{"report_id":"8e6f3170-c829-4422-b055-f79102db3a75","version":0,"status":"done","tags":[],"date":"2026-09-25T05:47:39Z","url":{"schema":"http","addr":"homesdowttups.com/31626547862","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"172.67.156.160","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"title":"Nazuna 飫肥　城下町温泉 | Booking.com","dom":{"size":167720,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (36574)","md5":"764d42a3eab58e58b86d1231db30dfab","sha1":"d0c31375b8c56d981c623ca87c1f3cfa3d512871","sha256":"446e8524f60dc7e26f5dfa7f27853ff391e2d720c5ee68379f8ac38f16d6fd75","sha512":"3a4af90c9ca10b4dafb264e70fccf0108cc4d1ab01e7218b9b3282f57ec50d2b63534059d3258ffdc402155dc9a267d68ba50b44f626b979f9bda05238e9111d","ssdeep":"1536:6qXgq+Qp608FPUjsXPIiE/o1mYnYf5npZsj+:6q9+1Usb1cnx","tlshash":"d2f3d1330669a43b0077c2c874b55b36d295de0ffaa60a457eecd3f61beac91b917009","dom_hash":"domhash992f6237c07834268251a4613ba74116","first_seen":"2026-09-25T05:47:46.978845Z","last_seen":"2026-09-25T05:47:46.978845Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"homesdowttups.com/31626547862","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"172.67.156.160","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:47:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":3,"received_data":148035,"sent_data":1728,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.travolution.com","ip":{"addr":"51.104.28.82","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United Kingdom","country_code":"GB"},"domain_registered":"1999-11-23","domain_rank":0,"first_seen":"2014-04-06T10:06:03Z","last_seen":"2026-09-12T16:23:05.241334Z","alert_count":0,"request_count":1,"received_data":5042,"sent_data":623,"comment":"","tags":null,"fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":8265,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"flagcdn.com","ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-04-05","domain_rank":30920,"first_seen":"2020-04-05T08:17:33Z","last_seen":"2026-09-18T18:19:28.274238Z","alert_count":0,"request_count":41,"received_data":43112,"sent_data":22017,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"homesdowttups.com","ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-09-23","domain_rank":0,"first_seen":"2026-09-23T16:32:19.468108Z","last_seen":"2026-09-23T16:32:19.468108Z","alert_count":57,"request_count":19,"received_data":490862,"sent_data":12012,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-09-20T23:08:06.309324Z","alert_count":0,"request_count":6,"received_data":600463,"sent_data":3299,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"upload.wikimedia.org","ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"domain_registered":"2003-03-16","domain_rank":4329,"first_seen":"2012-05-21T09:39:45Z","last_seen":"2026-09-21T20:41:57.720957Z","alert_count":0,"request_count":2,"received_data":8679,"sent_data":1184,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.15","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/include/lang.js","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c13689f2d5fb7850df1e2a77b6aa7f7","sha1":"e080fe8889b61ca455e2612b515235cd2e9f475d","sha256":"44e01a8f39caf9419cc69d74978b62a4b185f358468f9dab89f1cc83d278bc04","sha512":"2295c61f1c5a725d20e265e245c707a7009fbc376ddf1e9b86c35bc00cc1a9e51f8dd3a31d99037c47df2baef794cc18178135e10108c26c3533d78a6f135f83","ssdeep":"6144:OD1x6Y/uyc2KS/pjK1stgqVjqRapBah3P:OD3pjK1sC4jqRap0","tlshash":"53740abad6d05c5700d07756b88a7a2701a843372f41b9dabb9ce65c0fced6f81b211d","size":355048,"data":"","first_seen":"2026-09-24T13:26:26.414885Z","last_seen":"2026-09-26T12:52:39.938585Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/include/handler.js","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"89204121eb04886674e7479fa78e6304","sha1":"2187273cfb63dec1625e321693782a3e03ed6b1b","sha256":"8d53c01dc39167d563277c26624f494158d5c24df2a62dedb2357518fe9608b0","sha512":"13ee8174ce0ec550b82a316a9d421414e63fc9e5a8b14929499d88a00f3f48ca6c347d4d7dfb1e5fb58d00408ff9391e450a1bb5461bf8e53d8b42b5dc0b7cfd","ssdeep":"384:B7FPpNx2iNL4AWq/x5deIJPnTvgvnXDSk9DRAuNZSB6pYizs93obh:TPV2oJReIVgvTzTAuqAOO","tlshash":"28d2b69ab8f7243148bb307b77ef994a367240034845ea00bd5cda895f90de09776fe8","size":29099,"data":"","first_seen":"2026-09-24T13:26:26.403557Z","last_seen":"2026-09-26T12:52:39.927834Z","times_seen":18,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.2.1/js/utils.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"66361e32c06f29cacc63c0648bf7f31e","sha1":"265b72ed843253c595ee629d0c9201dbe5328d7e","sha256":"7b8fa25cbe5eda2c2e19eb168b100fffd42d2f75a0dcafe808ac61d139cb626e","sha512":"de8ba753ba0a78bf79f88df466705be9b580612e11b57096ee406da7cfc93aa5cb76124d2c20e47a18bd7b43bc7308d607147a1cb0af02d0cab2501c962ba749","ssdeep":"3072:3PB30j8BAJjFs3OwPss3MwP2m9OOVS2x0T3TdxQgnGHIpUsW5jkmLNjoopuDs/vq:3PB3RyBu5x0T3Tdxsnbm","tlshash":"1444e0ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","size":254105,"data":"","first_seen":"2023-09-12T01:07:29Z","last_seen":"2026-09-26T12:52:39.954739Z","times_seen":2050,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.2.1/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5e243d9abb51d431ff2184d2a9a40c5b","sha1":"c4c2883bfc1614540d0955957ff6cfd3f873126f","sha256":"b80ed4d13bf572a788637e2e5e5d73519c4d65a2a9a70c27e41c893cc6fdc90e","sha512":"b99652f2bb044d72505fa272e7b65d73b3c098ff371828c2d45fcb5f4c548f5db06394a57d45fe0959d81445fcf5da2eb503de15b23d163502929b935aa941c2","ssdeep":"768:kqD7GRXOoS+D45YPI3QW6O2Eix0Pthyv4pII2iCJm1R:ZfRQWB2xothfIIZCO","tlshash":"74d22a9973512237a89ae0a1587f16476ebf34015684cc9cb8becdc80feced9a1b5734","size":31006,"data":"","first_seen":"2023-08-03T08:00:52Z","last_seen":"2026-09-26T12:52:39.937957Z","times_seen":2248,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"flagcdn.com/w40/es.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.803Z","timestamp":1790315220803,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/es.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-17d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1658153\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J4idSuYrb0z5C5etN111RTc5ibxXivzQroZrCQFDcMWEyQh6Vwydhq3MiixWeSJeeF1vIkoyPhweeVkuz%2BpfaoWr%2B3%2FP6hWYeyIbjzR5rQyFEFUPItdVjxYuEnGLgA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521ba7b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 381\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":381,"size_decoded":1211,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"adf690d495cb81a5ffd3abe9893b0f72","sha1":"dcc3b37c7a1f993fd7a62421ed5ec3b415d92fcc","sha256":"5a56dcaa46c8322da58e08ac0163f44e4f036fc82b866f7c2608f02e31ce0641","sha512":"5c305d85893cfa9d05924fe811e8fa4bc7b0c70883456bc204e406c1a8b9b67529785a288910e0658d4e2d6b3de688ccf0c0fd9b4bd7bc09085ef2d06b10f3b7","ssdeep":"","tlshash":"4ee0f1cca5ae0c2ba9d440625c68a25cf42a390723031e2cb18ec8c65649099088c105","first_seen":"2025-07-04T08:06:50.026505Z","last_seen":"2026-09-26T12:52:39.957149Z","times_seen":542,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/cn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.823Z","timestamp":1790315220823,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/cn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-dd\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2224765\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dKbslPFDRJLS9PR0qW%2F8do5BiWfexz0Vqn70f9APdWVjup3MTZsBya3Qh7P0okJN1R%2BRgS2JPJH0nhTSAJDPBj7HyjetidlXa4Limm61RzUZlWrfwGdDrzQ9eisBOw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb522bb8b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 221\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":221,"size_decoded":1048,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"6d014db439c5a09b5cf0265976cbbc65","sha1":"54f66f021046f96ff8a23b4a4e1bd8067fe159af","sha256":"5963de4e9e57e0371ec9c66e5f138d82d317081cc63f980d92ab199bdbf6c3ed","sha512":"05c33dd08d44db7a56fffa7fe2afcfd812a8434a24c52247279056bc0c61abf75731005cd5c63cd7d50e28f9797bc56423063f6800a455d88b8b752edab8e30a","ssdeep":"","tlshash":"1ed023cb135d4ebedc815563c451d0cee474951c464100531e5548341891e4df35f75d","first_seen":"2025-07-04T08:06:49.928433Z","last_seen":"2026-09-26T12:52:39.914856Z","times_seen":251,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/th.