{"report_id":"8d32398b-2c97-4d78-862a-89d32078c1ab","version":6,"status":"done","tags":[],"date":"2026-04-19T23:39:31Z","url":{"schema":"http","addr":"ta21.vip/","fqdn":"ta21.vip","domain":"ta21.vip","tld":"vip"},"ip":{"addr":"104.21.45.96","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ta21.vip/","fqdn":"ta21.vip","domain":"ta21.vip","tld":"vip"},"title":"Welcome","dom":{"size":5782,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (4787)","md5":"0e8bcefa9851e2ab6d00a1f10efbf72d","sha1":"e536400ddb2803cb33f8f9f86b03b8aad865194c","sha256":"a94d603f4b8479d04d58cb578a6667d422d1e772742188c455abb1f71412f761","sha512":"876b27b7f241e2716e91a7f8f2898918380d91c6907cf87be0ebff83e59205cd65039bf594d5d91cb2398f995529d1eb60eb506ee9128f88a2efe58353bfccfa","ssdeep":"96:n3bFMCAG6AGb79N9tT8Kn/lcmEhjCQroVEjG3VfxD3oqoWrizuK4MMrFOL:3bFtGbxtTb/6muCw4EOVpD3oei68MrFm","tlshash":"e9c1f96384c3c153900780c6fb15fb1e58e109cadb47db5dfe6d1a262f814bea6936b4","dom_hash":"domhash1ddba835ff8ba7c63f6870e4b16539cb","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ta21.vip/","fqdn":"ta21.vip","domain":"ta21.vip","tld":"vip"},"ip":{"addr":"104.21.45.96","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-24T23:39:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"chancejs.com","ip":{"addr":"104.21.37.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2013-06-20","domain_rank":3777618,"first_seen":"2014-05-02T22:37:23Z","last_seen":"2026-04-06T21:45:46.063761Z","alert_count":0,"request_count":1,"received_data":120565,"sent_data":407,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-04-13T00:20:36.548247Z","alert_count":0,"request_count":1,"received_data":108536,"sent_data":417,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.gravatar.com","ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"2004-07-15","domain_rank":32157,"first_seen":"2012-05-21T12:14:24Z","last_seen":"2026-04-17T22:26:55.363223Z","alert_count":0,"request_count":8,"received_data":26720,"sent_data":3664,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"ta21.vip","ip":{"addr":"104.21.45.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-05-02","domain_rank":0,"first_seen":"2026-01-19T17:13:04.208573Z","last_seen":"2026-01-19T17:13:04.208573Z","alert_count":8,"request_count":2,"received_data":3844,"sent_data":900,"comment":"","tags":null,"fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"chancejs.com/chance.min.js","fqdn":"chancejs.com","domain":"chancejs.com","tld":"com"},"ip":{"addr":"104.21.37.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0dcd6206e94110bc39ffd3884110cd8f","sha1":"e23c1cf874006e1614e6b168c81ae6ee7ce2215c","sha256":"bf0d1943c72f827e7a6b9e7a2863ae80f44a22e11c8115dd328f055015be46cd","sha512":"a1301ad2e3cf47efe12edfaf7c48e0fd8cf11da63fadb73538a0e36c1d1b02dd70fa43f6c90be0fe0f9cbbcfdcd1068c6c3a48f0408c0a5e185c2c4b24f2229d","ssdeep":"1536:wqwytzwqmh5cE1yF8BhRmFPUpgqo7BEsQLuY4y4IrM2Pv/FaADz9bkdl:N7TwRmOp/CYVR4","tlshash":"71c38484e12a6cee867be1ad6e875749903d3d9ee41e5428bbc07fa5051d58023b3f3c","size":119471,"data":"","first_seen":"2023-03-09T22:04:30Z","last_seen":"2026-04-19T23:39:38.102613Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/vue@2.7.16/dist/vue.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","size":107679,"data":"","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-04-19T23:39:38.104333Z","times_seen":1833,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ta21.vip/","fqdn":"ta21.vip","domain":"ta21.vip","tld":"vip"},"ip":{"addr":"104.21.45.