{"report_id":"8d66c1aa-4b38-447d-a41a-ed2c736da4ea","version":6,"status":"done","tags":[],"date":"2025-12-30T11:43:17Z","url":{"schema":"http","addr":"www.justaredirect.xyz/9bFdkb","fqdn":"www.justaredirect.xyz","domain":"justaredirect.xyz","tld":"xyz"},"ip":{"addr":"216.150.1.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"certainlywhenev.org/s?V7TI4WAg","fqdn":"certainlywhenev.org","domain":"certainlywhenev.org","tld":"org"},"title":"SW","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"www.justaredirect.xyz/9bFdkb","fqdn":"www.justaredirect.xyz","domain":"justaredirect.xyz","tld":"xyz"},"ip":{"addr":"216.150.1.65","port":0,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-02-03T11:43:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"torealiukzemydr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"ukankingwithea.com","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-12-30T01:59:11.301646Z","alert_count":4,"request_count":1,"received_data":843,"sent_data":444,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-28T22:17:10.032556Z","alert_count":0,"request_count":2,"received_data":36051,"sent_data":970,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"app.unlockr.app","ip":{"addr":"172.67.188.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-18","domain_rank":844335,"first_seen":"2025-03-20T23:46:19.496978Z","last_seen":"2025-12-25T09:57:10.018301Z","alert_count":0,"request_count":1,"received_data":886,"sent_data":477,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"d3h26c51lqz4go.cloudfront.net","ip":{"addr":"3.167.7.210","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2024-10-08T03:58:59Z","last_seen":"2025-12-28T19:24:19.059057Z","alert_count":0,"request_count":2,"received_data":39169,"sent_data":922,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"rapid-links.net","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-05-05","domain_rank":0,"first_seen":"2025-11-13T21:17:19.412791Z","last_seen":"2025-12-25T09:57:10.223813Z","alert_count":0,"request_count":1,"received_data":96114,"sent_data":494,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"certainlywhenev.org","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-05","domain_rank":0,"first_seen":"2025-11-22T11:34:57.997202Z","last_seen":"2025-12-28T19:24:19.097451Z","alert_count":0,"request_count":3,"received_data":207179,"sent_data":1500,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"torealiukzemydr.org","ip":{"addr":"172.67.130.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-10-06","domain_rank":0,"first_seen":"2025-12-21T08:49:45.283212Z","last_seen":"2025-12-28T09:14:33.95479Z","alert_count":1,"request_count":1,"received_data":525,"sent_data":581,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"undefined","ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2020-01-28T19:52:40Z","last_seen":"2025-12-30T06:56:59.681963Z","alert_count":0,"request_count":1,"received_data":0,"sent_data":1034,"comment":"","tags":null,"fingerprints":null},{"fqdn":"dfdgfruitie.xyz","ip":{"addr":"104.21.13.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2022-08-22","domain_rank":235166,"first_seen":"2022-12-12T11:59:22Z","last_seen":"2025-12-27T03:48:28.294177Z","alert_count":0,"request_count":1,"received_data":663,"sent_data":428,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","ip":{"addr":"54.231.230.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2005-08-18","domain_rank":980294,"first_seen":"2024-12-09T20:50:57.594921Z","last_seen":"2025-12-29T21:39:29.568999Z","alert_count":0,"request_count":2,"received_data":39938,"sent_data":1005,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}]},{"fqdn":"nismscoldnesfspu.org","ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-11-07","domain_rank":359459,"first_seen":"2025-02-12T02:10:07.887399Z","last_seen":"2025-12-25T09:57:10.759653Z","alert_count":0,"request_count":2,"received_data":3632,"sent_data":1037,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.justaredirect.xyz","ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2025-12-24","domain_rank":0,"first_seen":"2025-12-30T11:43:18.090856Z","last_seen":"2025-12-30T11:43:18.090856Z","alert_count":0,"request_count":1,"received_data":1001,"sent_data":496,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}]},{"fqdn":"d33f51dyacx7bd.cloudfront.net","ip":{"addr":"54.230.241.100","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-12-21T21:51:47.249845Z","last_seen":"2025-12-29T21:39:29.657491Z","alert_count":0,"request_count":1,"received_data":278057,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-28T22:14:05.525046Z","alert_count":0,"request_count":1,"received_data":8718,"sent_data":539,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"certainlywhenev.org/WrappedBotd.browser.protected.js","fqdn":"certainlywhenev.org","domain":"certainlywhenev.