06bd169bbc81f09c4ebe21ef11ae10fcae071ee65c594bb13eec","sha512":"e59220709a624d6612bf0da8e1b324e27d641415494fe0e6a5d7b7999e067a1c5f82a5f83b01ac77d0b336fb70a89556cd5753f8613d09dbae7eeff5b615d90e","ssdeep":"","tlshash":"e621fbcb8673d96f5813026b8fbee480df953847ba5cd06fce9e31451485e80611239d","first_seen":"2026-02-20T13:42:04.937515Z","last_seen":"2026-07-14T19:54:10.312856Z","times_seen":6,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f69696c692e696f2f335366694472582e6a7067","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f69696c692e696f2f335366694472582e6a7067 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 238140\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"3a23c-6446febf87f8f\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yCqImeXgTLR%2BUAuA4fKIsbSpskmFcKExuHUg9w%2BPNCkNeNDoBLuvGCy5hiKoc2LiVgMOa%2BWWt1FcsoJdgovm9Hej584oTK1q%2FZ2VPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd4076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238140,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1200x623, components 3","md5":"02d7386d33a0185dd98ff87083aac429","sha1":"a5d192eab6309bebb41d2c2da9b8c9fe9eaaa253","sha256":"5a4a2f494d43a7d91a8335a7d79e79e5234a27253866ee1c9d59b24132bc9da7","sha512":"6a92767a2b546707c74c6db0f40093f5a74a0d447a319773f38ef9a09b0b32459af8eea1a20b2715cfcf30c9d08b038afec75402d05c18d6ea0ff2eacd4900be","ssdeep":"3072:CBBXX0THsrhfkkpF5vSYZlo9Oy0ul4U3OoBAuQRFgPCCSOAGBrGlOU5o6c+Y:VMhk636lyfoqzRFYaGB0t1cR","tlshash":"a3341212319aabad63eba01e14acdcad8b43955d7154f93304dedaa86ccc720c1fa75c","first_seen":"2026-02-20T13:42:04.931145Z","last_seen":"2026-07-14T19:54:10.301593Z","times_seen":6,"resource_available":false,"data":null}},"time_used":532,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":366,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/assets/icomoon-71b0a87520fd4fa7317d49cadcc3b26348c3fa9c0fb18a7ed8e5ce303a4548a8.ttf?mqtm8s","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:21.187Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /assets/icomoon-71b0a87520fd4fa7317d49cadcc3b26348c3fa9c0fb18a7ed8e5ce303a4548a8.ttf?mqtm8s HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/index_files/application-324d8d8700ed0c33abec1ebeb744a93a764603b9061985cb003691bee1f8e596.css\r\nCookie: uv=mn02h3qj-eexi5rp6\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y89Ld2gA2iDos7Felx%2BYYumkEPRb0auRNfVqvK9Sq6dl0Pgm26ftN%2B8kMUwUH89QkQItoiNSk2g5Ir634A3vBPsoBT6p7rUnQh3ssg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dfb969f6cde76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"2bab86c044593964e6da167d8123ae16","sha1":"0f14e146c55d34381c623cba9de158ebaad1f8cb","sha256":"6fe129ef00142b2df5eee5e0de857696aebfb271e8461aada8d9af87a6dda637","sha512":"f4865b2a7cb4d283b0d167d80fcfe1e220e64d0d5058cea5f0019c79f7a4223fbe838b4625f4afe274cc789a5795d8120a57a0c5f19e7e80ceb64beafdf0b825","ssdeep":"","tlshash":"93d02b9e5043628b4812156039c219c2268c12f6b43a85e82d86d49752a867ece9ba8c","first_seen":"2026-03-21T08:29:49.156009Z","last_seen":"2026-03-21T08:30:20.373431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":102,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f396637353661353938366536653832376663316636386262313365326134613166646661653633622f363837343734373033613266326636393265363936643637373537323265363336663664","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f396637353661353938366536653832376663316636386262313365326134613166646661653633622f363837343734373033613266326636393265363936643637373537323265363336663664 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 195158\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"2fa56-6446febf850ae\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s1hhg0xOjdRGSM6bx0pgIiEaBIMWQct9boKlnvV7WBMUSxhK00eyv%2BoJZt8MdBhv8pl4tC%2Ffl8MxJnmIZaySSo01kPRp4O1SFQHu7w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd0776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":195158,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 956x440, components 3","md5":"5df363e659b8cf713d41a94bc79d1950","sha1":"552390c0f2c006147856851d4bc06a5e431c1e7d","sha256":"a3f0dab4e5100378ab507653bd2bfd80df25e68f1c8112d8d6c3edbf59db82b9","sha512":"ad902cc872dc8f5a3462d659ff09290354ce25379357da1ad026fdd498705f2367bc5150f456fa0cdd6ea46047f7d5de2bba7db06215d16531be1c6d6626a479","ssdeep":"3072:/b57WCWpZ1NUQkhLnqxQPmG4w2fSviZGuzGbLlerbCxtBFT/tthUTtRcqpXej65b:l7WCWpDNUQXxQOxwgyiAXb7t2dpOuNv","tlshash":"ac142374edcfe5c0cd4368bd7d6a3bc0b606372d93eb9844a061c694a7da99f6cc8424","first_seen":"2026-02-20T13:42:04.89292Z","last_seen":"2026-07-14T19:54:10.334699Z","times_seen":6,"resource_available":false,"data":null}},"time_used":533,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":106,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f653831313761666138646461303835323736633461633836313762386335383339616534663862642f363837343734373033613266326636393265363936643637373537323265363336663664","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f653831313761666138646461303835323736633461633836313762386335383339616534663862642f363837343734373033613266326636393265363936643637373537323265363336663664 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 208020\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"32c94-6446febf87f8f\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r6DWM2j%2FIHY1GlEDRbrl9jPK4AjtiHn%2FXzFQfZ8pgqL00cVKBMySM%2B2jXldpxyZywVgXSgOrSq9chO1zx43FXMCpUvcifyLHumA5gg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a0d8276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208020,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x675, components 3","md5":"cf63d12ea84930190b32dc0dd0d413ac","sha1":"8a9e6d3a6f42995ed2da3291d91e559743f97d04","sha256":"9d3f7db546744fa44054db4667fea96839a8ff59ee141d899762ae48ea346505","sha512":"c9520fbef621cb762524709abd6e63433a37dcea1f1ab8fa8f26d9dd25edc09a32b53d0246b801878f07d1a1df1d3dad294f7dadf7a055c1b0cd792594344c6c","ssdeep":"6144:xsJ2p+qiSDu23yFIw87XFIzq41hfXgz1QYUqOp4c:xsJ2oqTuaGAXaq4o2YURuc","tlshash":"6d1423abc684c65346988778dd6bee300b6ea2cccdcbf0c2e45d27d661e4843945a1b6","first_seen":"2026-02-20T13:42:04.934186Z","last_seen":"2026-07-14T19:54:10.336244Z","times_seen":6,"resource_available":false,"data":null}},"time_used":460,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/ancient-apparition-vert-00fccb7d7dd4b8bf05f3691a20e26d525d1ebf5b1541a5e769290a2bda02966a.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.353Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/ancient-apparition-vert-00fccb7d7dd4b8bf05f3691a20e26d525d1ebf5b1541a5e769290a2bda02966a.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6781\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-1a7d\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J9Ay85c6XD4GqwhH5Y5O0kxboi%2BtUeyHEP02L4hH5lF%2Fs6zMJtSIZ5aPDJXzYq4vu1zKhjqtqciCqZueoOZP4YOVGadyINv7%2BVJoNA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd1276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6781,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 142x188, components 