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"054636d5efd3c30385f3d6eee63af47f","sha1":"8973e8d00d54c382f8ef34cab693ef53eae40317","sha256":"357b365745718971f1448d7a03871956c39608c2eecfc05541982cf9f888cd1d","sha512":"3665375075b6ac406f643e7a97e5dd45837aff056835aef262a62412b9d79326e22a40d682e0fe5491703ad83c23d05f770f7582c75476d75c8140fe13bac332","ssdeep":"","tlshash":"f5f061e97be50590204376ae5c09f405626d505f250a6d2efe0d23c84f1847871e0fc3","size":512,"data":"","first_seen":"2026-03-18T19:52:14.221016Z","last_seen":"2026-04-19T23:39:38.107345Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ta21.vip/","fqdn":"ta21.vip","domain":"ta21.vip","tld":"vip"},"ip":{"addr":"104.21.45.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e624ea4554a95c1d7fc2af524a83c70","sha1":"69dc206bdf2f1a2fb2c0f403b83d30aeb873bd3e","sha256":"684ec19d229e16dd9795242a7be4397a767ef28f61d1100e9e94a3dcc4a5f089","sha512":"5727c5c705525579d1ea677eaf8124d4167fd25c99d2865d5ba2d2045a1594415580432d7a36914e58cafe34e63ee7a116f8ab460ce817f17f32c0e5a07c4164","ssdeep":"","tlshash":"f0e0d8824cefb532de4670080014bfd3201d97bbd4745aa8b95d9c66b37d27017af4ae","size":382,"data":"","first_seen":"2025-06-29T10:34:12.724148Z","last_seen":"2026-04-19T23:39:38.108157Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"chancejs.com/chance.min.js","fqdn":"chancejs.com","domain":"chancejs.com","tld":"com"},"ip":{"addr":"104.21.37.18","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:08.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"chancejs.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 30 Mar 2026 20:51:55 GMT","end":"Sun, 28 Jun 2026 21:50:27 GMT"},"fingerprint":{"sha1":"2B:9B:68:F3:06:7A:A8:85:26:3D:41:82:C1:E7:31:8B:E4:11:BC:D4","sha256":"13:AE:04:A4:DB:0B:5F:B9:8F:EA:12:BF:DB:BA:E6:F2:17:D4:18:D1:C3:F4:DC:CE:37:1F:B5:38:FD:EF:12:61"}}},"request":{"raw":"GET /chance.min.js HTTP/1.1\r\nHost: chancejs.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 37497\r\nserver: cloudflare\r\nlast-modified: Sat, 31 Aug 2019 15:21:48 GMT\r\naccess-control-allow-origin: *\r\netag: W/\"5d6a908c-1d2af\"\r\nexpires: Sun, 19 Apr 2026 22:53:32 GMT\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\nx-proxy-cache: MISS\r\nx-github-request-id: A502:F128A:AB636:C36E4:69CE4F42\r\naccept-ranges: bytes\r\nage: 0\r\nvia: 1.1 varnish\r\nx-served-by: cache-bma-essb1270026-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1775138764.776068,VS0,VE109\r\nvary: Accept-Encoding\r\nx-fastly-request-id: b4c868c025c59921428ca44d8b5581a032eb8537\r\ncf-cache-status: REVALIDATED\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ticdFAWUcUKrmPxXCf3KaL7eEUPrWXWak86DQHJbaiunpqAZjo6yCLHEd30y8YKZttwFVLFnv8%2BNDIIkP8yRSHBo97ioVwRRuW6mNMp4zHEPzK35%2F0GyiS6x40lXpxM%3D\"}]}\r\ncf-ray: 9eefbf345986b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Fastly","description":"Fastly is a cloud computing services provider. Fastly's cloud platform provides a content delivery network, Internet security services, load balancing, and video \u0026 streaming services.","website":"https://www.fastly.com","common_platform_enumeration":"","icon":"Fastly.