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"95888320adab6afba4a8e0c8f06e8361","sha1":"c04b231b41d57f1cc95e66e04d8f2631a4b10018","sha256":"8fda68ace483a03aa4362a8731fff5b2a37d85aab3de76801ab8e225b217b2df","sha512":"e3a17ad670f939f563fe6d1dc507ab5ba99f90a4b6bc94364fa2f56d5c5ca1a552b0dbb973a4f68f7694ca9a8bf1a3ff3bf28b0dc1f4bf2fc796deef5007bd82","ssdeep":"3072:9ISWWZitd7yfmAa0Zzg/N8OSv0TfuuC8a5MAVCGNs:YhlLqD0TmPMAVCSs","tlshash":"bab3d79462472c958392d1ff142fb285ac2d8e51bc8fdce1d651c3959c306c78afbba2","size":109231,"data":"","first_seen":"2025-07-01T16:50:14.740307Z","last_seen":"2026-06-11T17:31:25.249264Z","times_seen":658,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d33f51dyacx7bd.cloudfront.net/?tid=1226074","fqdn":"d33f51dyacx7bd.cloudfront.net","domain":"d33f51dyacx7bd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.100","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e82f859acd3d7252bd15aa6947311c9","sha1":"1bdd2c970e93ef06d32bb0b48047cce3bdeefd60","sha256":"203feb9740a8c954a34a7261b9eb4ae6451a2719ad15b338d92c5d412c0f6ba1","sha512":"bc7b2b3d141635642061c06d859e11a6f44563c5b396d19e6f367809b36c949e03cb250b5d50d24c310bfbf709cd7dbb1cab5ec21b4334a139b9832c8b72a283","ssdeep":"6144:1G176BACNa9RaEJEthq2fmCmEmtt1HZxEb3Q6OyoSZC:w176pNa9RaEJEfq2i5xEb3Q6OyoSZC","tlshash":"30446c256622310aa17351eeb0fa6785f065d014f9024ad8a4e5c87cb6ddff621fb3ec","size":277596,"data":"","first_seen":"2025-12-30T11:43:22.643478Z","last_seen":"2025-12-30T11:43:22.643478Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:58.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 21 Dec 2025 14:41:35 GMT","end":"Sat, 21 Mar 2026 15:38:12 GMT"},"fingerprint":{"sha1":"F5:49:6B:45:9A:B4:87:30:F2:34:12:BC:49:A1:48:31:A2:B6:9B:7F","sha256":"55:CC:57:AE:F5:9A:5C:FB:E7:85:83:CD:13:37:E9:19:A2:79:01:68:7B:D7:7F:4B:80:61:9B:7D:C8:9A:17:E0"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://certainlywhenev.org/\r\nOrigin: https://certainlywhenev.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 11:42:58 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nset-cookie: csu=62886544626195@1@1767094978; Max-Age=31104000; Secure; SameSite=None\r\naccess-control-allow-origin: https://certainlywhenev.org\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xbxCoqdoF%2FNvFQBPEve4ckn1t1GpWbKGqT2YNPGLlri7%2Bx5OG%2FYk7vkCc3%2B8cUQwc3hk%2BuJ5Px7jUsRIy9xUxiKdj8fLfkdBCh1xh5p2f6W5zw%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b6146df898aa0f0-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"056048493fb90cc817902adf38d5a348","sha1":"ab76d8ef288d927b971d4b0c1632ed2272b28938","sha256":"c67ed1b046104a18ac58d79ac1b36c2288f46241b1944ac6d292ffe4afbdf468","sha512":"4ced8d035414654d287d5707dccf733a7b7cc96dbe6c1a659d3aeeb92bd9cb099bb9b7c4e31a95177bb7f94724b5a0ffaaab2d3646899f51164b393c99d6b1b0","ssdeep":"","tlshash":"307000a80f2022b28008a00880088222080ba00088000a0aa222030000000028000320","first_seen":"2025-12-30T11:43:22.635353Z","last_seen":"2025-12-30T11:43:22.635353Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":43,"dns":20,"connect":1,"send":0,"wait":124,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:wght@300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:58.857Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Poppins:wght@300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Dec 2025 11:42:58 GMT\r\ndate: Tue, 30 Dec 2025 11:42:58 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1189,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"70f6f56be7ff7ace3e1f9979aef5db75","sha1":"3247717a7c2321db34762076775f37f8adc1e6e1","sha256":"ce53fd6ea2c59a3106afb0cf49f27a403675291622352c323c04ab5cc642a321","sha512":"b2020165c0c7b5c32c97d6b62bac6666d9b7c895ab837dca8272334ac3cdf164030e1780f80461b602690075ada4f3e836a4bea1505532b3bd6f281cc110392b","ssdeep":"","tlshash":"2d219791087bd114ab871cc523ce6d37ee0e9251b810e5786bfe0c98adabc654362b2d","first_seen":"2025-09-17T08:48:26.697017Z","last_seen":"2026-06-13T01:06:34.315747Z","times_seen":5747,"resource_available":false,"data":null}},"time_used":35,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"app.unlockr.app/pixel?event=unlockrPromote\u0026session_id=834603931702980519","fqdn":"app.unlockr.app","domain":"unlockr.app","tld":"app"},"ip":{"addr":"172.67.188.45","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:59.