3","md5":"ad0e9e8db16915a211343d0aa486d8ae","sha1":"33bf01efb58c5f603dd3884e19d88e45fb862359","sha256":"8735e01b1fc367731a39f851311f87ba82498fd6f290245cc4d6a1bd9c2e9ba6","sha512":"af308a94c23df51ca2bda5e6bb2de7e42b13f0cf664362dda82c801020e2e288797b9a0de248e7214cef3e73075c4d92535aa7ee2f80395446d16967869b5526","ssdeep":"192:+TpxlsRIwkp5fz9feU50IYwpp4Jyx74Iw5R:+Tp3Nfz9fYIYw37I5R","tlshash":"bce19e7d1f5266b2d4fcc564640b079a678d29916704b315ee7020f08ce2ed8d7ecd70","first_seen":"2026-02-20T13:42:04.920104Z","last_seen":"2026-07-14T19:54:10.372Z","times_seen":6,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/50336cb270d352f10312cbaa0fd27269b9a10187_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/50336cb270d352f10312cbaa0fd27269b9a10187_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9089\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-2381\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0XHRsTjwWeO40B786uqBeB7L%2B1bQABhmke5r%2Ba25EYUqgitI4CGTLGojvvjDCcm3mLSPGyw8DUH%2BFo0M8ISgLKaqcd5DA%2FoZgEEEDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e0076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9089,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"47b9a0acf2c08ae3498c18d36922cd00","sha1":"793c0dcd14fb3e7b8a6bfd165d698455f72db7bc","sha256":"b1b70c15a7657a7859b0504ae8d0e29604a40903cf4ea65ca0423091fc6233c8","sha512":"da27f30628a5d415f54074009e7b5d8a1cb5e2aa1c51be8ab94bf5a1d98182be645e889decd659d22c3a2d5a1a06c621e0769571610298a360a484bde5e5f06c","ssdeep":"192:IQcTKR/+WGmOeb16eiL3kbq63TZghNblESfdFSvS:IQcORzGmO42LI5dmbKSlwvS","tlshash":"5012bf229bd845e4f4e71730cd133c29cec06b1851cf4ea7a2cf3045a21afa149ed495","first_seen":"2026-02-20T13:42:04.916995Z","last_seen":"2026-07-14T19:54:10.296735Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/9d1f0f213e23c7ba4d7b03f229abdf6c979b2556_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/9d1f0f213e23c7ba4d7b03f229abdf6c979b2556_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12209\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-2fb1\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvml1hU8O5LBwCc9axU5uAKe95jf%2BTktnkfigsl9Y8bzYdrdbh5VtfpHtfvS3t9fUlYc0m5%2FA8Y7XbpKCRUl%2BRtv5jBPlk%2FCVPddwA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a0d9b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12209,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"73964331a9ae378e3a295bc5f3437430","sha1":"a7ba24162697c62b6cfd3ff080aa15d198ed16d8","sha256":"fadd97eba61f413dd6f6da19982e2a932ecc45fe4a41e71886b0ce3e06f9cabd","sha512":"da012ed21999694799c394f02e0eca160188950f9f1095b9fb2670137d16899f362007a1c734cca44ae23c85d5ffbc3f05b35c4ab4dddc7aa94032c7875e3b11","ssdeep":"192:Iuclp44c8C3ffKNiNa8O4Z16ZhrbFMWpAO9uZLxL6NXHJbPRJHAUG/LHBJnK32X:IuuPCXKNsO4Z16ZZbLOfm3JbUxL3K32X","tlshash":"d342bfda50b81ae6f306f16c150f96a48dc3963429eab63630cefc14a29a7f03691e11","first_seen":"2026-02-20T13:42:04.909975Z","last_seen":"2026-07-14T19:54:10.307279Z","times_seen":6,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-solid-900.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:21.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-solid-900.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dotebuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 158212\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\netag: \"0931d657c03a7e21f461178758aa2e19\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 454b04b563cd5c3b9a4496e3ea346390.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: Dq7K2E6fmZnrVyZNljAzXdsYn6fcK2iXOsBU1HYVUxqi1IrBJBLBDg==\r\nage: 29412387\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQ7a8zyyIrnhidvPysn42GwBLQEVAH%2BEPaMmUAjfrRKxZ6u3h%2BJORKkZbOyNZ79aPhO%2BpujwAv8Ex6S4LuUFqW0VDX3awcaLZStQKp13Udc8NR96\"}]}\r\ncf-ray: 9dfb969f3d688deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":158212,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 158212, version 775.1280","md5":"0931d657c03a7e21f461178758aa2e19","sha1":"0dc7d1527ac7015ec4db478ed1bde56b64fdcde0","sha256":"95e971e60878307902a92bc76c5d5e54bdd040e68834ac0b332f59526c68b1b3","sha512":"736674c3ec882e86ab16f6618a5b219cc34840a20e0e49e580b043863241a2fab4fc3197b7ea9cae40d09c5552fbf6c5b3a2d77b4e9d2a85741195f4e95ffdd3","ssdeep":"3072:yPQ3j6tlNJu8BwPA9UShIYNkCcpDhk6DJMj1Bce7XfRPnnW8tjet:R6tlK8BwcUKJcpDhk6DJMjrLRPnW8Fa","tlshash":"37f312cf72c1cfb70ca51aeba55879b76b382f8352816b8a501e3d649910d17268f3f1","first_seen":"2024-12-18T12:55:36.287523Z","last_seen":"2026-08-03T19:40:27.984657Z","times_seen":4500,"resource_available":false,"data":null}},"time_used":83,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":65,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ru.dotabuff.com/assets/favicon-d5ca7cfbf2ac980fd3c73099a6f0e904e1dcaafc0fd05834d45871745c6ca02c.png","fqdn":"ru.dotabuff.com","domain":"dotabuff.com","tld":"com"},"ip":{"addr":"104.20.25.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:21.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotabuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 16:13:01 GMT","end":"Sun, 07 Jun 2026 17:12:49 GMT"},"fingerprint":{"sha1":"50:B1:88:A0:7A:67:31:AB:1A:E4:29:1F:BD:27:1F:6A:C4:0D:27:97","sha256":"FA:98:65:57:EF:45:FD:5A:E2:B9:F1:18:59:2E:9D:DF:A6:E8:7A:DC:D0:4F:31:3A:E2:B1:D5:B2:E3:09:A8:7C"}}},"request":{"raw":"GET /assets/favicon-d5ca7cfbf2ac980fd3c73099a6f0e904e1dcaafc0fd05834d45871745c6ca02c.png HTTP/1.1\r\nHost: ru.dotabuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 810\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Sat, 21 Feb 2026 17:52:03 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvia: 1.1 Caddy\r\npriority: u=4;i=?0,cf-chb=(108;u=4;i=?0)\r\ncf-polished: ok, orig_size=1371\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:85,h2pri\r\nvary: accept, accept-encoding\r\nage: 6640\r\naccept-ranges: bytes\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: 9dfb96a1788c723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":810,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 96x96, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"b88485d8b73f6ca1ffb3731e644863f3","sha1":"714fd64cc6c999666fe65c995677d459a094f465","sha256":"b9fbd790d8f46269ac8b70c78e0343594c53c8216658202baa4a059623b5835d","sha512":"c42b8250529d2a8b94e596da48406aa17718365bb2f81d16afdea6daf642d8734b7b0d9ed099176ba804a84aefc2a70255fdbe784b09d83ee3baf8e37c3f630d","ssdeep":"","tlshash":"0901864067659838cc617a77985987db0023ab904521d3644df726061b78c2f397284d","first_seen":"2026-02-20T13:42:04.912588Z","last_seen":"2026-07-14T19:54:10.324525Z","times_seen":7,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f383534393137316538373462633266343337386137313535343138626334396264306561623132612f363837343734373033613266326636393265363936643637373537323265363336663664","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.350Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f383534393137316538373462633266343337386137313535343138626334396264306561623132612f363837343734373033613266326636393265363936643637373537323265363336663664 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 127886\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"1f38e-6446febf8be0f\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=B%2BHOOG1B18C8FoxFqGzuC1X4%2B76mWPECxaKfq5mAugqM6IVdcn31kAR47CXnOlsfxSP6LJKJbZ6ZwhlUFFR6FDrDcRLL7wxUMeIoqw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd0476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":127886,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x694, components 3","md5":"8d1c8d210c34eb759af1f5455ddec7a0","sha1":"d57b4a81bcfd199b512e8ce0f7cfeb71e2e5f09d","sha256":"0e94f8808f2a55956b311b0e49291a1ce1144c9549e228b499002ec5b8d87a6a","sha512":"309290b248481be18c4c53d771f8dc43337bfb82a1086b6f4d06b3e830922e66c9f708fd45acfedc9824c09b801d31f87c268e36fb7c2054ad109d62c70858b3","ssdeep":"3072:xHkoK4Uc2wzUB/kHaEW+d/zPw1Vdr/Z/TJj/kz7PTg:Fkocu6kHaI/AVdr//j/P","tlshash":"03c3124549ca857ca258d97d90ffba91f0344894fd70a9bebc20490501cacfa3e3ae5b","first_seen":"2026-02-20T13:42:04.943801Z","last_seen":"2026-07-14T19:54:10.300341Z","times_seen":6,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/warlock-0e1ffa4fc7554be443331ecdec82c7eaad66dc3043fbe86e4f06698fd6526b4d.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/warlock-0e1ffa4fc7554be443331ecdec82c7eaad66dc3043fbe86e4f06698fd6526b4d.