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"GitHub Pages","description":"GitHub Pages is a static site hosting service.","website":"https://pages.github.com/","common_platform_enumeration":"","icon":"GitHub.svg","categories":["PaaS"]}],"data":{"size":119471,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32030)","md5":"0dcd6206e94110bc39ffd3884110cd8f","sha1":"e23c1cf874006e1614e6b168c81ae6ee7ce2215c","sha256":"bf0d1943c72f827e7a6b9e7a2863ae80f44a22e11c8115dd328f055015be46cd","sha512":"a1301ad2e3cf47efe12edfaf7c48e0fd8cf11da63fadb73538a0e36c1d1b02dd70fa43f6c90be0fe0f9cbbcfdcd1068c6c3a48f0408c0a5e185c2c4b24f2229d","ssdeep":"1536:wqwytzwqmh5cE1yF8BhRmFPUpgqo7BEsQLuY4y4IrM2Pv/FaADz9bkdl:N7TwRmOp/CYVR4","tlshash":"71c38484e12a6cee867be1ad6e875749903d3d9ee41e5428bbc07fa5051d58023b3f3c","first_seen":"2023-03-09T22:04:30Z","last_seen":"2026-04-19T23:39:38.102613Z","times_seen":22,"resource_available":true,"data":null}},"time_used":209,"timings":{"blocked":29,"dns":14,"connect":1,"send":0,"wait":145,"receive":2,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/vue@2.7.16/dist/vue.min.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:08.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 18 Apr 2026 08:29:42 GMT","end":"Fri, 17 Jul 2026 09:29:11 GMT"},"fingerprint":{"sha1":"73:7C:21:3B:DE:06:04:4C:C3:6A:C4:8F:C1:02:C7:AF:34:01:FD:2A","sha256":"C7:4E:10:D0:BF:99:27:6C:4A:84:1D:26:8E:21:37:1E:3C:0C:91:9F:D4:A8:B4:D2:4E:A5:84:5E:73:04:5A:B4"}}},"request":{"raw":"GET /vue@2.7.16/dist/vue.min.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Apr 2026 23:39:08 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: 9eefbf344965b1b8-OSL\r\ncf-cache-status: HIT\r\nfly-request-id: 01KEV47YH7V5V27QC85DSM5D73-arn\r\naccess-control-allow-origin: *\r\nage: 2108635\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 19 Apr 2027 23:39:08 GMT\r\nlast-modified: Tue, 13 Jan 2026 07:31:19 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:PB1LDFSejenUqbr7EqtwtqGsdH0HKTuYxbJbZjKZmv0=:\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107679,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65362)","md5":"8da91780fa9815752579efedb7b6ee03","sha1":"4525cbd167c96324016eaa2584703e2024e85c90","sha256":"3c1d4b0c549e8de9d4a9bafb12ab70b6a1ac747d07293b98c5b25b6632999afd","sha512":"5b1f278866cf3420fcee64ae174b01472b705b6fb6645afb1f054317c92b09bdde82cb42738a107e283efdc7e0d8e1ddf3629c525398c6548302a747a8ae530b","ssdeep":"1536:/xUpXlU1At+HWTcPKoVMurh6AiRuA7O8vGwYjT9cisc/tz0bl1:eXCIgrHL8vGwYN5tz0bL","tlshash":"53b3e8dcb296b47113eb20b1417f150bf33a6915a80ac590f223e4d67db8c8e916be7d","first_seen":"2023-12-27T12:14:10Z","last_seen":"2026-04-19T23:39:38.104333Z","times_seen":1833,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":13,"dns":0,"connect":3,"send":0,"wait":19,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gravatar.com/avatar/c9da9747147c55b9dc63c90660c20854","fqdn":"www.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:09.129Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /avatar/c9da9747147c55b9dc63c90660c20854 HTTP/1.1\r\nHost: www.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2757\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/c9da9747147c55b9dc63c90660c20854\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"c9da9747147c55b9dc63c90660c20854.jpg\"\r\naccept-ranges: bytes\r\nexpires: Sun, 19 Apr 2026 23:44:09 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=151.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 80x80, components 3","md5":"17eaec59ee1e556787efdddb3ca70e85","sha1":"39cebc4727e83b50df6dc01c90b776912d049d54","sha256":"ffc9f5f7602922e65f4f11a7ab84c939e0b4fc38cf2ec15999c541a28c5f4057","sha512":"72e51f7ed615af2bb29392957bebf202e183eb7d0513593a852fecf1c1ff2a1c78fa2608b739271ff95bea04695f1981e69c6105098073e4b543e34c3558b950","ssdeep":"","tlshash":"765129a9134f13e2f92ccbf9910d9c03b2e9eb41648845744be459a2d95fb80a79da08","first_seen":"2025-03-09T03:07:20.29855Z","last_seen":"2026-04-19T23:39:38.105386Z","times_seen":387,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":58,"dns":4,"connect":9,"send":0,"wait":158,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gravatar.com/avatar/f2195f0d1596122884351affcb180ff2","fqdn":"www.