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unlockr.app","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 20 Dec 2025 23:45:54 GMT","end":"Sat, 21 Mar 2026 00:44:19 GMT"},"fingerprint":{"sha1":"57:D0:02:87:82:A8:9B:95:05:FA:CA:3B:92:5B:56:F1:D7:EE:BA:F5","sha256":"D4:40:1E:79:E6:29:34:5B:E8:2B:54:A2:8A:6E:E5:22:A9:5D:7C:D4:16:90:53:3E:15:50:26:4C:42:F2:8A:AA"}}},"request":{"raw":"POST /pixel?event=unlockrPromote\u0026session_id=834603931702980519 HTTP/1.1\r\nHost: app.unlockr.app\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://certainlywhenev.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 11:43:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-origin: https://certainlywhenev.org\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncache-control: no-store\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0GtW6xsbaOSf7A3xJz82d168XyiHVOHWq9wI7kFRKKqJPhntrYC9NWH2bL7eEx1yju5nuPUNRoCHOYNFKS3AwVfTCV39jtjdsfV7yA25SQ%3D%3D\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b6146e81c134e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":365,"timings":{"blocked":54,"dns":33,"connect":1,"send":0,"wait":256,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3h26c51lqz4go.cloudfront.net/unlocker/unlocker.png","fqdn":"d3h26c51lqz4go.cloudfront.net","domain":"d3h26c51lqz4go.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.210","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:59.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /unlocker/unlocker.png HTTP/1.1\r\nHost: d3h26c51lqz4go.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 31030\r\nlast-modified: Tue, 01 Oct 2024 15:27:43 GMT\r\nserver: AmazonS3\r\ndate: Tue, 30 Dec 2025 11:42:59 GMT\r\netag: \"aa3e9ab7989d9c695c98fc750957670d\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: YPMiTX9SVk3cRD0CnbhTxow3LMw8IsRuGO-aT-n-OyUyXS4yj2bWWw==\r\nage: 565\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":31030,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 246 x 246, 8-bit/color RGBA, non-interlaced","md5":"aa3e9ab7989d9c695c98fc750957670d","sha1":"4022d553f4952fa7c7b57f00942b202354b66acb","sha256":"5e0813c96779ef092cefc6e77fa90de7a86e307f04bd6d64f9d37a5d9a8fb4e0","sha512":"e3b681724244c3834a9d24d92c3b3817afb553e1a697c58b21d84e6a8ba1c07cece4b14e1316c6235436768b2e62362169810568921d660efc576536ec41696f","ssdeep":"768:nwlF+bky/Yt20bgvguLfk7D07HIcDbMXj5ZVp0iB6VRc8p6UvzMVOs:NkBXghfk7aHbDbMXj5Zh6LcC6YIVOs","tlshash":"54d2d0f5b033745de9f50006fa4647b801bb8af07f31b618d4bbc60eb78839e24a9965","first_seen":"2025-03-20T23:46:21.230829Z","last_seen":"2026-05-10T12:20:36.378905Z","times_seen":594,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":61,"dns":48,"connect":3,"send":0,"wait":24,"receive":1,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3h26c51lqz4go.cloudfront.net/unlocker/qr.png","fqdn":"d3h26c51lqz4go.cloudfront.net","domain":"d3h26c51lqz4go.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"3.167.7.210","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:59.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /unlocker/qr.png HTTP/1.1\r\nHost: d3h26c51lqz4go.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\ncontent-length: 7224\r\nlast-modified: Tue, 18 Mar 2025 14:25:40 GMT\r\nserver: AmazonS3\r\ndate: Mon, 29 Dec 2025 12:04:58 GMT\r\netag: \"a93ba4860dc42551669d1c44999d6219\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Ks3dWNZ8_KsLG4mHQu_Mx63M_tWE1o-_9YRZ7uW12fg6t1T2aH6uSA==\r\nage: 85136\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":7224,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1160 x 1160, 8-bit/color RGB, non-interlaced","md5":"a93ba4860dc42551669d1c44999d6219","sha1":"f42f4d71fa233d571ec60e8998b15772eedf9b6c","sha256":"bdd20de2c3c9af1e3df3ac71b2a52de1704c06e3bf2885db0a48423380f559cb","sha512":"c39361ebaf0aa3c799b0f2fa62acbaf5e779f19b19042c61c27bb7703d2c10bd11034755fb07a6bcff4035f690d65c51367cfb4dc5d1b0d12e4473ecdddd819b","ssdeep":"192:y5iSWmbbbbbbbbbbbbbbbbbbVbbbbbbbbbbbbbbbbbbZhpbbbbbbbbbbbbbbbbbL:y3WGB","tlshash":"e4e1b91d05510a2c6edeafeb89c544c8bed5e247c9f97b63e31a1868e40143cad6edb0","first_seen":"2025-03-20T23:46:21.232783Z","last_seen":"2026-05-10T12:20:36.389099Z","times_seen":594,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":58,"dns":49,"connect":1,"send":0,"wait":2,"receive":1,"ssl":9},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dfdgfruitie.xyz/adserver/yzfdmoan.js","fqdn":"dfdgfruitie.xyz","domain":"dfdgfruitie.xyz","tld":"xyz"},"ip":{"addr":"104.21.13.114","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:58.021Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"dfdgfruitie.xyz","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Nov 2025 12:48:37 GMT","end":"Sun, 08 Feb 2026 13:48:21 GMT"},"fingerprint":{"sha1":"17:F4:0A:11:83:45:F9:54:1E:44:BA:26:74:30:51:44:D4:E9:8F:06","sha256":"87:51:D4:65:85:8E:A4:B6:97:24:72:3C:0F:2E:46:91:A7:21:B3:D6:A2:25:AB:D3:69:4A:58:62:A0:BE:21:8F"}}},"request":{"raw":"GET /adserver/yzfdmoan.js HTTP/1.1\r\nHost: dfdgfruitie.