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.840Z","timestamp":1790315220840,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/th.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-71\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2442163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EuE1bEMkQuTG2iNnc9TR8XCMrRKPzQdGvRR6CSGQzvk3tKipFuu9IBIXfQZxhg1IZCRqICv%2F9kDgTuysA1S5TM3nQAzG4mgagGhrLgV4cDOGuk7dZCtOfyji48%2F4lQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb524bc6b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 113\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":113,"size_decoded":940,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"f9113c0106218dc93e93e91c0f68102c","sha1":"638344119bceff106d1daded0746582060bc3665","sha256":"f91dfd0057a2e7a4df04aaaffe89763f17687b70500682d1603ccc44934bcec4","sha512":"c3f0ee3d6179ebde35e8033ce811b36f500e4b5ddf43ecf1c746d2de21d7673c1bba9deb5e9807e7729cdbdd322b809558faa1a33228429818e2e9f8fd147f61","ssdeep":"","tlshash":"34b012d1a68d4c7cff3581337e14001bfca13aa50276416f610da4b5673d13ad0457c6","first_seen":"2025-07-04T08:06:49.945687Z","last_seen":"2026-09-26T12:52:39.908406Z","times_seen":195,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/my.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.839Z","timestamp":1790315220839,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/my.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-10c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2442163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MCmXuCArqcMKv2IzD2J4z%2FSYvWYyylGraDtw5%2BMkErUO6zwpqg%2FOmjdnOv6MMbRq%2FaV%2F3p1PVjXPFyYPpYD0X%2FQTL2bkiWfBDUF91Dlyj8FZWf3B4eEu7PynyItTIw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb524bc5b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 268\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":268,"size_decoded":1104,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"e788bc83af68c6bf5dd46061accbf66d","sha1":"fd114c05ef4b098336fbb94dbf32bd54ce25eda4","sha256":"a475af354399c26ac818dd263a32ec366bc7f26d940ee7d034b072471dc30cad","sha512":"c64781d790ac8e1fcc76c178b902b7c8adddc1ee34eff0cdd932b0cb7c57d3322771a1b3366d358d2cee44f9f5e6274fd09a379faa1d8d9c5ab6c0f4bdcf268b","ssdeep":"","tlshash":"dbd02bda36d3be65a13153e2c9b4654791200265172a6ad04125b53291025a580c92c3","first_seen":"2024-10-31T19:28:53.263862Z","last_seen":"2026-09-26T12:52:39.91209Z","times_seen":151,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:33.808Z","timestamp":1790315253808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundarydc80737a8805915e9bd81d18dd3100cc\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundarydc80737a8805915e9bd81d18dd3100cc\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundarydc80737a8805915e9bd81d18dd3100cc\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundarydc80737a8805915e9bd81d18dd3100cc--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:33 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BWf4vof8GFMXbwpedBoSSy85JBIVgb34ZpxL1uED6oyEf5bR2myzFyLWNRDCOhDRMMxeSKu%2B%2FVRiJHIM5%2FuJrgEy%2F6kzuR%2BY%2FSoyJyRVu6aRVxmckLcvMK%2FTu7CzeXX%2FkDbttA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bc2049c249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":1001,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sa.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.833Z","timestamp":1790315220833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/sa.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-125\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2070849\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pq%2FD38IvxbkA5gjTMXUQFpL9UkcMxKuQ0iAg3LDWFO0CpYXabceclRQ95TaC4yyZ2u9l%2BWoAbmEtBArSemThRiGBD1a02AVOsM0WmLr1OwTibCmVW8u5iitFXoSngw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb523bbfb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 293\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":293,"size_decoded":1121,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"bbb750d925fdfaecaa4ff771683921d0","sha1":"3818283be28c1dff2bbe1c913a00de5a149d26eb","sha256":"90a4c4d147a942f01d92ed26ffa829ace8a8257343a6d4adef979105e548f9c8","sha512":"c33a82dc6e22a8f07164ac5b49dc68f27afec7f3cb134064f23ae665b7fd6c5c66509e45616c0b99b95f1bce6d38b5c98e53377dc0d2c42cc358a93e91b8b980","ssdeep":"","tlshash":"ace0cd7d20865c35464411b3a71415566db2f7781249151228788836176112577e939f","first_seen":"2025-02-01T01:01:45.046249Z","last_seen":"2026-09-26T12:52:39.931692Z","times_seen":285,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/lt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.844Z","timestamp":1790315220844,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/lt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1818528\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8POJBYOQWV5%2BEXX4pxw%2BlE2cn5ltPJ%2FjgNGpkcW9l364m1tJ4x1z5JCXQkuKYJJI8upJVUnNaU6ohHUa0%2F9kq5CO3nFIwqLs7jze%2BU7hG6haS9OsMsjjP62TBUx8tg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb524bc9b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99,"size_decoded":931,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 2-bit colormap, non-interlaced","md5":"e701f6c199add484235a73d9171d9a21","sha1":"f42d4f5a13d61cdcbcdbb981ed61b24a9aacc24c","sha256":"f61fee8a181f2362d47290a7a7d03bd243d68fbc305c3d5aaddba9634e44d8d6","sha512":"e5ca9d81497b87471c760becb17edb1bd297b8de45a0c1f2313bdc0a16aa58d97f08eb57e6966764e4d3d798a86610ad06ae7245641544ba4f797f22a44a0408","ssdeep":"","tlshash":"32b012f372c01c24f3d583370a0705149a1843355339050b5124c11316d510c82cc9db","first_seen":"2025-05-27T23:39:58.525561Z","last_seen":"2026-09-26T12:52:39.949715Z","times_seen":132,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/nl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.802Z","timestamp":1790315220802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/nl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1998466\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=47R9%2F%2BBd4f7Gj4YGb9YklN%2Fq3Kopxe5Cy3YhQXWutwFS5oI7F%2FmKupi9j4uyqQWg3BMjRVKvlvyJGeHpkE%2Bwf4wvxcN9yH7ywsV3qgc47xsckTkbgPPz9uwwrH%2FTqg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521bacb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"e2b17e6cd3aaf593e168d8527a24c362","sha1":"c00a6a8198de115064fee2af586aa42b88f0e606","sha256":"4b3d9a01137049df859c894008855d4b35d9e1aa30c9af7978b5449e28feb1fb","sha512":"d3491eb4e3ea0f6c818f6a17af72a16420a2360a714163477e03b07ddbe566377d40b55aadb28a34677072ccbd13b664aadc50c4248218bd7112291f7d159a83","ssdeep":"","tlshash":"f2b012e7318e0c77cb900123221d8210dd2c01510130465b315ec3655294408d48ada2","first_seen":"2025-05-27T23:39:58.552367Z","last_seen":"2026-09-26T12:52:39.933519Z","times_seen":410,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:46:59.937Z","timestamp":1790315219937,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"GET /31626547862/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rrfPHUn7yRgdO65ctr2SmQIOk2bus5LitrIen7i9ngA2xoZv%2B7I%2Fk6RE4QaShw0p7dH2QrGpeoMRG5gnlMlzRS2vRw8n2E4n6lJdh2DcjFr9Cb%2FtjaHEmGWHDOg1LhF6XO%2BxSg%3D%3D\"}]}\r\npriority: u=0,i\r\ncache-control: no-store, no-cache, must-revalidate\r\nset-cookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; path=/\nUID=2ILDVPHD; expires=Sat, 26-Sep-2026 05:47:00 GMT; Max-Age=86400; path=/\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\npragma: no-cache\r\nvary: Accept-Encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a407bb4c9f4349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":[{"name":"PHPSESSID","value":"onc26uuujdnrphklelugqbl2na","quoted":false,"path":"/","secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"PHPSESSID=onc26uuujdnrphklelugqbl2na; path=/"},{"name":"UID","value":"2ILDVPHD","quoted":false,"path":"/","expires":"2026-09-26T05:47:00Z","raw_expires":"Sat, 26-Sep-2026 05:47:00 GMT","max_age":86400,"secure":false,"http_only":false,"same_site":"","partitioned":false,"raw":"UID=2ILDVPHD; expires=Sat, 26-Sep-2026 05:47:00 GMT; Max-Age=86400; path=/"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]}],"data":{"size":47587,"size_decoded":9449,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (702)","md5":"9e617c25fe61a8141d26655a7eadd8b7","sha1":"584b79babbd1c576c16cfd8a1e8dc21c47206d95","sha256":"07c73b44d8f69d3b51cdd0a1213dafc2fab3a5a4e0f7167d3aa63928f84ee63c","sha512":"9f13bb090d263069b467b0c8e612f9c32c42ce1eeeeeceb964adc2bca9e36d878b6cd7c1bbc04c69d5522e19806f6a155ecb84ff316010855ed61087e6e1349f","ssdeep":"768:ihq9RAyneGfqezG4/MQ5MGxSbuFdPiqK9/p:lE/gqey42","tlshash":"0c237365a1f8556f61978bc4a9fa5b172f99d227e6490250b6fc87b00fc3cc2ee0350e","first_seen":"2026-09-25T05:47:46.992309Z","last_seen":"2026-09-25T05:47:46.992309Z","times_seen":1,"resource_available":true,"data":null}},"time_used":160,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.2.1/js/intlTelInput.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.503Z","timestamp":1790315220503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/18.2.1/js/intlTelInput.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 115350\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Jul 2023 16:33:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QLjxCqwvw%2FAT10qRKt3tUByUuVUPVKXUOdTe4xBrDlR2FBS8TrjfXDjXpS8%2BEV6r2INh0B8deLSHS0d20XEAUGxEwFCsUyNzFQ0UALDjq%2FpN3Z6gBC7QRKkajfMZWz%2FegSTa72qE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a407bb502e9e568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 9407\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31006,"size_decoded":10426,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (27345)","md5":"5e243d9abb51d431ff2184d2a9a40c5b","sha1":"c4c2883bfc1614540d0955957ff6cfd3f873126f","sha256":"b80ed4d13bf572a788637e2e5e5d73519c4d65a2a9a70c27e41c893cc6fdc90e","sha512":"b99652f2bb044d72505fa272e7b65d73b3c098ff371828c2d45fcb5f4c548f5db06394a57d45fe0959d81445fcf5da2eb503de15b23d163502929b935aa941c2","ssdeep":"768:kqD7GRXOoS+D45YPI3QW6O2Eix0Pthyv4pII2iCJm1R:ZfRQWB2xothfIIZCO","tlshash":"74d22a9973512237a89ae0a1587f16476ebf34015684cc9cb8becdc80feced9a1b5734","first_seen":"2023-08-03T08:00:52Z","last_seen":"2026-09-26T12:52:39.937957Z","times_seen":2248,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-regular-400.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.704Z","timestamp":1790315220704,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-regular-400.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 259530\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1edEmSOuITMrwt0NFeuWm2Uk2aLrDt5vHLgZsMbvLh9XRDSk%2FOR%2BJMB2%2Bu%2B6Kb8r6t%2BPescXM76xwKiZpvfqUAjhYAUYlfoE0ahcRXc2iSVnVEB%2BEA3rrP8b314gCaGzeQmNrEOK\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a407bb516ead568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25392\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":25392,"size_decoded":26396,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 25392, version 773.1280","md5":"aa7c5fa494807f7a9ec907defee083e8","sha1":"8c9331bf363872cd84f2d1089b4d72fc21784cbd","sha256":"c27da6f833431da5aa295c44540bfac0fd8270ba6a3c4346427006d8a7b34b76","sha512":"67762c4dcf59c2e2989d3bd7294b9f80cf61e00b437230a94a30993af60e060fe2ecdc34510a3c37b026c6d16b7151e311a1cce99fffd5c1771b6332f2e0c53f","ssdeep":"768:P4XxqHUwrxhT2ZYg+pQZizxLhcgUlLPpxN:PHbdVxLoVl","tlshash":"16b2e0ce0a4e788bd827853d6ad45d4e9cb3c1c26bad90aedd3f06dd132b388e56d441","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-26T12:52:39.95535Z","times_seen":3703,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/no.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.811Z","timestamp":1790315220811,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/no.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-a4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1896390\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MeZwYyajFwuk7ZMFLXk%2FDCoeVMtj%2FtKlG2G4ff2krmVUu%2FIB6UTemcVXllImmhhVfUeYINGc55neXdvlIYf5UBOyDQcHLgvKFMWiThf4iR8e7VkpfHMEXNChbpZouw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521bafb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 164\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":164,"size_decoded":993,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 4-bit colormap, non-interlaced","md5":"9d9545b9ce771270e7a1a09765cc48b3","sha1":"bdfa440b450c434248da8e98daf25faa49e0b32e","sha256":"2b03bf0a83b55ad0d9ebe2576dddc0d1eee11ee8cb6476363e2649ce9baaf003","sha512":"74224e9d0ec0d6e2efd01835480673ffec46660303e9b2886335c9262d4300f6ce7a868d321d66519fc71ce355584f8aa08550180a6e6dba458c3f9501c6e8bf","ssdeep":"","tlshash":"e5c080c17fd55cb5d5c7657a2421402158f9345877452d0144545a1158d711c71c918b","first_seen":"2025-02-12T08:32:15.780066Z","last_seen":"2026-09-26T12:52:39.951661Z","times_seen":303,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/hu.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.820Z","timestamp":1790315220820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/hu.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-72\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1896391\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dlfFDHnqDek%2B3jmNE2nassip%2F5dTf9b34ghjkoBL2mmN8G3YBxHEOSwxVltY0dfgY5R65aBFhE%2FGvGy3%2BSv9WsdfeB1XUsbTsWPwCDkM9u8y8MkRkywIi16n1807hQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb522bb4b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":114,"size_decoded":945,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 4-bit colormap, non-interlaced","md5":"dc14b69c6933e8f2beb73eea8c8d3f83","sha1":"8568c37d9731419fba95c23f9bb0385134378671","sha256":"6868cbc41a35d95893901775790658b7560195bc6f01bc029df3d63a3ef773e5","sha512":"20381049fd0025b5eae8b126f03d5acb8204d34eed3a56f8501b6f049cd08c3e4b023c8758caa5dde0a046e10ee4f929652cbd45800c4482043b38091ded0cef","ssdeep":"","tlshash":"a3b012dbebad7d35c6ab17b602180800c5352a365a37200e04cfe8d78850b4ea04c283","first_seen":"2024-10-31T19:28:53.270075Z","last_seen":"2026-09-26T12:52:39.944601Z","times_seen":173,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/id.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.838Z","timestamp":1790315220838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/id.