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:09.130Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /avatar/f2195f0d1596122884351affcb180ff2 HTTP/1.1\r\nHost: www.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2757\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/f2195f0d1596122884351affcb180ff2\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"f2195f0d1596122884351affcb180ff2.jpg\"\r\naccept-ranges: bytes\r\nexpires: Sun, 19 Apr 2026 23:44:09 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=442.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 80x80, components 3","md5":"17eaec59ee1e556787efdddb3ca70e85","sha1":"39cebc4727e83b50df6dc01c90b776912d049d54","sha256":"ffc9f5f7602922e65f4f11a7ab84c939e0b4fc38cf2ec15999c541a28c5f4057","sha512":"72e51f7ed615af2bb29392957bebf202e183eb7d0513593a852fecf1c1ff2a1c78fa2608b739271ff95bea04695f1981e69c6105098073e4b543e34c3558b950","ssdeep":"","tlshash":"765129a9134f13e2f92ccbf9910d9c03b2e9eb41648845744be459a2d95fb80a79da08","first_seen":"2025-03-09T03:07:20.29855Z","last_seen":"2026-04-19T23:39:38.105386Z","times_seen":387,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":57,"dns":2,"connect":9,"send":0,"wait":449,"receive":1,"ssl":40},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gravatar.com/avatar/8941b0a867862f2957de9b05e9b3908d","fqdn":"www.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:09.132Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /avatar/8941b0a867862f2957de9b05e9b3908d HTTP/1.1\r\nHost: www.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2757\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/8941b0a867862f2957de9b05e9b3908d\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"8941b0a867862f2957de9b05e9b3908d.jpg\"\r\naccept-ranges: bytes\r\nexpires: Sun, 19 Apr 2026 23:44:09 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=149.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 80x80, components 3","md5":"17eaec59ee1e556787efdddb3ca70e85","sha1":"39cebc4727e83b50df6dc01c90b776912d049d54","sha256":"ffc9f5f7602922e65f4f11a7ab84c939e0b4fc38cf2ec15999c541a28c5f4057","sha512":"72e51f7ed615af2bb29392957bebf202e183eb7d0513593a852fecf1c1ff2a1c78fa2608b739271ff95bea04695f1981e69c6105098073e4b543e34c3558b950","ssdeep":"","tlshash":"765129a9134f13e2f92ccbf9910d9c03b2e9eb41648845744be459a2d95fb80a79da08","first_seen":"2025-03-09T03:07:20.29855Z","last_seen":"2026-04-19T23:39:38.105386Z","times_seen":387,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":50,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ta21.vip/favicon.ico","fqdn":"ta21.vip","domain":"ta21.vip","tld":"vip"},"ip":{"addr":"104.21.45.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:09.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ta21.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 15:19:04 GMT","end":"Wed, 10 Jun 2026 16:17:36 GMT"},"fingerprint":{"sha1":"44:D7:0A:29:01:1B:B8:56:E7:00:49:91:EC:BF:13:FE:93:F9:77:6A","sha256":"33:E9:C5:C8:69:74:75:63:B4:BA:4D:9E:D8:BB:9A:EA:54:E4:98:E1:F1:2A:30:76:C2:FE:54:CE:83:FB:F3:C4"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ta21.