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 11:42:58 GMT\r\ncontent-type: application/x-javascript\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Fri, 03 Feb 2023 19:26:28 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7uulczNWwOMJVCC78rJpAX8M%2BxyaLrP2Pmr3RSx2E6BsxIAVZmyjcjzCQ0qxCwVpjLBkC9%2FPMMQPsLAWlUcpEm1TqV7VAVwLsQGlsuM%3D\"}]}\r\nvary: accept-encoding\r\nage: 3629\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\netag: W/\"63dd5fe4-0\"\r\ncontent-encoding: br\r\ncf-ray: 9b6146dcdc4e5690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/x-javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":36,"dns":22,"connect":1,"send":0,"wait":11,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fingerprinting36542.s3.us-east-1.amazonaws.com/loadFingerPrint.js","fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":"us-east-1.amazonaws.com"},"ip":{"addr":"54.231.230.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:58.860Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /loadFingerPrint.js HTTP/1.1\r\nHost: fingerprinting36542.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://certainlywhenev.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: 9K9wesPXb7e5RfPb7Ij/sq3aDzgnRHXQ1QmhJt7VmcMvJBAjh2tVHamfrDKp/w9BJbg87wZjymM=\r\nx-amz-request-id: A3A9J1V11BEYT2MX\r\nDate: Tue, 30 Dec 2025 11:43:00 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, PUT, POST, DELETE\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nLast-Modified: Mon, 09 Dec 2024 12:05:18 GMT\r\nETag: \"6c2ea9c45e0053e2d4fe3eaeada5d896\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nContent-Length: 653\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":653,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text","md5":"6c2ea9c45e0053e2d4fe3eaeada5d896","sha1":"e5ec1f9cf5dceded1d58900137c9ecdea4fca4d6","sha256":"6b3e0f4edb818818625ffb8ede90fea90a9778c7516bec1d197fed877d5d37e2","sha512":"0b36faab7e796c6a96e5b567910fd6cfefc9487e2c88b20f07cc394793c94951289e7cd94d131dc420e921fb8d912a4af05cb47befc6c3bac211f3aaee30c432","ssdeep":"","tlshash":"a6f0f61b0a720817102b21688e4b911651336d5b46fcf9087f1dd7653f806548918fdc","first_seen":"2024-12-09T20:50:59.330164Z","last_seen":"2026-03-10T17:42:36.683977Z","times_seen":690,"resource_available":true,"data":null}},"time_used":648,"timings":{"blocked":261,"dns":44,"connect":95,"send":0,"wait":125,"receive":0,"ssl":121},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fingerprinting36542.s3.us-east-1.amazonaws.com/fingerprint.js","fqdn":"fingerprinting36542.s3.us-east-1.amazonaws.com","domain":"s3.us-east-1.amazonaws.com","tld":"us-east-1.amazonaws.com"},"ip":{"addr":"54.231.230.130","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:59.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s3.amazonaws.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Sun, 20 Jul 2025 00:00:00 GMT","end":"Thu, 25 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"16:D2:7A:E0:6B:B2:6D:C0:8F:8C:4E:E5:2B:1F:47:F3:EF:60:7F:68","sha256":"EF:42:24:62:84:5D:EF:F9:AE:18:7F:85:D7:C7:56:73:2D:8B:30:D2:CD:83:77:3B:45:EF:24:B2:93:43:99:33"}}},"request":{"raw":"GET /fingerprint.js HTTP/1.1\r\nHost: fingerprinting36542.s3.us-east-1.amazonaws.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://certainlywhenev.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fingerprinting36542.s3.us-east-1.amazonaws.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nx-amz-id-2: CCF0cVQgrK80hE/9cjkG7BhL6exqYAcxvKGpY/rIr1bqjjdkdHETBweIC1clbig1PP0EWK1ODGg=\r\nx-amz-request-id: A3AF1BPCJCFBSGV8\r\nDate: Tue, 30 Dec 2025 11:43:00 GMT\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, PUT, POST, DELETE\r\nVary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method\r\nLast-Modified: Mon, 09 Dec 2024 12:08:59 GMT\r\nETag: \"9ac06ba71cc5803c7515b3e8c3a2854d\"\r\nx-amz-server-side-encryption: AES256\r\nAccept-Ranges: bytes\r\nContent-Type: application/javascript\r\nContent-Length: 38143\r\nServer: AmazonS3\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":38143,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38136), with no line