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2919\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-b67\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ex7FdWkha1nURePNZGbFTmAvPE3rGJAwNqKaqLy30nOScVyNrUGqDpL9aDmFqyniYqmf%2BHaD6zcwgyHxgIsirmkDzgAkBKntD2LsIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1dbe76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2919,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"c36c800b3adc7575c78b26bbb669e901","sha1":"a77091ce86e4f865938af1ac83218fbcf04ba27a","sha256":"8323b0e1879e8b8d1d813e5b27bbf5de567b5352c4b6d222f8a373daae7a59e5","sha512":"d70f663847822c8cd0e93775e3bf453a6033f0fa2cf2f99196ab956edf38e542935184a860ff04f93d6197e086a5565ff3b86093884365d6f8a353728414598e","ssdeep":"","tlshash":"b8514dfddf0a4760ec31902581eb73fb61ca45e174c4361566f2c4fccd106c64b50a60","first_seen":"2026-02-20T13:42:04.91119Z","last_seen":"2026-07-14T19:54:10.288679Z","times_seen":6,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v5-font-face.min.css?token=0ad7180e74","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.935Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v5-font-face.min.css?token=0ad7180e74 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dotebuff.com/\r\nOrigin: https://dotebuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O6g6bb6eyuq4wBrT4noz1jPI4zC93vktYJZiAbn41CV4TVRha4o8L2suOZs9oKTMjio6ehrKGb%2FW7DQ%2BLpKeYqXkNawkOve5v4KjgSeifR8H4fqu\"}]}\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 454b04b563cd5c3b9a4496e3ea346390.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: mizzb0lnGBF8Hn0FClq9aKIJyJ1Dq1wTw7ANADqe1PKPWylh4xYU-A==\r\nage: 8040610\r\ncf-cache-status: MISS\r\netag: W/\"ce9c230eaa656cebb4bcb218cc034374\"\r\ncontent-encoding: br\r\ncf-ray: 9dfb969e2f958deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":823,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (608)","md5":"ce9c230eaa656cebb4bcb218cc034374","sha1":"e7c962a7b5113bd9273f8eb56b1fd75d9a152d2d","sha256":"da44f714aafade532fab93527bdcec46596d87cfef74a613d529e34686b6a064","sha512":"38a99c70f756999b2a49b4d2f27aa2de516bcbf19596d63db88cabfa6251b3bb7f75621d4829ee18098ca63f9fc03a5bd1ab3ed757f0a30e011e841aac1ace6d","ssdeep":"","tlshash":"14012b5d4569006141510f1138dbbb0abd0ab16778a95ea3911b8d2c4cfa90773f5f09","first_seen":"2024-12-18T12:55:36.292311Z","last_seen":"2026-08-03T19:40:27.944708Z","times_seen":7029,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":47,"dns":22,"connect":3,"send":0,"wait":56,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ru.dotabuff.com/assets/favicon-retina-377ae687bcef452311a9c4303e2efcb1a3e9dceeb924084856e960256862b843.png","fqdn":"ru.dotabuff.com","domain":"dotabuff.com","tld":"com"},"ip":{"addr":"104.20.25.166","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:21.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotabuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 16:13:01 GMT","end":"Sun, 07 Jun 2026 17:12:49 GMT"},"fingerprint":{"sha1":"50:B1:88:A0:7A:67:31:AB:1A:E4:29:1F:BD:27:1F:6A:C4:0D:27:97","sha256":"FA:98:65:57:EF:45:FD:5A:E2:B9:F1:18:59:2E:9D:DF:A6:E8:7A:DC:D0:4F:31:3A:E2:B1:D5:B2:E3:09:A8:7C"}}},"request":{"raw":"GET /assets/favicon-retina-377ae687bcef452311a9c4303e2efcb1a3e9dceeb924084856e960256862b843.png HTTP/1.1\r\nHost: ru.dotabuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: image/webp\r\ncontent-length: 900\r\nalt-svc: h3=\":443\"; ma=86400\r\nlast-modified: Sat, 21 Feb 2026 17:52:03 GMT\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nvia: 1.1 Caddy\r\nspeculation-rules: \"/cdn-cgi/speculation\"\r\ncf-bgj: imgq:85,h2pri\r\npriority: u=4;i=?0,cf-chb=(37;u=4;i 825;u=5;i=?0)\r\ncf-polished: ok, orig_size=2625\r\nvary: accept, accept-encoding\r\naccept-ranges: bytes\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9dfb96a13ec8723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":900,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 114x114, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"9d7a9f09a1f9762181b893e245fbb030","sha1":"f6821575a569882d28ecfdcf5ab673f60153c9f3","sha256":"066989f58c8a7aada88418a3c06101c908a96e50514ba19439894e1497dc89c4","sha512":"f4bdb1ec9ae95a721271044f32bba3cf764a3f06d06eabb7ac6a3dea62c247ae1029141e72087b2d85f03b25f72cb7c1c1ecdbed7ee621664d22b98769d6f511","ssdeep":"","tlshash":"f0112bfc12a2873dde8c1e99c93220039b743e0216c18a000bc2583cadcbfe259a9301","first_seen":"2026-02-20T13:42:04.945656Z","last_seen":"2026-07-14T19:54:10.343972Z","times_seen":6,"resource_available":false,"data":null}},"time_used":281,"timings":{"blocked":-1,"dns":22,"connect":1,"send":0,"wait":237,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/60d5cfbd4f9391b69900ecb4a3370d9352b73a2f_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/60d5cfbd4f9391b69900ecb4a3370d9352b73a2f_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 9665\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-25c1\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=H8XYAOOnw7huhNv3o5xVhbcKfQ355fkuXfSsIKZhI1v0zfJUi35aAC7iSQwoPhmTHMYv%2Bn2V%2FiS0kjyHVm48L2X9rhKGxnFtmAFyXA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1dc376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9665,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"21ef3ab66e896cf5aab267ff259cecda","sha1":"4ed684b99404542d733474fe729dd3fcd4665d39","sha256":"d0b5c1fee5e67b6d0ce4fd78ea74f34befbee78923375e17d4587ab7edb3ad9a","sha512":"e9534afbd9fe73853a2c499d75dcb8c0f0da25230ec7f5f05ae382dafcfc5fbf273280a74c05ac324a09c3397aaa44de43b2f229d82f3814d7f9e659ed9b2c91","ssdeep":"192:khA0S+jijapOrusS6UhXfPuJ0r6SPyEyTKP7NOIBPFzdy1xzQvOV:ePS+OjapOU5vPi0m9ENT814OV","tlshash":"6612ae26bb83d7d1b7138c1e1ecc6d139afe9ba450e95f9a03c21e0d5b02f466817276","first_seen":"2026-02-20T13:42:04.914533Z","last_seen":"2026-07-14T19:54:10.329942Z","times_seen":6,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/3b070de887eefb31420929a6ccbc8768591c4252_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/3b070de887eefb31420929a6ccbc8768591c4252_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 12589\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-312d\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KrE41PoARl2ndRWO1saHprWOFGmFH%2BQfeneIzUdkRTFEaZCw47THVIvAKzN5NqLyeznwDHgzLILStY1sfyPRFFmCRXuxqA6VKqAbJw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e0476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12589,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 80\", baseline, precision 8, 184x184, components 3","md5":"a42d35d8298cc2729f144a70f5e8ae54","sha1":"bb78c5822706ae04b9102d531c6fe713cf4b9ddb","sha256":"2a9dc48139995be4850d8c19800f66cc23e87ec129c08001f77e4b1f2043eebb","sha512":"561bed8e2ee369afaa94be1a4a485036fefde76b6fbba484ddc60aae6de92cf0320722f9144957b85b0fba025d052512d0dcd5941b6ca5ffef123e61139e61c5","ssdeep":"384:I6OZIfDsDh56HiE+FA1d5qunMwIlCG5j3Wj:I6OZIw3M0m/4unMOYGj","tlshash":"6c42d0cb3125c7a45eb8c4fac9f18f99695c3ad6eb248b0d2a53de021f09534154ab8d","first_seen":"2026-02-20T13:42:04.939603Z","last_seen":"2026-07-14T19:54:10.294152Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/f77b3ebd6f8cf5638c0ebeebf296664c66db92c8_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/f77b3ebd6f8cf5638c0ebeebf296664c66db92c8_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 13641\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-3549\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r3UUW6s%2FoXFiSM4CDloUNPI5VjV0DAEqeXAMIc9MW%2FRHyCcjqVea62cmBmIujkV7fP4FThHXXtiruIgT2eUzUxd6FyZd3eo2AWXydw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e1176ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13641,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"e7d4a96cf7c2526017f622ddcc0d7a7b","sha1":"0f2e7bd47781848346c4bf1554ca05da25859e71","sha256":"d28b8267a50bbfdcc22f3b4964c703a794fff413b00896027cb7f686a84f69f7","sha512":"56a3d7cf3cecb41c7c0b8e258712883f5161fb1acb50e61dbd3a0b3c734ff05e77e6a081cd079ce0401f5298edd0afb1342fbe35888952192987fe242ccb7e59","ssdeep":"192:nXPt5Aewd1sTGVJTB7uEvWG5daPVn+4V3YYmQaJhpnlUl3GLcASKJDtZJ7fUpj:n/Od1saVVZFWPVB+6aXVlM5ASKJrlf2j","tlshash":"8552be978056d8d4fc18ac4322d7aea44accbb7852d34af13ec04699b8149ff369c558","first_seen":"2026-02-20T13:42:04.923935Z","last_seen":"2026-07-14T19:54:10.316384Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/vengeful-spirit-370c30a2378acbbe4af5d5bb64b2454d9e277c159fe9ed07b98ee29158a04c99.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/vengeful-spirit-370c30a2378acbbe4af5d5bb64b2454d9e277c159fe9ed07b98ee29158a04c99.