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1769932\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1maDR%2Fn%2B9laENFVsTjLU6rebHEUcuvNrG%2B1hDtarOx%2FRSKOe28l3B1mw6eGF1sSDrT4ixB1MBRkvpCBV4IQwRJu7yVWcNAYY8hVZ675XygJ1pvj0sBsLEIVWDU9KDA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb523bc4b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99,"size_decoded":929,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 2-bit colormap, non-interlaced","md5":"2f63675132fcc40546658e589d7155cb","sha1":"6736b5323b829622b1f8edddc4133e199b0f3cc7","sha256":"b2cbe304f50cdb9dd976b9221512116318b608c2bd6dd44ab67b66f739e86064","sha512":"5ca5c8f8653cb858018a977751b090d72c9456c09c96dbeb2c89b30fc31eb83211f529833ce3c8fee1127b45230998b66447576157c8cd3eacd56e1928f70263","ssdeep":"","tlshash":"f0b012c633000c76c7504733f504c11dee35015505268007554cc62f6190409c08a9c2","first_seen":"2025-02-12T08:32:15.807327Z","last_seen":"2026-09-26T12:52:39.950333Z","times_seen":195,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/5/57/Visa_Inc._logo_%282014%E2%80%932021%29.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.517Z","timestamp":1790315220517,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 05:19:15 GMT","end":"Mon, 09 Nov 2026 05:19:14 GMT"},"fingerprint":{"sha1":"52:17:30:E7:B5:4D:78:C3:1A:27:27:36:2B:27:EF:C7:29:CE:9C:13","sha256":"AE:63:EF:37:2A:14:17:F8:1E:87:39:CA:5F:A2:71:13:FE:DF:F3:0E:88:8C:B9:2F:7D:A4:27:15:B3:2F:A8:CE"}}},"request":{"raw":"GET /wikipedia/commons/5/57/Visa_Inc._logo_%282014%E2%80%932021%29.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Thu, 24 Sep 2026 10:53:56 GMT\r\nserver: ATS/9.2.15\r\netag: W/868532cf55aafd9b14b8235b3e8353d1\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: bgc8kj84ccql8vgyo7irxo6no7d10uh\r\nlast-modified: Mon, 16 Feb 2026 08:23:18 GMT\r\nx-ratelimit-limit: 600000, 600000;w=60\r\nx-ratelimit-remaining: 599999\r\nx-ratelimit-reset: 56\r\ncontent-encoding: gzip\r\nage: 67984\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/133\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=9kWXMfoafwO9DjZ1dM8YJgPmAAAAAFvd10VnwHZxHyN1AK_-vruIeGrBfqQUZY9v;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 25 Sep 2027 00:00:00 GMT\r\ncontent-length: 1887\r\nx-request-id: d20268df-d6ba-4635-966d-39744f97220c\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"WMF-Uniq","value":"9kWXMfoafwO9DjZ1dM8YJgPmAAAAAFvd10VnwHZxHyN1AK_-vruIeGrBfqQUZY9v","quoted":false,"path":"/","domain":"upload.wikimedia.org","expires":"2027-09-25T00:00:00Z","raw_expires":"Sat, 25 Sep 2027 00:00:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"WMF-Uniq=9kWXMfoafwO9DjZ1dM8YJgPmAAAAAFvd10VnwHZxHyN1AK_-vruIeGrBfqQUZY9v;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 25 Sep 2027 00:00:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Apache Traffic Server:9.2.15","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]}],"data":{"size":4286,"size_decoded":3960,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"868532cf55aafd9b14b8235b3e8353d1","sha1":"620e036c9874ceb043a3ad357f3aa906431fa389","sha256":"bd3ffe980db7c812feea565a050d0f344f68a31d36d5c03dbeec8220545827ac","sha512":"b4b4557f9aba8a745f2dff86d500cea59d9f0b87a6b3687bbbb096cbfee4ffcbb0749c5c21d6b29b61f96e2095291b6604933f4fb6fd139600694c3baf0e4521","ssdeep":"96:qL2koIanLDRXurRDDh/IVoLVuhEUqwUhZyQ2Qpb:qykDgve3Xx","tlshash":"e491b605e2190cf6d11dc3d9b8e05953d20e78a3a6c04861feec9769ef415c373aa79d","first_seen":"2025-10-07T04:27:54.718234Z","last_seen":"2026-09-26T12:52:39.939184Z","times_seen":23,"resource_available":false,"data":null}},"time_used":177,"timings":{"blocked":101,"dns":0,"connect":20,"send":0,"wait":22,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/mx.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.806Z","timestamp":1790315220806,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/mx.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-148\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2224765\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMb2sxnCzKVLGpEQSWN6gvc0pkgZpE2i6dV4s%2FwXtRL36%2B4WzI3PhH%2BcdkwDk9mR2U8E56H02NspOS2OjhkghZaFmPdQ7CNRIaboALXXnVmg6nUer6n9HjNVyWd1bQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521baeb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 328\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":328,"size_decoded":1158,"mime_type":"image/png","magic":"PNG image data, 40 x 23, 8-bit colormap, non-interlaced","md5":"f040b8e7f801f64ebdea9fe8ca112eb4","sha1":"e1a7f69bafb5773ee1b24c32fe0b1519e1720cca","sha256":"323c56a91a0e8db1fdb52bbace8b2088805259c9f3500e869df2d311d53d2c45","sha512":"f468530312b90df6817ecbc64d1e90a45f6f8b524f9cae72682bbc4b2a5f08ffd1aaab5c361b05e14d66ff2fcad14a10ab35042d43526b947b421d189238903b","ssdeep":"","tlshash":"9ae0c6c90aa1af2ab0db5aab402c3201e600b7ab8030ec05928791224a19017c1c33ae","first_seen":"2025-07-04T08:06:50.001391Z","last_seen":"2026-09-26T12:52:39.943437Z","times_seen":158,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/fi.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.814Z","timestamp":1790315220814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/fi.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-7f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2304507\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qIGV%2FujuRTXlF0pR7qYr2qkhjGvsF5LJzqqGYPj%2BsaexteTvbuSnm0f%2BsvsZyX1InsEtJ1N91l5AkYmcMylNs%2BMW%2FaJWyL8sPc6GItO3n5fnh%2FF73HvwWWxP1B27eA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521bb0b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":127,"size_decoded":962,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 4-bit colormap, non-interlaced","md5":"44d2cff2e0e4de3cdbbe0e0c819f1864","sha1":"754440e209a44854a4e9ea75e55620b7871dbb49","sha256":"7239c8caa2b1c5c37268586162e72cd7d2e43a6c8908ab960777d0659ce40bb3","sha512":"38ce731db0c6bf552caad0c3c1034a229d34f2ffa8800cc446dd3f528652afd64eb642b824b723c89440193d2237ff39df357dccbb40ca41e13256fbac359087","ssdeep":"","tlshash":"c6b09bd2a644dd2451050177562d5004df31415d91454517841df92921a9d8dc05d7f1","first_seen":"2025-05-27T23:39:58.63136Z","last_seen":"2026-09-26T12:52:39.914213Z","times_seen":163,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ro.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.821Z","timestamp":1790315220821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/ro.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-6c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1983213\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ED7eSI5ECGxy6fmp0wa3toXdz4vf9eWuZADW82H7Hmfj2LsyL%2BPnFOXyHIEVl7yqN0YfcJ7znXX7o7IazJ36vQXwormrNOnb6tQxNb2NhwH7N0%2BxxrtTknW2Me5Svw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb522bb5b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 108\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":108,"size_decoded":935,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"9ea153c38b2e8868b3827235ddfb3afb","sha1":"1e19aa4d008a81e32d702f14d7cc3e617ebc6beb","sha256":"9355b17bd96d7d1f2b47b49249c1d992025c56b6074fac63893c03ecb600de23","sha512":"6ae8362185dab2d6da86effe09bd2caf40313c90ed8d517404f0114599a9b9d7aac1003d0d210efc10ebf1c2436f63f9a62856f03b7b9ed64688fc48a5374c2a","ssdeep":"","tlshash":"c9b092c2a9187c24838a0166d23811d39c39253a122142a7988881582a1512dd888246","first_seen":"2025-02-12T08:32:15.783563Z","last_seen":"2026-09-26T12:52:39.957688Z","times_seen":188,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.830Z","timestamp":1790315220830,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/tr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-117\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1901097\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t2bnCe3jDPB8nOruHSD3fWG5mbMt7Q%2BECu1ZbnfXXz1AR%2Fh4Ri0gh0RnJuOe%2Fp9XFB4rjP0ZwH7xK494cyvTJAuRElhjFovIbKVyFsbK23r10zSi8HV2lWFASjA4IQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb523bbcb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":279,"size_decoded":1109,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"ed12db7842a77c4c5dbea10cb5ac3cb0","sha1":"9cfc356eb8019af8e91ba524197e4f783ce5c3bb","sha256":"ff9f42a374f310e7f778eac16582344a816e84ea466925c196c6659ed3d603ff","sha512":"f9dbed76f6877a3739465ac67e7432f9b0b787b3de8cc2c5a238b77cc0e63db924fd029700569db80d52530a66845f8c9ce3c0096045abcece39ce6e4611296b","ssdeep":"","tlshash":"c3d0ebeb480e98679724a363000a08809e6393a2c073c8504880e8073a12163c241cba","first_seen":"2025-02-12T08:32:15.789352Z","last_seen":"2026-09-26T12:52:39.958265Z","times_seen":287,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/rs.