terminators","md5":"9ac06ba71cc5803c7515b3e8c3a2854d","sha1":"03ba918aad85dda720c6f46267eb4fba9103aac3","sha256":"6cf24eed847d975853348f50d95b192ac37a4c49e96d8888af6dd2e15631a1fd","sha512":"8db044466454b70e2dcf368078e845163e714e68e5405fc5d3cb9202737c7e3f9696a1f231d1ba0b8ace9dc46712035eab112c3ef3f728be64644cffd587b0e7","ssdeep":"384:2xcDKdRZKREaMRMBp5iKQID95wH3KqwzrWmKj5+pCqNFaiE8E0QIQfJWbkhGYKon:x3RBp5Kjnc9NwlJWbhSu+AW","tlshash":"300306d8b2c3b06e227368b5457f6006b23a7d50346d8842c523e5d57ca9e6e913bfbc","first_seen":"2024-12-09T20:50:59.331644Z","last_seen":"2026-06-11T17:31:25.254667Z","times_seen":949,"resource_available":true,"data":null}},"time_used":207,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.org/tc","fqdn":"nismscoldnesfspu.org","domain":"nismscoldnesfspu.org","tld":"org"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:59.385Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 23:57:37 GMT","end":"Fri, 27 Mar 2026 00:55:13 GMT"},"fingerprint":{"sha1":"1C:AC:6C:15:0A:28:E0:06:2B:31:D8:B3:C5:2B:CC:4E:EF:47:87:72","sha256":"2E:8F:52:EA:85:6B:89:54:7A:DD:2B:75:6B:B1:1E:93:7C:AF:0B:AE:36:0A:30:9F:F4:B5:B4:51:E8:9F:AF:59"}}},"request":{"raw":"OPTIONS /tc HTTP/1.1\r\nHost: nismscoldnesfspu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://certainlywhenev.org/\r\nOrigin: https://certainlywhenev.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 11:42:59 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: ci=1077779119606801; Max-Age=86400; Secure; SameSite=None\r\naccess-control-allow-origin: https://certainlywhenev.org\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Y0ntA9VkLAW4OoArwhYAurSPylVAN%2FCJh2y%2BeVxvLd3Vc8p2%2FA3CeAlusiZjCOEr7qbea%2BljFyJj3FGrO%2FMmowyMHK0QV8Y8WRnlx%2FOUhH%2FOD9mJ\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b6146e5aa600731-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/json","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":81,"dns":61,"connect":3,"send":0,"wait":123,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"nismscoldnesfspu.org/tc","fqdn":"nismscoldnesfspu.org","domain":"nismscoldnesfspu.org","tld":"org"},"ip":{"addr":"104.21.61.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:59.615Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"nismscoldnesfspu.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 26 Dec 2025 23:57:37 GMT","end":"Fri, 27 Mar 2026 00:55:13 GMT"},"fingerprint":{"sha1":"1C:AC:6C:15:0A:28:E0:06:2B:31:D8:B3:C5:2B:CC:4E:EF:47:87:72","sha256":"2E:8F:52:EA:85:6B:89:54:7A:DD:2B:75:6B:B1:1E:93:7C:AF:0B:AE:36:0A:30:9F:F4:B5:B4:51:E8:9F:AF:59"}}},"request":{"raw":"POST /tc HTTP/1.1\r\nHost: nismscoldnesfspu.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://certainlywhenev.org/\r\nContent-Type: application/json\r\nContent-Length: 725\r\nOrigin: https://certainlywhenev.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":725,"data":"{\"tid\":1226074,\"bl\":[10],\"session\":\"834603931702980519\",\"max_tasks\":5,\"design_id\":11,\"cur_url\":\"https://certainlywhenev.org/s?V7TI4WAg\",\"doc_ref\":\"\",\"abt\":0,\"cookie_id\":\"62886544626195\",\"rkey\":\"799482466473963320\",\"offer\":\"0\",\"subid\":\"MAIN\",\"botd\":\"{\\\"bot\\\":false,\\\"timestamp\\\":1767094977858,\\\"webGLSolution\\\":{\\\"uuid\\\":\\\"3aD2DDa2-8Cc7-451b-842f-0d1aea0d764a\\\",\\\"nonce\\\":6,\\\"time\\\":65},\\\"encrypted\\\":\\\"nbX4cMJQX56SmycLh+gCqcYXNlnP5iN3ov3LKpCr8OLct6mRgqm62XoY0JdaCMEJET9OsAx+M9kB2zbP5myBJC/xNHswFmkNQcW4By5r3okheeO8RzDBLDMW7dfDE82dQfli940goJV5icDX7y//que2ueDKbcGIDk7AyrLLK+uByyig/e74hzh07xi516KjPW05PHZciw==\\\"}\",\"botds\":\"3aD2DDa2-8Cc7-451b-842f-0d1aea0d764a\",\"fid\":-1,\"clid\":\"8OkJWfymfBpRUWLNiVVbjIivEIfgmvA7\",\"is_loot\":false}"}},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 11:42:59 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nset-cookie: ci=563977777514250; Max-Age=86400; Secure; SameSite=None\r\naccess-control-allow-origin: https://certainlywhenev.org\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s0lWkwpJWOWPVBFG7jMOfx9jTaXvdX2903rZsHTJAoiNgz1vHDvj72USjLSMBh5LLTHHxxTbz6nwgqo7pekACsT%2F0LLb9WZjJ3IltRcY3GUkrfi5\"}]}\r\ncontent-encoding: br\r\ncf-ray: 9b6146e67e05120a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1769,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"3554028552d25c84038af79463bc4a31","sha1":"4bf532c6081eb8a6a1a224e226a5be469fb97ce8","sha256":"437370da60fccba399b5df61f453a27972c9d74602288bf73e221713566d5df7","sha512":"aafd8c23428b4cc05ae9e2f655031d94adf0513d148b46b704815db72a877599c9df8d1e011b025a0309a26069c1cf7e85ed005973d78c3f204a6a9c5bb5c5a4","ssdeep":"","tlshash":"6731101bd6170b3377e102748b522ba8ab13332c17e088689690c85c99debd162c6b5b","first_seen":"2025-12-30T11:43:22.639468Z","last_seen":"2025-12-30T11:43:22.639468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":63,"connect":1,"send":0,"wait":180,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rapid-links.net/s?V7TI4WAg","fqdn":"rapid-links.net","domain":"rapid-links.net","tld":"net"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T11:42:56.963Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"rapid-links.net","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Dec 2025 09:27:49 GMT","end":"Mon, 16 Mar 2026 10:26:31 GMT"},"fingerprint":{"sha1":"62:D3:34:D1:8B:19:20:F7:9A:A9:33:64:BC:BC:CF:BA:B7:35:20:B9","sha256":"16:F1:65:B2:CC:22:3D:D4:BB:B5:0A:6A:80:EF:2E:38:C4:BE:7D:5E:72:49:22:77:53:95:F2:77:13:13:29:C4"}}},"request":{"raw":"GET /s?V7TI4WAg HTTP/1.1\r\nHost: rapid-links.