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3506\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-db2\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fpE5WoM8zJ28BZ0SglASXkYFmB%2FL3c5jL0GjwcoVlY8K52yCfMeFOjZnI0A33yg%2F8RadPwQiUG5xgPp55s%2F55KE6WWdB1FE%2Bllf4dA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e4376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3506,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"c88028d89f8c15c94a65e2b3a1871b3f","sha1":"732acdd4ffa644cc3ab661bb210feabb09915713","sha256":"6eaf38ee46ddec98fc8eebed6f6254dca4ca334ea2c83b237e23e8027d980c27","sha512":"3abe6d6d85e8804743c4eb0cfa550af1bba501d67ad5b6fa18ff2a9e11299f9bb81710341c7c00f85e3ec87e7655f64c4eeef16face3e556aeae7164eccb0550","ssdeep":"","tlshash":"88715dae774391818c2e413fabe5a7fdf0b96fe2e20016272d21c192c4759800b44aec","first_seen":"2026-02-20T13:42:04.927075Z","last_seen":"2026-07-14T19:54:10.374453Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f69696c692e696f2f4657497742486c2e6a7067","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.349Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f69696c692e696f2f4657497742486c2e6a7067 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 282936\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"45138-6446febf8be0f\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cG3KqAUr2itYmHnl2tn1wsHKb8w9hI6XhBPhbJbO6ezWzwqsgvhoWfH%2FqMTM%2B1nEch3V%2FugFhtifsLpGeoBn6dOMABErm5zAMJkvkA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fcf076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":282936,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 1200x585, components 3","md5":"49eb9622433cfb9b128bc1e01117b422","sha1":"97dbc8e2ed237cdc35a611f2194798f1140e1927","sha256":"2f0c254e3a580acd8bf7d1b04c8380efe56a468fd752b1195004d875c4cab432","sha512":"1c486cae27be4eda911996031de649840ac2a78871ed51bc071bc872775209b88cb340ba8d8939be2bb6a60b0c3f15072809bf414f066c3da8211982b56d25c9","ssdeep":"6144:cpCHwQzdZgLu1o9wLcz3TJC3E4Rh4pGHL422dGZiah/Dcs25JmXGkZX:cywoIXKLcz3dC3bRypGHr22rlD1","tlshash":"5054233d5e2f6c73124516a9e35fdf338d102e7850be294ace804a817ef94da8715be8","first_seen":"2026-02-20T13:42:04.919124Z","last_seen":"2026-07-14T19:54:10.327034Z","times_seen":6,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/assets/flags-7f94eaf43df4667e9ca97165f32b16549e65ddc0efb9ed634e77b2e68ccea05d.png","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.955Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /assets/flags-7f94eaf43df4667e9ca97165f32b16549e65ddc0efb9ed634e77b2e68ccea05d.png HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/index_files/application-324d8d8700ed0c33abec1ebeb744a93a764603b9061985cb003691bee1f8e596.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pfC5M9BRfeadZwGhdIVF3MI5RJA2cXNfuDIp6UcuQfwrhH0VMICs0E6cltQircQEnid6P5%2BAloAJ%2Ff%2BbCb36xlHImTqcK1S32iseoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dfb969e0cc776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"2bab86c044593964e6da167d8123ae16","sha1":"0f14e146c55d34381c623cba9de158ebaad1f8cb","sha256":"6fe129ef00142b2df5eee5e0de857696aebfb271e8461aada8d9af87a6dda637","sha512":"f4865b2a7cb4d283b0d167d80fcfe1e220e64d0d5058cea5f0019c79f7a4223fbe838b4625f4afe274cc789a5795d8120a57a0c5f19e7e80ceb64beafdf0b825","ssdeep":"","tlshash":"93d02b9e5043628b4812156039c219c2268c12f6b43a85e82d86d49752a867ece9ba8c","first_seen":"2026-03-21T08:29:49.156009Z","last_seen":"2026-03-21T08:30:20.373431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/techies-vert-eceed04b06a50b8507cd6def21ed7c8593c3688b40b863452959978eb7fcf0c7.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.352Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/techies-vert-eceed04b06a50b8507cd6def21ed7c8593c3688b40b863452959978eb7fcf0c7.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6152\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-1808\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2oATtDPH7KRuXfeTfobM1MitufKEJ4ayAGNCS4saoLB6zW2MTQNiAdmEFkruGMhSAm6RdFOe1M8Cf1CE%2BY4N0SNsRi8m1R1oaVf3Uw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd0e76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6152,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 142x188, components 3","md5":"a773ffb4d6c168774064c6790aa25794","sha1":"c9de3f4e1e6473d319112e45eb8d8b44f242baf4","sha256":"cc97f874193cd48f3ee988043603796ce2d8be009b07614792766fe03ae1be49","sha512":"2290c96d0ea3bca50a4a0ddd35ee7b0b4b4107489cc4fb1a3d79b5b6472a1d17b46dc30d6d818568d6a69394bbdfb5491a703856bb18fced9b894f909a1b10a0","ssdeep":"192:+XDv6eRYnt2NrVFwz2idRJHcZ+FKnSmjEN:+XdRy1z2MqPS8u","tlshash":"25c18f7e12516be05d49beff1932cfa4940715c0a1471533986a0f41ef6024717aebac","first_seen":"2026-02-20T13:42:04.930099Z","last_seen":"2026-07-14T19:54:10.295509Z","times_seen":6,"resource_available":false,"data":null}},"time_used":193,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/sand-king-vert-a0c25afc5fb265f365ada6d23ca50e552f35029471293e3f1ce11d78accd0310.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.358Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/sand-king-vert-a0c25afc5fb265f365ada6d23ca50e552f35029471293e3f1ce11d78accd0310.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 6415\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-190f\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2B5r2yoNiDZ3x8NGCNqvwpL%2BgIGnOkb6oMfWLha7jZ5Xt4wVlrr3hgbxVYOXR%2B3jmHPkou%2F3m6RFGsBugF8PH4%2BpPk0fo79DrKN12DQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd2a76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6415,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 142x188, components 3","md5":"d6380e7cd968dafd736bd335b32f3820","sha1":"7f7e98313c2f2d5806249e6a3f9a378cfa55737d","sha256":"1a556ee4e759ee8409541bb27dd23a9656025b5ce7ed5f086649cd7574d20f72","sha512":"77322f34d618384fd8a00585747cc918258362f13795ff259293aa1783c7d4249a92007623e2e1afd6170bcaa2a9e30e97c84547dd065e056888982c0042241e","ssdeep":"192:+Krh9u8Ui+NRH2p/FVxW+ZZlpAnNpGvsVIy:+b8UfAx9qNseD","tlshash":"42d19e73b600c3245803daee5776abab57cfc7522c917552882c0b6a815173b3bd1dee","first_seen":"2026-02-20T13:42:04.925432Z","last_seen":"2026-07-14T19:54:10.368012Z","times_seen":6,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f313864616132616366633764303336656633336465656262343431666162356134613330363363642f363837343734373033613266326636393265363936643637373537323265363336663664","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f313864616132616366633764303336656633336465656262343431666162356134613330363363642f363837343734373033613266326636393265363936643637373537323265363336663664 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 161997\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"278cd-6446febf86fef\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1x%2BqUHFxze%2BgZ5aJbDOOOmtCk3iswVtCSe7ZMHZML7XHtC1UcH4ngnWK%2BXoJFuCcPeUfbSpVDAhE%2Fnl5e5xPTFX9AhvzRrP%2FO8r3Hw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd5b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":161997,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1000x563, components 3","md5":"f4e4dd69cf9a25fb26947a7fe104debc","sha1":"1a6c0a810ac934f63142c9a823977580ee5f8473","sha256":"2c93f35a0740a13f6d2c34b34c9de0b0fef3120242b6ead671dc37d95ae358a7","sha512":"4520165dc9835780b64670676b94fd6ede3ceaf5ca789deab11f640804dbc234cfc505c8ddfc7d7a18c8e7acab9bf3ee6873c7039631b73adb150332f1531410","ssdeep":"3072:ZPTb2wwjPxiMluWw3VDbmRgW022aN71dEjpMoyouBwbV/aNjuM:9TU7un3V3z1aN72pzOBwbV/aNjuM","tlshash":"def322b01e03baa080f555077915e6f4d88c2c9a596e263d4ba721d1f15cf2a39fbf23","first_seen":"2026-02-20T13:42:04.92301Z","last_seen":"2026-07-14T19:54:10.321043Z","times_seen":6,"resource_available":false,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":432,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/marci-9a0a2c4d90dc63116a5ba23439d97194915d3abd083cccc226a9b3c21fcdaa81.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/marci-9a0a2c4d90dc63116a5ba23439d97194915d3abd083cccc226a9b3c21fcdaa81.