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.846Z","timestamp":1790315220846,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/rs.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-246\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1992186\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=da3UyUuZ47XC01xl44Uh0ZuRqEmiPHu42QA5kSdd847cWRF6Tm%2B7dYoRM%2FyxUBqHBQVLb9KHiNymDuX%2Fc4YR%2FhPDkdwhSSnDwhs%2BasKhD0ThdF2bo%2Byl0mqwZfzKTQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb524bccb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 582\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":582,"size_decoded":1418,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"9450a5a962da075af07c6e6cf3ee6a43","sha1":"df39034157c5bfba2b1258305705505e7a6db38b","sha256":"5c5bde9228cbac18dd82d71cb844f9cce701fa5e12cb66023bc2bd0d91b2d49e","sha512":"833dee43c9df721c637c82e0652d9cb1032d8c909922e9628d183d4d642186fa5b4b5647654cc7576c8f1c407fe8263c6289478abe612ae840e66a75bd395ac0","ssdeep":"","tlshash":"bef096af67645968eeda4a23872000f4fc2c9505f5873e799f9de13f0549388d17a544","first_seen":"2025-07-04T08:06:49.957854Z","last_seen":"2026-09-26T12:52:39.946466Z","times_seen":129,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/favicon.ico","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.930Z","timestamp":1790315220930,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/31626547862/\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:01 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncache-control: max-age=14400\r\ncf-cache-status: EXPIRED\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bGim%2Fa9m2pfFO7qaV3384GhzGA%2BoTTX1lwFKKajZA3oFzzpRF7Vl8bNgMPa%2BsvoAxL0BdvIbC16dqetMHgCgKrdbi6QA2ywaLyakwAYJvMMD28KIzWexFTE4%2Fv5jXG4GDOpYmQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bb52d94349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":279,"size_decoded":858,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"5eab8903c88be43ebdda4890108f50f2","sha1":"3b0dfd5d4c6f7f62cefd131b111d1d1632210339","sha256":"58a92545a17af21629d81e35d366d329e009dd26b9605760e0ce814652a2bbc5","sha512":"e62af7984f347c2c0ea9d8dadec069fe8c8c5ebc90f14e6de5eeb7a8956d759e68724082265da4146f23e8307f0111de57e1f288629e37d357989ee8637c33cd","ssdeep":"","tlshash":"0bd02b9e5083728b481215a039c125c6264c13faa43a87e82d86d48b52a853ecd9ba8c","first_seen":"2026-09-25T05:47:47.001618Z","last_seen":"2026-09-26T12:52:39.941032Z","times_seen":15,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:09.735Z","timestamp":1790315229735,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundaryc1371a472b5a5e3fa8695ecda508ae70\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundaryc1371a472b5a5e3fa8695ecda508ae70\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundaryc1371a472b5a5e3fa8695ecda508ae70\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundaryc1371a472b5a5e3fa8695ecda508ae70--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:09 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8W05jODROVprwqowrJwsOloT4Sv1MPL6srLrmPImJoks21lnenTNPn8JCp0eiN5lL1hzt1Xti3KiryxoTzpXTBdAQERM0yaOhb9jDEKl8P6DFQFeOQ1KeF0DI%2BgF%2FBmV43qH1w%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bb89dc3d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":989,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.702Z","timestamp":1790315220702,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 309104\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-26T13:46:12.167123Z","times_seen":298162,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":11,"dns":0,"connect":0,"send":0,"wait":19,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/il.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.835Z","timestamp":1790315220835,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/il.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-e0\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1819147\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nE4PYqATdWfl7KcnWaArSqibebP0ugXrUSnqnWTRbi7qd22glQ4bmVpKuw38yuXNfxbWLnpGkufykQyxaS1hKFPhTKi47s2SR6mx9kvZfnkNU53jBK%2FTaEQ7lghc2Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb523bc1b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 224\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":224,"size_decoded":1049,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 8-bit colormap, non-interlaced","md5":"5d512973ff69028d3b495597fbafbc12","sha1":"d63aae18cb40fafa850d94c2b188ba627ec3e927","sha256":"9e00c28aeb5964dad4e9df28ef7ee72094ff88aeb5b4a021c591e5df13f1ad43","sha512":"87db5efd90613d86bacb05aebf85a677149e1c8578c8964259e8f7fb1efb6360ad1f2f9b294fa88bfc1404bc59d960e74bed2d947d8e6907dfa9dc6662feb3c1","ssdeep":"","tlshash":"a4d0a7f3a2126c7e9a5a46bb8369116dac61136a4866280c4107d9240b10715c086672","first_seen":"2025-02-12T08:32:15.800301Z","last_seen":"2026-09-26T12:52:39.94284Z","times_seen":145,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:06.734Z","timestamp":1790315226734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary7a10295a6b5a19697a46fdc6984c1cf3\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundary7a10295a6b5a19697a46fdc6984c1cf3\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundary7a10295a6b5a19697a46fdc6984c1cf3\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundary7a10295a6b5a19697a46fdc6984c1cf3--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:06 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8xfVqBv2pv0%2BAj91ZlA8R2wbas3JV8QXMqYF2UPSwGl%2B3kxyxD9vmvO0m%2BJGZURh%2FkDY7LLQueFSu0vneA%2FIeqa3AkJnbZcY5R6Ri3SwcBf1Uc5aXMXoavwWAr41swRAyuIsLw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bb77192b49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":995,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:12.734Z","timestamp":1790315232734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary7f34d0baa76f75c7a01f7b7816d1c6ae\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundary7f34d0baa76f75c7a01f7b7816d1c6ae\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundary7f34d0baa76f75c7a01f7b7816d1c6ae\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundary7f34d0baa76f75c7a01f7b7816d1c6ae--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:12 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1yJtwXqS4faoLm%2F3HaXvbjZ2VRzWKlyMsw6AcYd6MkknQ3kY3sDmR3EOXeoK5fIHIXdYCO6cC7JNGjJi7SsArf%2FqWILf4wtzMiVkiVTuy5NR1PrtzqUFfnQdIG1wuQ9xPew6Kw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bb9c9f5749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":989,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:46:59.794Z","timestamp":1790315219794,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"GET /31626547862 HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 301 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:46:59 GMT\r\ncontent-type: text/html; charset=iso-8859-1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sXns0ib981w048%2B4qeDMj6n7doufhpw0sL0WQ4Tt7GJKCTSyIiXfLDOsbQyxnTubmPgqIjCb0zFkJAgxUVDwyssaMte2E0ML4LbR0uvU0qup2MwjH8fZz8mAH7imvt2woJrX2A%3D%3D\"}]}\r\npriority: u=0,i\r\nlocation: http://homesdowttups.com/31626547862/\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407bb4bef0349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-26T13:46:40.165102Z","times_seen":18671674,"resource_available":true,"data":null}},"time_used":130,"timings":{"blocked":-1,"dns":9,"connect":15,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.701Z","timestamp":1790315220701,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/webfonts/fa-solid-900.woff2 HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: application/octet-stream; charset=utf-8\r\npriority: u=5,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 259311\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TIE%2FuoTiQMT8oQEqTNUUUsV8l2H%2BaZA4idAM7DRMsxrh5zVncMlZ03O7afASx4S%2Fp0P3B8wE2B8m%2Bj3d5rIYbqySkXaMy4sMvuRzDIGl8gouxIWn6Q0ZS%2FeYzwFbLw2ASgAzbbkn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a407bb516eac568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 156400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":156400,"size_decoded":157403,"mime_type":"application/octet-stream; charset=utf-8","magic":"Web Open Font Format (Version 2), TrueType, length 156400, version 773.1280","md5":"1ec0ba058c021acf7feaa18081445d63","sha1":"73e7eabf7a8ae9be149a85d196c9f3f26622925b","sha256":"ae17c16afbea216707b2203ea1cf9bdb45b9bfe47d0f4ae3258ddbc6294dd02f","sha512":"16a1b8a067ad4a33dcf4483c8370ca42e32f1385e3c4e717f8d0ce9995ca1f8397b15a63c0cee044c4b0fca96c4b648c850f483eeb1188a20f8b6cbf11d2b208","ssdeep":"3072:T0NNdf7uJ/Q8zfLtuI3m4uTtijwbr+mV+5ZUTRjV:AN7r8jMbgjwvOrU3","tlshash":"b6e3139a9a1f63d89c3cd982f61ef3fb715aadab1f521220193149f9d04f0af5035a4c","first_seen":"2024-04-05T18:44:58Z","last_seen":"2026-09-26T12:52:39.936684Z","times_seen":14709,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/gr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.828Z","timestamp":1790315220828,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/gr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-86\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1475335\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1JcQl1yR%2FBifX1wl4qTIAD8P8Nj%2Bb%2BBzcxcDTLgIQaotTl4Cn3CP6NHIGnOXedF97Kda42MQkRww2ej8ElUknPZ8Ca1eIs9clColWegWxXRruSmb%2BGip5k8QuBRjPA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb522bbbb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":134,"size_decoded":965,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"1e381e168dcc78aec6b3b4d6b4337c4d","sha1":"ae6cda7fd307f32d61db47b49eb5b50573017838","sha256":"3764eb1cf549d1a8903e4f4ed0cdf3b09a33306f32594273fd2299c4324a6918","sha512":"61a321e799e0b68ed053f7b00483b549af5b9c68b669f12f36bc690552c3af330fa29c8c94fc5a40ec08d83d3767dd0f54dec42c28f65e391fdda49d879fb3d4","ssdeep":"","tlshash":"00c02bc271243c34cb442333ae3c8253e83110649118334760cfe832c3d112eb1c6ac1","first_seen":"2025-05-18T02:23:51.239226Z","last_seen":"2026-09-26T12:52:39.945818Z","times_seen":170,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/in.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.837Z","timestamp":1790315220837,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/in.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c1\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1658153\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tm%2FjXZaT3e4b8C%2BlC6C%2FVaUXGbvUAKDTddRj7Dv7D%2Bg2VnbOjymcd83DCsxn2LYuswxsgNGQ%2FQCDbd9U%2BvACffVqjrdyQT6KgqSLlaGbugdqCy7uF0dAl0OkgH%2B0ag%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb523bc3b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 193\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":193,"size_decoded":1030,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"65e6a568f7ceb02fd4d54c24fbd75c95","sha1":"bcd84d4ca18b5f665f759377b82f7cd1da3bbb62","sha256":"7402a78868940a6f52ae0e9793667a42fcd71945df8d763aca0fc186d1ab1241","sha512":"12dce6567a20754d926361bb65f5bbdf29cd63f69ff0f5fd1764d7cb2d8c39aa5f450b9169d4ba5fa019e9bd826ee89d746a64db732d620bd3b5c2aa51a87f9a","ssdeep":"","tlshash":"2ac023d755947cb4c7cf54134274555475554264001541cb5d4b657401f0109e8d5042","first_seen":"2025-07-02T09:52:48.450113Z","last_seen":"2026-09-26T12:52:39.940427Z","times_seen":277,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/sk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.845Z","timestamp":1790315220845,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/sk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-14d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1446423\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FypW29HxyCe2726IDGNwj0ToZai5OKGptbyED9lLf0A8eu9iunjibzsaW4sN4JLfj4WL2p6hPktlLr9%2BExgEYcaJfoQZ7ZklKulr8INlP4IqqnhlY%2F4gpToxilRBRA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb524bcbb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 333\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":333,"size_decoded":1163,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"a424bd199c77e5ebaa03a7222b997a14","sha1":"f489e782188ac3c0441f5145c4d3455db869d7d9","sha256":"89c568a4f6c418e528062d0a5a8435d431823d4d3de3ebc42fbf5729c10d6cf9","sha512":"9bb99803a40f486ad706be1d8475179d6b43bcd57b510ba70a6e30e2b2448ed7b5aceef9f23efdc271163cda828fc3cec9e984c0a03ff2fcb6b8170cf7679ad1","ssdeep":"","tlshash":"b3e07debf8747c2cffa3687182176796476706ecc453109a004518bc69e3918005c3fb","first_seen":"2025-06-27T03:22:22.719107Z","last_seen":"2026-09-26T12:52:39.953593Z","times_seen":148,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:15.734Z","timestamp":1790315235734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary194760d62e9d453de060cb789d464e7e\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundary194760d62e9d453de060cb789d464e7e\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundary194760d62e9d453de060cb789d464e7e\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundary194760d62e9d453de060cb789d464e7e--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:15 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Th7yC4kVflUt6Kcm4o2kXKvNdusOprxWUa7siOPmcDbG8rd9IMNpdg8XvMBolMdubek4kfU0kSXz%2BhDfXQVxAk%2B1tDpmcUR%2FzGFOJD4BS26FAQWkW%2BBnmGCBTGfEbCOyEy7XhA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bbaf5b9d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":993,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:18.734Z","timestamp":1790315238734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary2392e79f77a37d2dd9542a5905af031e\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundary2392e79f77a37d2dd9542a5905af031e\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundary2392e79f77a37d2dd9542a5905af031e\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundary2392e79f77a37d2dd9542a5905af031e--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:18 