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ndate: Tue, 30 Dec 2025 11:42:57 GMT\r\ncontent-type: text/html\r\nlocation: https://certainlywhenev.org/s?V7TI4WAg\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6UtiylK36W%2Bmc0DXbT6HI6Rz1ojbwVB5PREQbB2%2FGUn3umr2v%2F%2Fp5TyQrfTc8usvF87By6J9HzyYhMZU5Z1cZvvoqTuDyS5h%2F5iej18%3D\"}]}\r\ncf-ray: 9b6146d64f085690-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95557,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":340,"timings":{"blocked":47,"dns":33,"connect":1,"send":0,"wait":243,"receive":0,"ssl":14},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"certainlywhenev.org/WrappedBotd.browser.protected.js","fqdn":"certainlywhenev.org","domain":"certainlywhenev.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:57.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certainlywhenev.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 09:09:00 GMT","end":"Tue, 03 Mar 2026 10:07:31 GMT"},"fingerprint":{"sha1":"C7:6D:7B:0F:37:71:8D:9E:C5:68:B2:57:89:26:51:97:39:4B:62:18","sha256":"08:7F:F6:C0:EF:D4:A2:95:15:B1:21:FC:1E:0B:51:60:75:7C:97:2D:E3:4E:04:9D:FB:4C:E8:9F:AB:A8:67:E5"}}},"request":{"raw":"GET /WrappedBotd.browser.protected.js HTTP/1.1\r\nHost: certainlywhenev.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/s?V7TI4WAg\r\nCookie: uid=8OkJWfymfBpRUWLNiVVbjIivEIfgmvA7\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 30 Dec 2025 11:42:57 GMT\r\ncontent-type: application/javascript\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Dec 2025 07:00:00 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncache-control: public, max-age=14400\r\nage: 2255\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bvRRAIGTWFwqTLEvOKARDjbZTczDVKy%2Ffh7okMjJhI1GxPXnfOJFZ4NkTeD5aiRC6LHN%2FiTLFUPQiuOYsErOJdGnZeEt5oypMM8w1XRbwD8N\"}]}\r\netag: W/\"69537870-1aaaf\"\r\ncontent-encoding: br\r\ncf-ray: 9b6146da6c9156c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":109231,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"95888320adab6afba4a8e0c8f06e8361","sha1":"c04b231b41d57f1cc95e66e04d8f2631a4b10018","sha256":"8fda68ace483a03aa4362a8731fff5b2a37d85aab3de76801ab8e225b217b2df","sha512":"e3a17ad670f939f563fe6d1dc507ab5ba99f90a4b6bc94364fa2f56d5c5ca1a552b0dbb973a4f68f7694ca9a8bf1a3ff3bf28b0dc1f4bf2fc796deef5007bd82","ssdeep":"3072:9ISWWZitd7yfmAa0Zzg/N8OSv0TfuuC8a5MAVCGNs:YhlLqD0TmPMAVCSs","tlshash":"bab3d79462472c958392d1ff142fb285ac2d8e51bc8fdce1d651c3959c306c78afbba2","first_seen":"2025-07-01T16:50:14.740307Z","last_seen":"2026-06-11T17:31:25.249264Z","times_seen":658,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:57.668Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700;900\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Tue, 30 Dec 2025 11:42:57 GMT\r\ndate: Tue, 30 Dec 2025 11:42:57 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":33510,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"49f2590313831152e2b656ca33b7fc37","sha1":"910db6f788b80561905582e510ed3a09ed752c59","sha256":"591b1c315e1d15fd0a13a83272e68f621d26092559ad6adbf0108012d22d3173","sha512":"65a0b79b9011b31f8b55a7a0ed8a5c6e55f992f775c21592c0502765afa716f01ef5c65e7abbc2d8681bda6ad804f2661072016fc5e529cf5dd007a9c1811837","ssdeep":"768:DDSDjDGDUDB4DiLDZD1D5CJmwBUiRDfMTcfFBhiEymDcTYeBai75tdmtC0BQiVPI:I0rAwyl","tlshash":"3de200a1041750009b838ce223cebf35fe1f52517142d0b5abfdab6badcbc66526936d","first_seen":"2025-11-19T00:32:15.532783Z","last_seen":"2026-02-19T18:58:31.233433Z","times_seen":1940,"resource_available":false,"data":null}},"time_used":142,"timings":{"blocked":58,"dns":1,"connect":7,"send":0,"wait":22,"receive":0,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"certainlywhenev.org/favicon.ico","fqdn":"certainlywhenev.org","domain":"certainlywhenev.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:58.005Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certainlywhenev.