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3310\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-cee\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qn4cwiQuj8xaoewoMd91T6A0A9zEXoJb8kPaMrc0SUVu8ZFRX62DsUp0LpiJgo2mIpdWgvk1tLysPA3N346wCt2u3Krgw%2FhsGh3qyA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1dca76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3310,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"bee50b250dec13b7a3e20896daa149cf","sha1":"104f50a4017ae07be541bada62936cce08bc9938","sha256":"f92dfdb054e8051911401fe6aa7e5b3ad100fdc5c3d0add0133b12072ba89af6","sha512":"3fc77d6ada56df62ff4510edea29e850011959e0dbc40230c91d24a3daea6288b8de0ac6f32de18cb743af67b36be804fefcd3da133c17f58aaec8c7f66ce280","ssdeep":"","tlshash":"a0615c8cef42c731ac22a23a10a503c6337afb06f600ed891e350f9a5a3854d870e16e","first_seen":"2026-02-20T13:42:04.932034Z","last_seen":"2026-07-14T19:54:10.363025Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/silencer-74704a29d74d958839430702402802b1506e1bdaa8669674b1d0df63fedfdbd4.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/silencer-74704a29d74d958839430702402802b1506e1bdaa8669674b1d0df63fedfdbd4.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3150\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-c4e\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I5y8qrdjZ72VfuZy4Nv38wCrDHnRDKdMRvkSaM4K%2BebrH2N4sVd2u4FDCrfgbA0%2BvF373G0htKXBHK7DNAYDabvcPt2qlRcVRYEhow%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e3876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3150,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"b1703f5815a97a2bcec78cef444263f5","sha1":"f56e6e932e2d6a4bff52aa3ff5fb2902b7a7ce6e","sha256":"0ca324d14a2c265f5c10b9dcd829b369ab1376178c6f1aff1c6763cf7b2f9eb8","sha512":"91e02bbdabf8f2f64f793510fa56930cf32f8229d34fb767fb2f5344335e9e03965db07b70782a2b497ebb23f2c983d1b2ede85f4af9b4ea0f3ebd59c3feeb4d","ssdeep":"","tlshash":"cc515d57bb434be0cd4ff4fa6f362b91805e366a3c041a06d15656e2c0841f99fcd5c8","first_seen":"2026-02-20T13:42:04.889798Z","last_seen":"2026-07-14T19:54:10.318715Z","times_seen":6,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/axe-b974399c8ee8079a6c83b2b6a8ca033a63defc0229b07b547f4befd775ca53f3.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/axe-b974399c8ee8079a6c83b2b6a8ca033a63defc0229b07b547f4befd775ca53f3.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2830\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-b0e\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KfEVI1d68huok7IPxU9LAoSNhyxRqF29h4d9TudSU1Ufz59gUlyQar8tka8IQQtjJYyM4Jm0kGE9kC3CI1frgD%2FU6IJDstLbBfhVJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e3c76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2830,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"a2fe297a5cba48408d43372010e63527","sha1":"1ac760ac950c1839aa353f79490fc8e7133faca8","sha256":"c5b76777ada66c6566d00aa0dc9fd31fd663261d0887d515481a102b7773837a","sha512":"1cc84f23ec6ec9840daf62d4ada6956ee1e15d1b9136f5edf594a29ea95c61e2d1ea5d90b0a4cbb97759431dab437c7899ec2caecdd7d030c741b6b2267a9363","ssdeep":"","tlshash":"21514c3cb54581126c136136119f2797df79c943ad54ae612878cb30c22152d67aefbc","first_seen":"2026-02-20T13:42:04.891438Z","last_seen":"2026-07-14T19:54:10.291557Z","times_seen":6,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free.min.css?token=0ad7180e74","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.917Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/css/free.min.css?token=0ad7180e74 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dotebuff.com/\r\nOrigin: https://dotebuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"14f5eecc946f901d192b02550e4dad67\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 3fef473b9069c3a6b17fb47d4e1f2460.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: rjJ9cwT-VpJ8yxtyAHp32rMGpevUTAYDyhhSbB_M2mv8yR4jtEYehg==\r\nage: 8040702\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iHug%2FfrZd6kxagfA7f%2F1PWGWJBDM51goldZ7Pyz%2F5iLyh%2BeMQltU0QEvL0ftIwYK8z9v4fW3nwEI6GnMbja3XSIAWn3ECuWZpJdW02qpmzVaTaST\"}]}\r\ncf-ray: 9dfb969e2f7c8deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":73986,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65321)","md5":"14f5eecc946f901d192b02550e4dad67","sha1":"45d6a10e09484d078cad37282708d611e19a06e6","sha256":"8f13446769cd1916cbbbdc2be7eb5be4b331bc7ef9ed8b799ecb4674e48095bf","sha512":"82e20fec5704c5784624775facba87c0c85893707e6905e44390ca6671b3a3e212a0bbf7161bf5c779aaefc22a71be24c38043d3077aedfd2e53483cde032072","ssdeep":"1536:/rM1MvMaMfMRQdm0grfT/QypZhzZHpSjA691Q:ilgrLXzZJg191Q","tlshash":"3f731f16ad84019bb4568d7f3885bf34a6f2eb28aad14495e4344d847ef28fd314fb32","first_seen":"2024-12-18T04:50:29.606533Z","last_seen":"2026-08-03T19:40:28.003267Z","times_seen":7326,"resource_available":false,"data":null}},"time_used":187,"timings":{"blocked":62,"dns":31,"connect":1,"send":0,"wait":54,"receive":0,"ssl":36},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/assets/icomoon-a54f3f5a779c6fa7a27968cf8f9d60af7ec21d88562adcc2248aca0bed2cb05c.woff?mqtm8s","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /assets/icomoon-a54f3f5a779c6fa7a27968cf8f9d60af7ec21d88562adcc2248aca0bed2cb05c.woff?mqtm8s HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/index_files/application-324d8d8700ed0c33abec1ebeb744a93a764603b9061985cb003691bee1f8e596.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WV6lUrl2BuprP0zgdbc3L6AoxXXMMKY8rj3drROb%2BZaQkCnKMtst6j5hcvJzYWs3jb5SKb3C71oXQywwNFRvE14V89wjwqGP3pAS2w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969e2d7076ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"2bab86c044593964e6da167d8123ae16","sha1":"0f14e146c55d34381c623cba9de158ebaad1f8cb","sha256":"6fe129ef00142b2df5eee5e0de857696aebfb271e8461aada8d9af87a6dda637","sha512":"f4865b2a7cb4d283b0d167d80fcfe1e220e64d0d5058cea5f0019c79f7a4223fbe838b4625f4afe274cc789a5795d8120a57a0c5f19e7e80ceb64beafdf0b825","ssdeep":"","tlshash":"93d02b9e5043628b4812156039c219c2268c12f6b43a85e82d86d49752a867ece9ba8c","first_seen":"2026-03-21T08:29:49.156009Z","last_seen":"2026-03-21T08:30:20.373431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/lone-druid-5dbeb0c42897705538f0f18a53e3294698927ee6f5e9f2d0f753cee11b229450.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/lone-druid-5dbeb0c42897705538f0f18a53e3294698927ee6f5e9f2d0f753cee11b229450.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3512\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-db8\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s%2BMe%2FJ8k56bNMHbGd8w9VFz78aS2Qzxp2xw2wDCeHkO5GoHqfYEcTBoDnYgYKcxygbrwmd2wKPTnr3lDYytgo5Rx2HXCRJDAQJcjWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e1576ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3512,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"94ce3efcbceae76f7aeb1c8309352f79","sha1":"f0795b5de548b8eb9549e7770096802c77e2c0d1","sha256":"b2acc8c74d0c430dafeee55905675014b402a302e1499643f87aac26dd15cccb","sha512":"59bdf4b9f1a7d0564c30b4d11e6fbd8ee4d6b346b4bd18c653196c18e253ba43821b573dc1c9e817e0a7416d0b774be9b27969da0c9e6a33dc43b00b862c18d3","ssdeep":"","tlshash":"24715c3dfd68885549375676b75613a3718e0688ac29e60730328abc9821cff3f85775","first_seen":"2026-02-20T13:42:04.940631Z","last_seen":"2026-07-14T19:54:10.331576Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/keeper-of-the-light-39d3c0cb9747c75272f1eeef5815b13e9a751b9b7ef35e05d7684b68863742e1.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/keeper-of-the-light-39d3c0cb9747c75272f1eeef5815b13e9a751b9b7ef35e05d7684b68863742e1.