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: text/html\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=34ZPfIv6CQtBb3w1DtOutYZq0fvLwXgKGLEJpf%2FQ9%2FaMTkqFphgyCifrBnHcTcdnG6BgNPJsyJDH0anXnaoxD4%2B86LZVIyfiIV15s4nRhm9PRGNxZxSufgJgXA%3D%3D\"}]}\r\nlast-modified: Wed, 29 Oct 2025 07:42:38 GMT\r\npriority: u=6,i=?0\r\ncontent-encoding: br\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: 9eefbf364e410b02-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":1308,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ef03b279678aaccbaf3b7fda034d11b9","sha1":"bbaf1f22bb5d11bbd6b0534abb48acf2e84e2434","sha256":"d070b39df49ac35bc121064a48ec20ba7c1776f38ae80d87ec92dda573554713","sha512":"2a3d84eac7a53d3587eaee0f154fe9d5d8fe782351534e4b3d27e5034c2c9dc409f30501ca2c38432d655bb43a9a5f072d85bf861cc71500c7656583e5c52593","ssdeep":"","tlshash":"b62100a6a9c148042033e2b8ec20f648fd59928ba3428d16fdee25931f71995e4e3fd5","first_seen":"2026-03-18T19:52:14.217135Z","last_seen":"2026-04-19T23:39:38.106261Z","times_seen":3,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":20,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ta21.vip/","fqdn":"ta21.vip","domain":"ta21.vip","tld":"vip"},"ip":{"addr":"104.21.45.96","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-19T23:39:08.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ta21.vip","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 12 Mar 2026 15:19:04 GMT","end":"Wed, 10 Jun 2026 16:17:36 GMT"},"fingerprint":{"sha1":"44:D7:0A:29:01:1B:B8:56:E7:00:49:91:EC:BF:13:FE:93:F9:77:6A","sha256":"33:E9:C5:C8:69:74:75:63:B4:BA:4D:9E:D8:BB:9A:EA:54:E4:98:E1:F1:2A:30:76:C2:FE:54:CE:83:FB:F3:C4"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ta21.vip\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sun, 19 Apr 2026 23:39:08 GMT\r\ncontent-type: text/html\r\nserver: cloudflare\r\nlast-modified: Wed, 29 Oct 2025 07:42:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5bPDxDKSxYdgOunLVccVx5Mn21eQTVWh75KdfSuQqCHaNWjMjlVqN6mS9H%2B71E2YQVu0vyzqgzILIYpCvhQyKAOqm84F1Kxb80SFFr44lxJXYt0h1yG5NDcMXw%3D%3D\"}]}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9eefbf31d95456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Vue.js","description":"Vue.js is an open-source model–view–viewmodel JavaScript framework for building user interfaces and single-page applications.","website":"https://vuejs.org","common_platform_enumeration":"","icon":"vue.svg","categories":["JavaScript frameworks"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}],"data":{"size":1308,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"ef03b279678aaccbaf3b7fda034d11b9","sha1":"bbaf1f22bb5d11bbd6b0534abb48acf2e84e2434","sha256":"d070b39df49ac35bc121064a48ec20ba7c1776f38ae80d87ec92dda573554713","sha512":"2a3d84eac7a53d3587eaee0f154fe9d5d8fe782351534e4b3d27e5034c2c9dc409f30501ca2c38432d655bb43a9a5f072d85bf861cc71500c7656583e5c52593","ssdeep":"","tlshash":"b62100a6a9c148042033e2b8ec20f648fd59928ba3428d16fdee25931f71995e4e3fd5","first_seen":"2026-03-18T19:52:14.217135Z","last_seen":"2026-04-19T23:39:38.106261Z","times_seen":3,"resource_available":true,"data":null}},"time_used":198,"timings":{"blocked":44,"dns":22,"connect":1,"send":0,"wait":110,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-04-19","alert":"Sinkholed","trigger":"ta21.vip","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gravatar.com/avatar/fb8abdeedf64d54600ae38959522ff9c","fqdn":"www.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:09.126Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /avatar/fb8abdeedf64d54600ae38959522ff9c HTTP/1.1\r\nHost: www.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2757\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/fb8abdeedf64d54600ae38959522ff9c\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"fb8abdeedf64d54600ae38959522ff9c.jpg\"\r\naccept-ranges: bytes\r\nexpires: Sun, 19 Apr 2026 23:44:09 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=439.