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 09:09:00 GMT","end":"Tue, 03 Mar 2026 10:07:31 GMT"},"fingerprint":{"sha1":"C7:6D:7B:0F:37:71:8D:9E:C5:68:B2:57:89:26:51:97:39:4B:62:18","sha256":"08:7F:F6:C0:EF:D4:A2:95:15:B1:21:FC:1E:0B:51:60:75:7C:97:2D:E3:4E:04:9D:FB:4C:E8:9F:AB:A8:67:E5"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: certainlywhenev.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/s?V7TI4WAg\r\nCookie: uid=8OkJWfymfBpRUWLNiVVbjIivEIfgmvA7\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Tue, 30 Dec 2025 11:42:58 GMT\r\ncontent-type: text/plain\r\npriority: u=6,i=?0\r\nserver: cloudflare\r\nage: 2019\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nlast-modified: Tue, 30 Dec 2025 11:09:18 GMT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qSKfyJsPFei9qrsB9gYiyAJUHsEu2xRHWocA8EM%2FsAKp5I9PJPBgwEcju2ESCchXUwSw0zZfQ2cdzPzSW694lUoVWHx2ayY4K8ktS806kgXN\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9b6146dc8edc56c3-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torealiukzemydr.org/UXZCbWd+SSEeWh4yECYqPD8DLD9hMRcsABMVJTsxECcUWSYHO2QZDjVLc19VZ0Z1WUEhHyZQVGRQMRkGJQMxUFZ3HywLCGxQNFBXf09sXUlgUDdQVncCMgwAbEdkHRMlGn9cUGdBclRTaEF6WVRm","fqdn":"torealiukzemydr.org","domain":"torealiukzemydr.org","tld":"org"},"ip":{"addr":"172.67.130.17","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:58.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"torealiukzemydr.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 04 Dec 2025 16:32:37 GMT","end":"Wed, 04 Mar 2026 17:29:41 GMT"},"fingerprint":{"sha1":"E4:88:98:0C:79:8A:86:67:9B:27:C3:69:5F:77:A4:65:E6:18:C9:F3","sha256":"6F:A1:4B:E2:F8:C7:BF:1C:EE:EA:6D:4F:44:EA:A3:8C:6C:8B:11:75:C8:28:F1:EA:BF:9D:32:1A:85:10:12:55"}}},"request":{"raw":"GET /UXZCbWd+SSEeWh4yECYqPD8DLD9hMRcsABMVJTsxECcUWSYHO2QZDjVLc19VZ0Z1WUEhHyZQVGRQMRkGJQMxUFZ3HywLCGxQNFBXf09sXUlgUDdQVncCMgwAbEdkHRMlGn9cUGdBclRTaEF6WVRm HTTP/1.1\r\nHost: torealiukzemydr.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Tue, 30 Dec 2025 11:42:58 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zlWifg95kzxhHZ4mWb%2FOLd%2BsGM3UbAvJoZYTA4olOd3BjO3lWVlnhoSclJFM%2Bkv7mk4nsfJmtwW5MASWcXD%2FDGAMDlqL8XakzBnlLYCxAy2DJ6k%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 9b6146df88288be6-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":42,"dns":20,"connect":1,"send":0,"wait":131,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-12-30","alert":"Sinkholed","trigger":"torealiukzemydr.org","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"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","fqdn":"undefined","domain":"undefined","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:58.448Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET 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 HTTP/1.1\r\nHost: undefined\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-06-13T00:48:57.833052Z","times_seen":16371984,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.justaredirect.xyz/9bFdkb","fqdn":"www.justaredirect.xyz","domain":"justaredirect.xyz","tld":"xyz"},"ip":{"addr":"216.150.1.193","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T11:42:55.206Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.justaredirect.xyz","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Wed, 24 Dec 2025 15:19:40 GMT","end":"Tue, 24 Mar 2026 15:19:39 GMT"},"fingerprint":{"sha1":"ED:30:33:1A:9E:DB:24:BD:AD:E6:0C:14:D6:2C:B2:35:1E:42:70:C0","sha256":"12:65:D6:3C:BF:F0:B1:3F:5D:B4:B8:4F:19:FB:E8:D5:72:95:73:82:67:CF:34:F5:CB:5E:F3:88:46:89:7A:AE"}}},"request":{"raw":"GET /9bFdkb HTTP/1.1\r\nHost: www.justaredirect.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nage: 0\r\ncache-control: public, max-age=0, must-revalidate\r\ncontent-encoding: br\r\ncontent-type: text/html\r\ndate: Tue, 30 Dec 2025 11:42:56 GMT\r\nreferrer-policy: no-referrer\r\nserver: Vercel\r\nstrict-transport-security: max-age=63072000\r\nx-matched-path: /[code]\r\nx-vercel-cache: MISS\r\nx-vercel-id: arn1::arn1::5trnd-1767094975310-e85ed251a196\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Vercel","description":"Vercel is a cloud platform for static frontends and serverless functions.","website":"https://vercel.com","common_platform_enumeration":"","icon":"vercel.svg","categories":["PaaS"]}],"data":{"size":624,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"15ac807c440b270cebe9d728b4b95144","sha1":"1cf1b722bb28900be426bfb1446b16e97dac64e5","sha256":"3e048153d0d59237ef93e9570596865ad46c52b0b54390725bd666fb24ac4675","sha512":"86f783ca7bf2317de363cb78a9b94aa6d536dfb91d6703d2f8abec540bb987030391fdc24de87b4a29b7b72e7985f4c64b4ce75aa30835d5c49dde1dc1c31ee8","ssdeep":"","tlshash":"c9f0e1c718f3c40414b289264af5f21c3de2209709a8e442b8cda3454f84b8bc5c3fd9","first_seen":"2025-12-30T11:43:22.64154Z","last_seen":"2025-12-30T11:43:22.64154Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":100,"dns":73,"connect":1,"send":0,"wait":10,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"certainlywhenev.org/s?V7TI4WAg","fqdn":"certainlywhenev.org","domain":"certainlywhenev.org","tld":"org"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-30T11:42:57.257Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"certainlywhenev.