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2908\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-b5c\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YaD%2Ffmt3BE899Bj93u6ZfbpTtHAT%2Fgagg194oRmuAOjR0I7HZJ6aZqozGbWlysSQ0YPpaMC5T0UmckifBolabna8SFMUb6Ad7XGDJQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e2276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2908,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"bff5808af06b187add8fd3bd0c4cd540","sha1":"e31b10168336b1c34dcce7173fb97fcae3318ccf","sha256":"c29f06967b5720da6b999dd8c448da354e5ffff0ffc0128f91a0733827c45215","sha512":"04d3f491b1bfa45485d4e8c113bebc52db6a73bd5c9b0959e20d27e7259b0f14b7ecd5780a8f11d9d7f9c9a110e0ff6498e86ff1f0b3fe7a0f7ad6a2fe63e641","ssdeep":"","tlshash":"de513a3a6f5a1309a91fd0978a1153d7b7ead7e0301518bc1cb9f376c060cc66b9ab4e","first_seen":"2026-02-20T13:42:04.948979Z","last_seen":"2026-07-14T19:54:10.366692Z","times_seen":6,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f323135356465613364306232646436326461313566616539383363333436326262656332356436322f363837343734373033613266326636393265363936643637373537323265363336663664","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f323135356465613364306232646436326461313566616539383363333436326262656332356436322f363837343734373033613266326636393265363936643637373537323265363336663664 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 49826\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"c2a2-6446febf8410e\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vZ4CV4hgb1FU%2BykiyKp5RAMlQ7hHeRVJuxOixBE1yp8ccLZaKB9fRPk8Z0aIndsuuA7BymmXPTqgHGfJWs4l3rKEoiQ3JQxuFPWlhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd2f76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49826,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x438, components 3","md5":"5be8bba79866c2ebe0fca217c8d38ca4","sha1":"d44592b69895819f2006b3d62f360a756380f452","sha256":"d9ce737ce0ea52e4b6f98ff62740865cc6db82140671225a2e994fad283ab63b","sha512":"3e456e91770e5d8cad16aeb376127eb28734b72d2c7f55630e5ce9bc20b60bc1f410c4a0a1711af1b3a359e2137dc35fd25009bb6b0c05908fe7038a58f1df09","ssdeep":"768:SIQCxDa+uuo2nIBpkgSGgk/I6Z6c3NFQpNjhwKEhQTNbj4LuEXPPPyJpE8hAnTbA:44DivuhG1Q6McILjhJN4LuEXH6Jp/","tlshash":"da23f10cb92d878cddfdccba84acc590b3062d94299e02bd6a5c529eb75ccf3689c509","first_seen":"2026-02-20T13:42:04.887348Z","last_seen":"2026-07-14T19:54:10.369381Z","times_seen":6,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":310,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/leshrac-e4996d7fe1e0e0a8be27ac7542c567c35e4c06326ed14f6563fb8bf8560090b4.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/leshrac-e4996d7fe1e0e0a8be27ac7542c567c35e4c06326ed14f6563fb8bf8560090b4.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2933\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-b75\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lIdO6iYWHzAX65BZjd2sQ95WsiQzOkvzivyQQEPvYrtmvcUe2mgId7PWNMpzFzwf34f%2BLFvLUFBTvi%2BEsgusZevLCU3qOLu6M%2FBWoA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a0d8b76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2933,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"661e832be974fffac3e3336c8746dc48","sha1":"9df6fb4c2fd8f58cf225b37879cd5782c78ba383","sha256":"555c01eb648c9a1e96f35a7b00484b6d6415fd9e007888ef5e877f2d500de623","sha512":"1363d719dd17cbdcbf903f1d3020b226c0ffb746d0ed573b61b410cd622eb0aa8ee88e5e37a6aeef90dfbb75e14c94bb035b49a7a6f02516d4c1d37d00750f63","ssdeep":"","tlshash":"c5513a2f37420ba14d27647e6a066bb7c6752097b1a0230730b559ef84249d807fdfec","first_seen":"2026-02-20T13:42:04.908758Z","last_seen":"2026-07-14T19:54:10.286761Z","times_seen":6,"resource_available":false,"data":null}},"time_used":185,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":185,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/lycan-1689b06190281feeb1305325e1951bc26321c991d85f93b99f8b6b442ba89531.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/lycan-1689b06190281feeb1305325e1951bc26321c991d85f93b99f8b6b442ba89531.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2822\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-b06\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FDzZE04f6AxGwTGDH4gMbgj6NK3mfpqPe%2B0crhU1HcvXINUqXHtUYMyNhXoc1mTpwrK5eAtUEQc1pw8c9oJ2GwfWoY2InUaIMVo1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e2476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2822,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"e273818789d0452bce7ac30b9c6607d6","sha1":"8452e11a97e486eeef1197412697b1599c1edeed","sha256":"5e4e82332aced8886b2774d6564944b316a0e1203b94ddf901490994093b5174","sha512":"b2e70e571635ecc148c6bf3db361f5ae37fa2e84078da07d01a72eea71a0cea28dc602ff04602634cb9a97f6d32606c2de3de044c724d226c5c9165f9df94d33","ssdeep":"","tlshash":"39514cec137027e0fc33fb36a9124762216fb9d1fd612192aaf4c8750520184175c39c","first_seen":"2026-02-20T13:42:04.941418Z","last_seen":"2026-07-14T19:54:10.309581Z","times_seen":6,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/lifestealer-844a7ec86f281fa02898feb8449dedd45e9e8b6250954c2348a43bbfb043a7f6.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/lifestealer-844a7ec86f281fa02898feb8449dedd45e9e8b6250954c2348a43bbfb043a7f6.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3356\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-d1c\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3bfnkESSSq4qu9TdCWIS3%2FigfbG2ODIoVRjzVhzFBWRi3eEgL8YzY0tinLSPzfqg46IEC%2FWliwhQFTJXKmgEIZp%2FVlHY%2FyywY0dy5g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e4276ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"afd602b78d320017fa86a0391e8e231a","sha1":"b9e900d844e0da192482ba332149bfcdc29123ac","sha256":"bb03a6ce52de8e0a195920d35b38332baf730d70ce102b780752517ba01c37ca","sha512":"c2bba38ec065e39aa1bbb1fa428b30c0356f5d8047c9e9a5742f211ee0fcb9e636b78904fd35715b413bbd33ad355df679ac06ef359492e3015387350a1b32d3","ssdeep":"","tlshash":"83614b9c77101818aa53f6fd50d2932bc02960973f6aab0abeb1ccd56231b05476a56f","first_seen":"2026-02-20T13:42:04.898627Z","last_seen":"2026-07-14T19:54:10.29272Z","times_seen":6,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/css/free-v4-font-face.min.css?token=0ad7180e74","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.938Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/css/free-v4-font-face.min.css?token=0ad7180e74 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://dotebuff.com/\r\nOrigin: https://dotebuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/css\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:06:36 GMT\r\netag: W/\"3e20aa01a74cb21290faa04e29684ce4\"\r\nx-amz-server-side-encryption: AES256\r\ncache-control: max-age=31556926\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d5ffe4a44770755efd4aa2fc68579118.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: 3jy79zXb0IIX2EsA-3T-HLdy4czMW8YUw_lslKMXjPzCZmPs87Lcxw==\r\nage: 23961783\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=enzHReR71aXrETUwNtdJ0xhMnO%2FucTaNqRxRsk95qd3plbAr5FWZHNk6v1XAjik6NaCQxKEAwH1C9NmybHAnpagXP73dVnkxEHQkxiFHkmycZMqH\"}]}\r\ncf-ray: 9dfb969e2fb18deb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1775,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1560)","md5":"3e20aa01a74cb21290faa04e29684ce4","sha1":"9279c7200c52d95369427e5a9dd013a327e4c8b3","sha256":"e855bc2e1c23e76ebb884cb182a037c64af2cacc49eac782dd43fa0454ee1f27","sha512":"22dbdda00c128ae18ee4f2c09d6d2316bfacc58fea0749207905cdcad0fe1c3725754200d9182916d3e08e2a333c15de9d8f143fcdc482ead539fef21ccbb147","ssdeep":"","tlshash":"2231f02846d401b0b0313f193ac77125eeae74669bb95e63d62b88140dfec55f3d5f48","first_seen":"2025-04-07T02:17:37.738288Z","last_seen":"2026-08-03T19:40:27.981914Z","times_seen":6845,"resource_available":false,"data":null}},"time_used":186,"timings":{"blocked":48,"dns":26,"connect":3,"send":0,"wait":65,"receive":0,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/assets/fontawesome-webfont-fa79d127baca4558a0b973f5f514b90fc5ef43314c41095f5cb285ffaa0a4029.woff2","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /assets/fontawesome-webfont-fa79d127baca4558a0b973f5f514b90fc5ef43314c41095f5cb285ffaa0a4029.woff2 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/index_files/application-324d8d8700ed0c33abec1ebeb744a93a764603b9061985cb003691bee1f8e596.