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 80x80, components 3","md5":"17eaec59ee1e556787efdddb3ca70e85","sha1":"39cebc4727e83b50df6dc01c90b776912d049d54","sha256":"ffc9f5f7602922e65f4f11a7ab84c939e0b4fc38cf2ec15999c541a28c5f4057","sha512":"72e51f7ed615af2bb29392957bebf202e183eb7d0513593a852fecf1c1ff2a1c78fa2608b739271ff95bea04695f1981e69c6105098073e4b543e34c3558b950","ssdeep":"","tlshash":"765129a9134f13e2f92ccbf9910d9c03b2e9eb41648845744be459a2d95fb80a79da08","first_seen":"2025-03-09T03:07:20.29855Z","last_seen":"2026-04-19T23:39:38.105386Z","times_seen":387,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":58,"dns":12,"connect":7,"send":0,"wait":447,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gravatar.com/avatar/509d6840f395dcf75d6b1d39d1b38a35","fqdn":"www.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:09.127Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /avatar/509d6840f395dcf75d6b1d39d1b38a35 HTTP/1.1\r\nHost: www.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2757\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/509d6840f395dcf75d6b1d39d1b38a35\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"509d6840f395dcf75d6b1d39d1b38a35.jpg\"\r\naccept-ranges: bytes\r\nexpires: Sun, 19 Apr 2026 23:44:09 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=432.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 80x80, components 3","md5":"17eaec59ee1e556787efdddb3ca70e85","sha1":"39cebc4727e83b50df6dc01c90b776912d049d54","sha256":"ffc9f5f7602922e65f4f11a7ab84c939e0b4fc38cf2ec15999c541a28c5f4057","sha512":"72e51f7ed615af2bb29392957bebf202e183eb7d0513593a852fecf1c1ff2a1c78fa2608b739271ff95bea04695f1981e69c6105098073e4b543e34c3558b950","ssdeep":"","tlshash":"765129a9134f13e2f92ccbf9910d9c03b2e9eb41648845744be459a2d95fb80a79da08","first_seen":"2025-03-09T03:07:20.29855Z","last_seen":"2026-04-19T23:39:38.105386Z","times_seen":387,"resource_available":false,"data":null}},"time_used":564,"timings":{"blocked":58,"dns":7,"connect":10,"send":0,"wait":440,"receive":0,"ssl":44},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gravatar.com/avatar/81575b8d7ed8a620833de2532fd52e87","fqdn":"www.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:09.128Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /avatar/81575b8d7ed8a620833de2532fd52e87 HTTP/1.1\r\nHost: www.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2757\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/81575b8d7ed8a620833de2532fd52e87\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"81575b8d7ed8a620833de2532fd52e87.jpg\"\r\naccept-ranges: bytes\r\nexpires: Sun, 19 Apr 2026 23:44:09 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=433.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 80x80, components 3","md5":"17eaec59ee1e556787efdddb3ca70e85","sha1":"39cebc4727e83b50df6dc01c90b776912d049d54","sha256":"ffc9f5f7602922e65f4f11a7ab84c939e0b4fc38cf2ec15999c541a28c5f4057","sha512":"72e51f7ed615af2bb29392957bebf202e183eb7d0513593a852fecf1c1ff2a1c78fa2608b739271ff95bea04695f1981e69c6105098073e4b543e34c3558b950","ssdeep":"","tlshash":"765129a9134f13e2f92ccbf9910d9c03b2e9eb41648845744be459a2d95fb80a79da08","first_seen":"2025-03-09T03:07:20.29855Z","last_seen":"2026-04-19T23:39:38.105386Z","times_seen":387,"resource_available":false,"data":null}},"time_used":557,"timings":{"blocked":54,"dns":5,"connect":10,"send":0,"wait":441,"receive":1,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gravatar.com/avatar/41d03393a7d29c4e71206b4b256d7395","fqdn":"www.