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OGuj3cxpYtYlJ0JI7G9oN%2FBI2lV7b3BuURDMf7WZQONM7lNfmANrnJIPprof49pWdlfg0%2F2yLTQkk%2FTmVLPZu6oeVRjjMzXlfZWKDHM1hkJf0PWsipBwvy5sB5cyyGDml3AaYA%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bbc21ff349c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":991,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/notify/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.742Z","timestamp":1790315220742,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/notify/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary7965ab96c02188db280586737038f89a\r\nContent-Length: 408\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":408,"data":"------geckoformboundary7965ab96c02188db280586737038f89a\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundary7965ab96c02188db280586737038f89a\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundary7965ab96c02188db280586737038f89a\r\nContent-Disposition: form-data; name=\"step\"\r\n\r\ndetails\r\n------geckoformboundary7965ab96c02188db280586737038f89a--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: application/json\r\nserver-timing: cfExtPri\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zRZ4y%2B0HK8tqbVJqXHd6G5f55GspJUWHiyvnwcvqvHHhjiNJwcJ3%2F8Y4EL7R4ucXKaYtW6m6O8llUl9BuYbHze9pXoIs2kU%2BTtOOm7mTuePePr%2BiP6smeBt0S8XWkHaL2IHALQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407bb51a8ad49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 16\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16,"size_decoded":602,"mime_type":"application/json","magic":"JSON text data","md5":"7363e85fe9edee6f053a4b319588c086","sha1":"a15e2127145548437173fc17f3e980e3f3dee2d0","sha256":"c955e57777ec0d73639dca6748560d00aa5eb8e12f13ebb2ed9656add3908f97","sha512":"a2fd24056e3ec2f1628f89eb2f1b36a9fc2437ae58d34190630fe065df2bbedaf9bd8aee5f8949a002070052ca68cc6c0167214dd55df289783cff682b808d85","ssdeep":"","tlshash":"f0600003000000a2c000220002382e202080002280000008800c20088a20000208300a","first_seen":"2023-04-05T04:17:27Z","last_seen":"2026-09-26T13:29:18.116199Z","times_seen":191412,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ar.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.804Z","timestamp":1790315220804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/ar.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-d6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2304508\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BF7CdjYQb1ZVzvWzcPvKxE6ZjQhxup2GOmDEZ6DuV7Se82EBiy2ktZmvnzmlP30AUnGmglH%2Fs5b2WXltn9S7GwSUORcfU78NEGOugfk7Iy7Vn4aqxxJVZqqZLDsZVA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521badb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 214\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":214,"size_decoded":1039,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 8-bit colormap, non-interlaced","md5":"38cc45f2c80a156040748c8027137f01","sha1":"20c4c95748fc8ea9d6a18e25afe8d9919ff51df8","sha256":"7772105f9a95697f0c26fdd03e9bb9719db4dd46aceb4cce5e2a81475c9a8c03","sha512":"5ae045a2299646215b325ac578f868b437a3ed0a3e87d3110956079ed18a714c6c9c14401880392a24be0617b45156e20d406228fce88f344f644ca02c5bb949","ssdeep":"","tlshash":"44d023f775d55c37d7c60b3ad2984501fc1546310006910ed03343275770cc700d09b6","first_seen":"2025-07-04T08:06:50.021859Z","last_seen":"2026-09-26T12:52:39.930433Z","times_seen":157,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.travolution.com/dynamic-images/15000-15999/15179/15179_c=(0,0,800,533)_w=800_h=533.webp?v=20230522122229","fqdn":"www.travolution.com","domain":"travolution.com","tld":"com"},"ip":{"addr":"51.104.28.82","port":443,"asn":8075,"as":"MICROSOFT-CORP-MSN-AS-BLOCK","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.513Z","timestamp":1790315220513,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P256","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.travolution.com","organization":""},"issuer":{"commonName":"GeoTrust TLS RSA CA G1","organization":"DigiCert Inc"},"validity":{"start":"Wed, 10 Jun 2026 00:00:00 GMT","end":"Thu, 10 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7B:D1:63:CC:05:E4:73:FD:22:8A:32:3E:61:54:8C:6F:E7:9C:5E:06","sha256":"B7:6D:09:FD:EA:21:22:0E:17:91:79:1F:7A:CA:CC:0D:43:83:F7:AB:3F:A5:AB:4D:CA:9F:CC:63:23:E4:48:5A"}}},"request":{"raw":"GET /dynamic-images/15000-15999/15179/15179_c=(0,0,800,533)_w=800_h=533.webp?v=20230522122229 HTTP/1.1\r\nHost: www.travolution.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/webp\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\nserver: Microsoft-IIS/10.0\r\ncache-control: public,max-age=864000\r\ncontent-encoding: br\r\nset-cookie: ARRAffinity=81425dacd7def0c0557985044554419eb83ccaa22c69bd7a413a9784c0dac2c9;Path=/;HttpOnly;Secure;Domain=www.travolution.com\nARRAffinitySameSite=81425dacd7def0c0557985044554419eb83ccaa22c69bd7a413a9784c0dac2c9;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.travolution.com\r\nvary: Accept-Encoding\r\nrequest-context: appId=\r\nx-powered-by: ASP.NET\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"ARRAffinity","value":"81425dacd7def0c0557985044554419eb83ccaa22c69bd7a413a9784c0dac2c9","quoted":false,"path":"/","domain":"www.travolution.com","secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"ARRAffinity=81425dacd7def0c0557985044554419eb83ccaa22c69bd7a413a9784c0dac2c9;Path=/;HttpOnly;Secure;Domain=www.travolution.com"},{"name":"ARRAffinitySameSite","value":"81425dacd7def0c0557985044554419eb83ccaa22c69bd7a413a9784c0dac2c9","quoted":false,"path":"/","domain":"www.travolution.com","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"ARRAffinitySameSite=81425dacd7def0c0557985044554419eb83ccaa22c69bd7a413a9784c0dac2c9;Path=/;HttpOnly;SameSite=None;Secure;Domain=www.travolution.com"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"IIS:10.0","description":"Internet Information Services (IIS) is an extensible web server software created by Microsoft for use with the Windows NT family.","website":"https://www.iis.net","common_platform_enumeration":"cpe:2.3:a:microsoft:internet_information_server:*:*:*:*:*:*:*:*","icon":"Microsoft.svg","categories":["Web servers"]},{"name":"Windows Server","description":"Windows Server is a brand name for a group of server operating systems.","website":"https://microsoft.com/windowsserver","common_platform_enumeration":"","icon":"WindowsServer.png","categories":["Operating systems"]},{"name":"Azure","description":"Azure is a cloud computing service for building, testing, deploying, and managing applications and services through Microsoft-managed data centers.","website":"https://azure.microsoft.com","common_platform_enumeration":"","icon":"Azure.svg","categories":["PaaS"]},{"name":"Microsoft ASP.NET","description":"ASP.NET is an open-source, server-side web-application framework designed for web development to produce dynamic web pages.","website":"https://www.asp.net","common_platform_enumeration":"cpe:2.3:a:microsoft:asp.net:*:*:*:*:*:*:*:*","icon":"Microsoft ASP.NET.svg","categories":["Web frameworks"]}],"data":{"size":4496,"size_decoded":4493,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x533, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0b91000eeef49ae66d3d18fe927f61f2","sha1":"cb106cc47bb9d26a0e67b237b1f1c0108c7a0787","sha256":"bc2dd691a9057b22044e4ef52ac44b0c7485c5ae73928237e48e9ba65b66ff0e","sha512":"4c7e0bbfddfc6b175430c9837c27064191aac7ebfeb4f7f04670f64772ac04f1e52bc2174bb607514f308c890c78719ee29a6af1536b6b3a7443d6c477bfdc1e","ssdeep":"96:XPEFrkMPyNshnmWiALjFoWPMi7TxbMfSGNWiuE2/fQWK:/ukMUynmWBjFSi7TzGQ82QW","tlshash":"fc914ade36d7322dd70294fa59c70940a6c454c6cb7acea69d218dc37c28743f8a3d69","first_seen":"2026-09-04T14:55:03.163954Z","last_seen":"2026-09-26T12:52:39.950972Z","times_seen":21,"resource_available":false,"data":null}},"time_used":214,"timings":{"blocked":101,"dns":0,"connect":21,"send":0,"wait":59,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"upload.wikimedia.org/wikipedia/commons/a/a4/Mastercard_2019_logo.svg","fqdn":"upload.wikimedia.org","domain":"wikimedia.org","tld":"org"},"ip":{"addr":"185.15.59.240","port":443,"asn":14907,"as":"WIKIMEDIA","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.515Z","timestamp":1790315220515,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.wikimedia.