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hboRUL7dIstYUCbnAwXjOYTLIHIvbBTKbdvuJGBy5jkRBx4E1licK2ajf9aufvyvL6lsFrjPj0E5IVjiuMdoyKo%2B4n7%2FCBTO5Ko0cQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969e0ce376ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"2bab86c044593964e6da167d8123ae16","sha1":"0f14e146c55d34381c623cba9de158ebaad1f8cb","sha256":"6fe129ef00142b2df5eee5e0de857696aebfb271e8461aada8d9af87a6dda637","sha512":"f4865b2a7cb4d283b0d167d80fcfe1e220e64d0d5058cea5f0019c79f7a4223fbe838b4625f4afe274cc789a5795d8120a57a0c5f19e7e80ceb64beafdf0b825","ssdeep":"","tlshash":"93d02b9e5043628b4812156039c219c2268c12f6b43a85e82d86d49752a867ece9ba8c","first_seen":"2026-03-21T08:29:49.156009Z","last_seen":"2026-03-21T08:30:20.373431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/natures-prophet-9d5262cc9b0d337d60de03592c6305f0a894dae794efb44ec62aad05a927c6e9.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/natures-prophet-9d5262cc9b0d337d60de03592c6305f0a894dae794efb44ec62aad05a927c6e9.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 3049\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-be9\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JEALvRVv9nfT3ApGHTVijsL0HC8iMc37xcEIG1Mjt2cfleb3229XxT3rSp8DUrjDK7U%2BweKc00uECIHgZWHAu2kjWwVUFcRBIf3suQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e3476ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3049,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"1f285a21adfd40cccd47c12559041ec9","sha1":"b4d6f7a8e700f77fb3883a28562abc4f67daaf3c","sha256":"617aea3cde48ef9bd945e7740097b75ecb49938117d1bef36fc4ffbfbf83c4ec","sha512":"c56e86fc079020b54835bd94102d8045b8dd5fe24383031b23e49c5ffa0c88fe2f8e6d70b1b41c29720d191b2cdf023aba0d89bff68e0f4f29a37d3f8de51efb","ssdeep":"","tlshash":"4f514c52fbd88030ec4351ee91b303b18a7e55475d1532856670c2c66aa41c5b3e4d2d","first_seen":"2026-02-20T13:42:04.942126Z","last_seen":"2026-07-14T19:54:10.31177Z","times_seen":6,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/invoker-05bd5a65c506f70d476f8024e94d2af8138152228bfef9652cbf8de6c874dee6.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/invoker-05bd5a65c506f70d476f8024e94d2af8138152228bfef9652cbf8de6c874dee6.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2513\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-9d1\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2zei4R4F0gC7UFzX%2Fy7wzTZreu4J0dr85gHq3OksMknkMK97ZCXBgj8JHaz79cdHzTRgzkaqLxAT0eGfZ9puurL1DJz1G6eyFkwSuQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e4876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2513,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x72, components 3","md5":"f389753fb046dc9b99a0788b23032aa5","sha1":"b1d79556cd087f33e3651588074d00b32988553b","sha256":"f2afde0a99fdb98f34784377ceac1576a0ec58bd2ad1ca89accce677d328e975","sha512":"1fc5f36a69a0fd8fd96a775658cf08f1657cbb5a1caec0f80f0a6538f147d4085ac743550da637764bf4b647b73a7079acb153e9dc3c002173fc87a28dd7c108","ssdeep":"","tlshash":"59513b979305d690ed369a3bd29e0371c3cecd935e941f161ca1c0d06b90944a3e87ed","first_seen":"2026-02-20T13:42:04.882745Z","last_seen":"2026-07-14T19:54:10.297987Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f346130636335616366393930623664373061396663306435656230633236333035373864663331302f363837343734373033613266326636393265363936643637373537323265363336663664","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/68747470733a2f2f72696b692e646f7461627566662e636f6d2f632f346130636335616366393930623664373061396663306435656230633236333035373864663331302f363837343734373033613266326636393265363936643637373537323265363336663664 HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-length: 172769\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\netag: \"2a2e1-6446febf8dd4f\"\r\naccept-ranges: bytes\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9RTyIoKbaTNy1RNfwTuE3NFsvbx546PaJNFDkMDnjRfMjARTm4ym%2BQrvW1%2FKsuM3agHBWvpvwYg9%2FONNjxyzKmEIb2%2FGug7kEUnzJg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb9699fd3776ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":172769,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, baseline, precision 8, 1200x677, components 3","md5":"2f524aecad45b9828c683bb461a1492b","sha1":"f4eeec5734fe5490003f1c80c3458e7b6efc1886","sha256":"dd800b73f507a77e68fe1d6846845eb1f2155b920afff6e80ab4d302a7b4ba23","sha512":"4e270cda9f42b3c2dbe80ce42f1b425f9b103ab0e1771cea62267a31d632df47f220ea3bf6011eb9e05b1d217810799712a3671115ded417e0a9c72bb7a8eb7d","ssdeep":"3072:ftyrl+KL77CDholZCxai2CpCexR4Y6z7WWvO73uJQlx:faz4holZCQfCD87WFruM","tlshash":"e7f3133dc72a7af47df2f43160decc40954a3683d263447c4e82a2efb8257e06e46956","first_seen":"2026-02-20T13:42:04.89447Z","last_seen":"2026-07-14T19:54:10.283048Z","times_seen":6,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"numclock.info/dfyqonkrpoxlekqdbpmcotlvcnjacgfjrqojinvjwtvhtn","fqdn":"numclock.info","domain":"numclock.info","tld":"info"},"ip":{"addr":"104.21.34.86","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:21.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"numclock.info","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 11 Mar 2026 02:32:28 GMT","end":"Tue, 09 Jun 2026 03:30:08 GMT"},"fingerprint":{"sha1":"B7:89:1E:C9:F6:05:7B:83:60:FD:AD:EF:82:BA:73:FF:EF:10:E3:D8","sha256":"72:EC:05:6F:8D:27:B6:95:3E:9D:75:D5:0B:7E:44:F2:95:C3:BF:BA:13:6E:DB:A6:BC:CE:67:5E:6F:36:62:6A"}}},"request":{"raw":"POST /dfyqonkrpoxlekqdbpmcotlvcnjacgfjrqojinvjwtvhtn HTTP/1.1\r\nHost: numclock.info\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded\r\nContent-Length: 150\r\nOrigin: https://dotebuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":150,"data":"d=dotebuff.com\u0026u=f-mn02h3qj-eexi5rp6\u0026ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0)%20Gecko%2F20100101%20Firefox%2F134.0"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: application/json; charset=utf-8\r\nx-powered-by: Express\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Origin, X-Requested-With, Content-Type, Accept\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"39-CLCal7QOwk3/srJG0+6YulqJ1lQ\"\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=g0rCG5BGTP%2FxGGUUpK0A7Vq2XaR9K0gBiDMOQHli5mj1n%2FfwBDrIymx5tfX9BEubq2nGD9H4GdW2Cv4GW4Q%2FyJ7UwElmsJrzlm055Ek%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9dfb969f1fdc1a30-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Express","description":"Express is a web application framework for Node.js, released as free and open-source software under the MIT License. It is designed for building web applications and APIs.","website":"https://expressjs.com","common_platform_enumeration":"cpe:2.3:a:expressjs:express:*:*:*:*:*:*:*:*","icon":"Express.svg","categories":["Web frameworks","Web servers"]},{"name":"Node.js","description":"Node.js is an open-source, cross-platform, JavaScript runtime environment that executes JavaScript code outside a web browser.","website":"https://nodejs.org","common_platform_enumeration":"cpe:2.3:a:nodejs:node.js:*:*:*:*:*:*:*:*","icon":"Node.js.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":57,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"e5e900488ca253e8a887823474b6ba36","sha1":"08b09a97b40ec24dffb2b246d3ee98ba5a89d654","sha256":"27e2a91895f8708a1b5ce2b9b2f5d7bcae064898772509c86aec29b0baa0e935","sha512":"d3f02703499c8a25c52e1791244901037e5eebcf0838b5bb0479c34eaf536fbe8f9b7e3ecac193ab14db7ef685acb9fe22c2588427a34192e941a5fe09adc4be","ssdeep":"","tlshash":"6290025645a052f8c553080c564d3f200d3c01366bc5d147f00c194841f042b4055533","first_seen":"2026-03-21T08:29:49.202987Z","last_seen":"2026-03-21T08:30:20.414745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":18,"dns":1,"connect":1,"send":0,"wait":205,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ka-f.fontawesome.com/releases/v6.7.2/webfonts/free-fa-brands-400.woff2","fqdn":"ka-f.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.21.26.223","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:21.