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 09:09:00 GMT","end":"Tue, 03 Mar 2026 10:07:31 GMT"},"fingerprint":{"sha1":"C7:6D:7B:0F:37:71:8D:9E:C5:68:B2:57:89:26:51:97:39:4B:62:18","sha256":"08:7F:F6:C0:EF:D4:A2:95:15:B1:21:FC:1E:0B:51:60:75:7C:97:2D:E3:4E:04:9D:FB:4C:E8:9F:AB:A8:67:E5"}}},"request":{"raw":"GET /s?V7TI4WAg HTTP/1.1\r\nHost: certainlywhenev.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Tue, 30 Dec 2025 11:42:57 GMT\r\ncontent-type: text/html\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\naccess-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers\r\naccess-control-allow-methods: POST, GET, OPTIONS, HEAD\r\naccess-control-allow-credentials: true\r\ncache-control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0\r\npragma: no-cache\r\nexpires: 0\r\nsurrogate-control: no-store\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tMncdARU0xLmj71a%2FKCpTBGDouQc3XORLqHnclcXyhMTAr9D1y2rSfLpPEgKGh0IIHX0lMJlzZs0dgDVmZa3GB732RRJqCFg420MXyNrQpBgj%2FQ%3D\"}]}\r\nset-cookie: uid=8OkJWfymfBpRUWLNiVVbjIivEIfgmvA7; expires=Wed, 30 Dec 2026 11:42:57 GMT; Path=/; Secure\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b6146d84e170daa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95557,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (61117)","md5":"0fda21e5c1cbbdfc8842e19e6bc9f64d","sha1":"b787dedcff0811bea7b7b4f33db6dd01fc7a2e22","sha256":"6f024e2b6ba5063b8cf15207df966201551127965b8c7b7cca82de38aa515709","sha512":"5bb12b2b1df1daa5ac7224321c736af4847049516ed13a00d58175f56f58a89f12b9db4fe450a48da8e73aff778cd4483e9e5d651fac06869f418dc4753769e2","ssdeep":"1536:6HFSWp4Hu0GqdPcgncjjH0GhBYaL8APizoV9dSywhyd5vfikUo5gWVBYvri7:6HOHPnyHbhBYaoA6y94ad5vak3nAri7","tlshash":"559302805ad805a2177b112e6af33b249356bda3dd49c5083ebce386cf8ef95c167235","first_seen":"2025-12-30T11:43:22.642445Z","last_seen":"2025-12-30T11:43:22.642445Z","times_seen":1,"resource_available":false,"data":null}},"time_used":375,"timings":{"blocked":67,"dns":51,"connect":1,"send":0,"wait":240,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d33f51dyacx7bd.cloudfront.net/?tid=1226074","fqdn":"d33f51dyacx7bd.cloudfront.net","domain":"d33f51dyacx7bd.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.241.100","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:58.097Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?tid=1226074 HTTP/1.1\r\nHost: d33f51dyacx7bd.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://certainlywhenev.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 74924\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Tue, 30 Dec 2025 11:42:58 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: C3jkmQxz_6zM_2LTri58mFkyZ8H9XfDu9NLjNAwDRcTgPLB1vpBfQQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":277596,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, ASCII text, with very long lines (1264)","md5":"2e82f859acd3d7252bd15aa6947311c9","sha1":"1bdd2c970e93ef06d32bb0b48047cce3bdeefd60","sha256":"203feb9740a8c954a34a7261b9eb4ae6451a2719ad15b338d92c5d412c0f6ba1","sha512":"bc7b2b3d141635642061c06d859e11a6f44563c5b396d19e6f367809b36c949e03cb250b5d50d24c310bfbf709cd7dbb1cab5ec21b4334a139b9832c8b72a283","ssdeep":"6144:1G176BACNa9RaEJEthq2fmCmEmtt1HZxEb3Q6OyoSZC:w176pNa9RaEJEfq2i5xEb3Q6OyoSZC","tlshash":"30446c256622310aa17351eeb0fa6785f065d014f9024ad8a4e5c87cb6ddff621fb3ec","first_seen":"2025-12-30T11:43:22.643478Z","last_seen":"2025-12-30T11:43:22.643478Z","times_seen":1,"resource_available":true,"data":null}},"time_used":387,"timings":{"blocked":106,"dns":96,"connect":1,"send":0,"wait":172,"receive":4,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://certainlywhenev.org/s?V7TI4WAg","date":"2025-12-30T11:42:59.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://certainlywhenev.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 24 Dec 2025 21:59:25 GMT\r\nexpires: Thu, 24 Dec 2026 21:59:25 GMT\r\ncache-control: public, max-age=31536000\r\nage: 481414\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-06-13T00:52:16.184922Z","times_seen":355715,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":76,"dns":1,"connect":22,"send":0,"wait":22,"receive":1,"ssl":51},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}