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:09.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /avatar/41d03393a7d29c4e71206b4b256d7395 HTTP/1.1\r\nHost: www.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2757\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/41d03393a7d29c4e71206b4b256d7395\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"41d03393a7d29c4e71206b4b256d7395.jpg\"\r\naccept-ranges: bytes\r\nexpires: Sun, 19 Apr 2026 23:44:09 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=442.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 80x80, components 3","md5":"17eaec59ee1e556787efdddb3ca70e85","sha1":"39cebc4727e83b50df6dc01c90b776912d049d54","sha256":"ffc9f5f7602922e65f4f11a7ab84c939e0b4fc38cf2ec15999c541a28c5f4057","sha512":"72e51f7ed615af2bb29392957bebf202e183eb7d0513593a852fecf1c1ff2a1c78fa2608b739271ff95bea04695f1981e69c6105098073e4b543e34c3558b950","ssdeep":"","tlshash":"765129a9134f13e2f92ccbf9910d9c03b2e9eb41648845744be459a2d95fb80a79da08","first_seen":"2025-03-09T03:07:20.29855Z","last_seen":"2026-04-19T23:39:38.105386Z","times_seen":387,"resource_available":false,"data":null}},"time_used":575,"timings":{"blocked":59,"dns":2,"connect":9,"send":0,"wait":450,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gravatar.com/avatar/aaef3180ba4765beeca16222d6c43e0f","fqdn":"www.gravatar.com","domain":"gravatar.com","tld":"com"},"ip":{"addr":"192.0.73.2","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ta21.vip/","date":"2026-04-19T23:39:09.134Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"gravatar.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Fri, 10 Apr 2026 19:44:00 GMT","end":"Thu, 09 Jul 2026 19:43:59 GMT"},"fingerprint":{"sha1":"51:4F:BB:64:0A:B7:DC:9D:1B:AB:E8:A9:50:DE:A5:57:4B:ED:3A:E5","sha256":"03:E1:54:B4:1D:4D:63:78:4A:27:22:A1:24:25:7D:02:A0:26:BA:5A:F3:D8:E9:97:F2:E8:7E:9A:4B:93:96:59"}}},"request":{"raw":"GET /avatar/aaef3180ba4765beeca16222d6c43e0f HTTP/1.1\r\nHost: www.gravatar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ta21.vip/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sun, 19 Apr 2026 23:39:09 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2757\r\nlast-modified: Wed, 11 Jan 1984 08:00:00 GMT\r\nlink: \u003chttps://gravatar.com/avatar/aaef3180ba4765beeca16222d6c43e0f\u003e; rel=\"canonical\"\r\naccess-control-allow-origin: *\r\ncontent-disposition: inline; filename=\"aaef3180ba4765beeca16222d6c43e0f.jpg\"\r\naccept-ranges: bytes\r\nexpires: Sun, 19 Apr 2026 23:44:09 GMT\r\ncache-control: max-age=300\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: MISS arn 11\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=MISS;dur=435.0\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2757,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90\", baseline, precision 8, 80x80, components 3","md5":"17eaec59ee1e556787efdddb3ca70e85","sha1":"39cebc4727e83b50df6dc01c90b776912d049d54","sha256":"ffc9f5f7602922e65f4f11a7ab84c939e0b4fc38cf2ec15999c541a28c5f4057","sha512":"72e51f7ed615af2bb29392957bebf202e183eb7d0513593a852fecf1c1ff2a1c78fa2608b739271ff95bea04695f1981e69c6105098073e4b543e34c3558b950","ssdeep":"","tlshash":"765129a9134f13e2f92ccbf9910d9c03b2e9eb41648845744be459a2d95fb80a79da08","first_seen":"2025-03-09T03:07:20.29855Z","last_seen":"2026-04-19T23:39:38.105386Z","times_seen":387,"resource_available":false,"data":null}},"time_used":492,"timings":{"blocked":49,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