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ka-f.fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 13 Feb 2026 00:37:45 GMT","end":"Thu, 14 May 2026 01:37:41 GMT"},"fingerprint":{"sha1":"04:59:0D:80:7A:49:BB:1E:B1:8D:3E:19:59:3F:30:52:81:A8:E8:64","sha256":"C3:87:91:E9:A0:66:F9:A2:38:71:52:C8:EE:5B:C5:BD:54:B5:5D:64:77:06:DF:1E:6D:DA:DF:25:B8:D4:F8:C2"}}},"request":{"raw":"GET /releases/v6.7.2/webfonts/free-fa-brands-400.woff2 HTTP/1.1\r\nHost: ka-f.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://dotebuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 118696\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 16 Dec 2024 16:08:29 GMT\r\nx-amz-server-side-encryption: AES256\r\naccept-ranges: bytes\r\nserver: cloudflare\r\naccess-control-allow-headers: fa-kit-token\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncache-control: max-age=31556926\r\netag: \"e45da7adeca3d43feb19fa7736201689\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 bf9e29084831d9a2b72227f617c2b80c.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: ARN53-P2\r\nx-amz-cf-id: zLzuYl91ZLytCAEURihyMxEvSpBUjWAdq02fym7kF8eVFVLi_Bx8zg==\r\nage: 8162424\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKU3sjNMg7PHJEfmnjR3LE8cidnSSD1qRDQbcEkJpnn8rVZZTO51%2FlWGTtrVGrOFBLs59yZ3WLor2vKq64PqE9GHVhf9X8AU0T11Xx4d4U72xQy5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9dfb969f686f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":118696,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 118696, version 775.1280","md5":"e45da7adeca3d43feb19fa7736201689","sha1":"7e10560e5ba072b6744cb06066cec4d37c631f16","sha256":"cc90a2b68dabba4496647c4e8644ad0ca0444c3fffa5355100482731b2959618","sha512":"f841c42a049680cd0ed489c670f66703dbfb3a6cfed258fec5768cddf35c70b2c1099151d2bde5b57219acc7c40e0dedd313590c360f9e458223f3d102bd788d","ssdeep":"3072:/s0sEGeI2tuiZwN9hCj/54V0qFWugENotGeUv+l/hG:5sehz54RFz1Noge/l5G","tlshash":"e5c3128ae8ccdb19b026463bf18d92854f2751e9744106b4a353fd221dbba43c2e7eb5","first_seen":"2024-12-19T14:38:39.090068Z","last_seen":"2026-08-04T12:03:38.964622Z","times_seen":2950,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/assets/fontawesome-webfont-2794b002e3568f5abce8991e2431ca79e0ce84a08ea1268884b4e097b62762a6.ttf","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:21.432Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /assets/fontawesome-webfont-2794b002e3568f5abce8991e2431ca79e0ce84a08ea1268884b4e097b62762a6.ttf HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/index_files/application-324d8d8700ed0c33abec1ebeb744a93a764603b9061985cb003691bee1f8e596.css\r\nCookie: uv=mn02h3qj-eexi5rp6\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Sat, 21 Mar 2026 08:29:21 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nserver: cloudflare\r\npriority: u=4,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lNCzh6paDIjaQ60g6UNSDLi6OhcVkPyWoHoUJx%2BpGjT6CzG9p0ejMhovycRqwVkzoTx%2F82OeTYGjXMVJdzfADH3s4jVyUQjHwLUfTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9dfb96a0fd9876ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"2bab86c044593964e6da167d8123ae16","sha1":"0f14e146c55d34381c623cba9de158ebaad1f8cb","sha256":"6fe129ef00142b2df5eee5e0de857696aebfb271e8461aada8d9af87a6dda637","sha512":"f4865b2a7cb4d283b0d167d80fcfe1e220e64d0d5058cea5f0019c79f7a4223fbe838b4625f4afe274cc789a5795d8120a57a0c5f19e7e80ceb64beafdf0b825","ssdeep":"","tlshash":"93d02b9e5043628b4812156039c219c2268c12f6b43a85e82d86d49752a867ece9ba8c","first_seen":"2026-03-21T08:29:49.156009Z","last_seen":"2026-03-21T08:30:20.373431Z","times_seen":2,"resource_available":false,"data":null}},"time_used":77,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":77,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kit.fontawesome.com/0ad7180e74.js","fqdn":"kit.fontawesome.com","domain":"fontawesome.com","tld":"com"},"ip":{"addr":"104.18.40.68","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.346Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fontawesome.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 16 Feb 2026 21:43:48 GMT","end":"Sun, 17 May 2026 22:43:44 GMT"},"fingerprint":{"sha1":"68:2C:9A:93:3E:79:C4:A9:4F:7C:67:91:C5:DD:D4:80:FF:AA:F6:D3","sha256":"23:30:F3:82:6A:12:7D:FC:FD:2B:DC:77:90:BA:22:FA:FE:28:51:07:4A:5F:54:D2:37:CA:F0:99:12:97:71:6F"}}},"request":{"raw":"GET /0ad7180e74.js HTTP/1.1\r\nHost: kit.fontawesome.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://dotebuff.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: text/javascript\r\ncontent-encoding: gzip\r\naccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token\r\naccess-control-allow-methods: GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3000\r\ncache-control: max-age=60, public, stale-while-revalidate=30\r\nvary: origin, accept-encoding, access-control-request-headers, access-control-request-method\r\nx-request-id: GJmtU4VE-zrkltVEZrEi\r\ncf-cache-status: REVALIDATED\r\nserver: cloudflare\r\ncf-ray: 9dfb969a2bd6a0f0-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15298,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14835)","md5":"e0656f8a045edeaeaead5f07d080a05d","sha1":"4da0712fe57e657ce4781b1acaa4411f184d8e0f","sha256":"1066ad8e925c90a8fc44f5c2faeccad6b8ac38f79632e570ad024dcef1aed53d","sha512":"8dfd9225f3096ffb5aafd01adb4714ed0d3a5097e2e34301b84678d97b8e51002dcc22ae925d25fa9e4a40a9fa804c38ce0c08b6878e789bca17394b70895e2f","ssdeep":"192:MkGliHAg8N/Cps9EyRDEbCpgeMfhhvlLoN6IQEZcJZuKwPXUxb/pfvh3CzYXyl8t:MkKDC7CKhhtqVUMFqnh3CzYXyl8YGce","tlshash":"e062e81c7a81b43a86af7192843f670fb679353b34129461e25cdae49c7ce9da123f1c","first_seen":"2026-03-21T08:29:49.204575Z","last_seen":"2026-03-21T08:30:20.420615Z","times_seen":2,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":12,"connect":1,"send":0,"wait":484,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dotebuff.com/index_files/ad70dd3161a714b3fe252184ce2031e399ca8167_full.jpg","fqdn":"dotebuff.com","domain":"dotebuff.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dotebuff.com/","date":"2026-03-21T08:29:20.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dotebuff.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 21:19:35 GMT","end":"Thu, 23 Apr 2026 22:17:15 GMT"},"fingerprint":{"sha1":"5D:AC:FF:E1:9C:1D:34:36:32:5A:6F:36:B8:2D:C7:1D:C6:6D:4F:48","sha256":"6C:83:41:58:3C:2C:F4:AA:2B:37:33:BC:9A:EE:7C:B1:15:82:94:FB:14:1D:DC:E5:31:03:5C:62:B0:F2:46:11"}}},"request":{"raw":"GET /index_files/ad70dd3161a714b3fe252184ce2031e399ca8167_full.jpg HTTP/1.1\r\nHost: dotebuff.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dotebuff.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 21 Mar 2026 08:29:20 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 10024\r\nserver: cloudflare\r\nlast-modified: Tue, 25 Nov 2025 19:02:31 GMT\r\npriority: u=4,i=?0\r\netag: \"6925fd47-2728\"\r\nexpires: Sun, 22 Mar 2026 08:29:20 GMT\r\ncache-control: max-age=86400\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GGZkOGnPfYmTs6%2F0DrryGUCwtS8brNSJEyxhgoFp9f89TXjjZvKAeroJee5l9QQiZfkTuHixvgcc%2F60U%2FwST9i%2BA8F7bbrsg7cZwjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9dfb969a1e0d76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10024,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 184x184, components 3","md5":"cc6012867d3abf1d380d8894b18d591c","sha1":"938f4f9907fe7432a9698f330ce5c62e3537fdf0","sha256":"0f558b0edf5693de3577dc6a7e79a6e12d6aab162a4b1ee3a297488192c5f2b1","sha512":"674a67ddc77b726aab09146d94f639873b4ae26d0343bd33436c1f43abe9bf7495251b8178f8dbf77edf059a402885cc9026350ede7c185794ee750552e1075a","ssdeep":"192:lv6P5+FTwxAbC/kuHCOismnnjwL+o0aK6WcYW3/bOgGE:t6P5+VK4uHBismk+o0r6Wcj/6RE","tlshash":"0e22bf264212dcf0f63274f885420d5c8eebeb73d50241db77f4a499336cb86c609a9e","first_seen":"2026-02-20T13:42:04.936724Z","last_seen":"2026-07-14T19:54:10.315172Z","times_seen":6,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-21","alert":"Sinkholed","trigger":"dotebuff.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}