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 11 Aug 2026 05:19:15 GMT","end":"Mon, 09 Nov 2026 05:19:14 GMT"},"fingerprint":{"sha1":"52:17:30:E7:B5:4D:78:C3:1A:27:27:36:2B:27:EF:C7:29:CE:9C:13","sha256":"AE:63:EF:37:2A:14:17:F8:1E:87:39:CA:5F:A2:71:13:FE:DF:F3:0E:88:8C:B9:2F:7D:A4:27:15:B3:2F:A8:CE"}}},"request":{"raw":"GET /wikipedia/commons/a/a4/Mastercard_2019_logo.svg HTTP/1.1\r\nHost: upload.wikimedia.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 01:48:30 GMT\r\nserver: ATS/9.2.15\r\netag: W/a85bf6e717865436e43898573e31bb70\r\ncontent-type: image/svg+xml\r\nx-object-meta-sha1base36: mmaeoly4wenjbzbwxoswkwgzotzjzf8\r\nlast-modified: Tue, 04 Jul 2023 09:46:10 GMT\r\nx-ratelimit-limit: 10000, 10000;w=1\r\nx-ratelimit-remaining: 9999\r\nx-ratelimit-reset: 1\r\ncontent-encoding: gzip\r\nage: 14310\r\naccept-ranges: bytes\r\nx-cache: cp3076 hit, cp3076 hit/106\r\nx-cache-status: hit-front\r\nserver-timing: cache;desc=\"hit-front\", host;desc=\"cp3076\"\r\nstrict-transport-security: max-age=106384710; includeSubDomains; preload\r\nreport-to: { \"group\": \"wm_nel\", \"max_age\": 604800, \"endpoints\": [{ \"url\": \"https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error\u0026schema_uri=/w3c/reportingapi/network_error/1.0.0\" }] }\r\nnel: { \"report_to\": \"wm_nel\", \"max_age\": 604800, \"failure_fraction\": 0.05, \"success_fraction\": 0.0}\r\nx-client-ip: 91.90.42.154\r\nx-content-type-options: nosniff\r\nreporting-endpoints: csp_endpoint=\"https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json\"\r\ncontent-security-policy-report-only: default-src 'none'; script-src 'none'; style-src 'unsafe-inline' data:; font-src data:; img-src data: https://upload.wikimedia.org/favicon.ico; connect-src https://upload.wikimedia.org/favicon.ico; media-src data: 'self'; object-src 'none'; worker-src 'none'; manifest-src 'none'; base-uri 'none'; form-action 'none'; frame-ancestors 'none'; report-uri https://commons.wikimedia.org/w/api.php?reportonly=1\u0026source=image\u0026action=cspreport\u0026format=json; report-to csp_endpoint\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache\r\ntiming-allow-origin: *\r\nset-cookie: WMF-Uniq=qPwLknqccHJRpD3HjzdzkwPmAAAAAFvdNiBM6QOGKGUgtyTGoQidD8WnKJ2hTjH6;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 25 Sep 2027 00:00:00 GMT\r\ncontent-length: 172\r\nx-request-id: eed54316-3087-4a5b-9b2d-2f51de8bb547\r\nx-analytics: \r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"WMF-Uniq","value":"qPwLknqccHJRpD3HjzdzkwPmAAAAAFvdNiBM6QOGKGUgtyTGoQidD8WnKJ2hTjH6","quoted":false,"path":"/","domain":"upload.wikimedia.org","expires":"2027-09-25T00:00:00Z","raw_expires":"Sat, 25 Sep 2027 00:00:00 GMT","secure":true,"http_only":true,"same_site":"None","partitioned":false,"raw":"WMF-Uniq=qPwLknqccHJRpD3HjzdzkwPmAAAAAFvdNiBM6QOGKGUgtyTGoQidD8WnKJ2hTjH6;Domain=upload.wikimedia.org;Path=/;HttpOnly;secure;SameSite=None;Expires=Sat, 25 Sep 2027 00:00:00 GMT"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache Traffic Server:9.2.15","description":"Apache Traffic Server is an open-source caching and proxying server that serves as an HTTP/1.1 and HTTP/2 reverse proxy with caching capabilities, load balancing, request routing, SSL termination, and support for advanced HTTP features.","website":"https://trafficserver.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:traffic_server:*:*:*:*:*:*:*:*","icon":"Apache Traffic Server.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":254,"size_decoded":2238,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a85bf6e717865436e43898573e31bb70","sha1":"c1a37792a110a24a19de38c055b2c07890301114","sha256":"4dfa227e514fd47fc63d7c25a5f9f1f6d6cae53aad951aa8aa8598b217838c17","sha512":"3d22f5a88c948bb288d29adf30dd29d066160bd19c597959b774f81cd04ca80d32a5ccb0ef05bd76ea67241112324df28023b5b9dd92463d8aa79e2539eca811","ssdeep":"","tlshash":"0bd05b8be15cd819c410e74c4bf970c5418efced91e0b4c4aa406d111dcdcdfa5589cc","first_seen":"2025-04-10T20:33:05.227937Z","last_seen":"2026-09-26T12:52:39.936081Z","times_seen":56,"resource_available":false,"data":null}},"time_used":175,"timings":{"blocked":101,"dns":0,"connect":20,"send":0,"wait":21,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:03.733Z","timestamp":1790315223733,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundaryff4a58f382496f6e3e7b8b4a8cbc6284\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundaryff4a58f382496f6e3e7b8b4a8cbc6284\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundaryff4a58f382496f6e3e7b8b4a8cbc6284\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundaryff4a58f382496f6e3e7b8b4a8cbc6284--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:04 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d0toYKiIc8WOXclR2BPVOG%2FWDCP5dG8yilOfdFoYGixzyn89Blt%2B6r8ncusAVvvB%2FJjPhH3S05FQ1SXBc3wgOjg%2FRxQsj1Ndh3cPloke5kbxMAcVrS8nl7RBFXaJ0uA%2B0S8sVQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bb645c8849c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":995,"mime_type":"application/json","magic":"JSON text data","md5":"e61a740a632da9b6e7d98753391ed795","sha1":"0f04c58860a785a8bb0a910d88d246101d9cb56d","sha256":"68890473b438b47cbb4af18c263f9948e8269843b4b2ff72be70d0ebdcb5b27b","sha512":"2e593cbfc35f164a07b128021db743cd6bec113046aec8b9a30c8e5680fff7c44e23ca672415d21143a732694bd7e22a85a6b249a25fedbea8b0e8728ba01ccc","ssdeep":"","tlshash":"78f00281cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc01c2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.412499Z","last_seen":"2026-09-26T12:52:39.947133Z","times_seen":18,"resource_available":true,"data":null}},"time_used":784,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":784,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:21.734Z","timestamp":1790315241734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundaryc39664d4a58c7814d2345a90c0c44077\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundaryc39664d4a58c7814d2345a90c0c44077\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundaryc39664d4a58c7814d2345a90c0c44077\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundaryc39664d4a58c7814d2345a90c0c44077--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:21 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D6fIw28jLnMS7mn34P4G%2B13tGebEMazjL4tPyuF9Cg0ghpY3nq0QZz7GGQ7lOOlX3%2F7kN9QNTkPx%2BGLO9lOrWUpj0ubGe6DG1NJf4LjynVG%2B3M0FY9r8urlxYo%2FrTSky2cvlYQ%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bbd4dae749c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":995,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pt.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.808Z","timestamp":1790315220808,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/pt.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1f3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1985404\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yYeJrLMnUgt3iu2LuhAgTzpt1QHZirBMedl2q0%2FPOg%2BR46f6UIgQopTVnZqh7n8Cy0hVUDdIdq2sTvcOj%2Fo9oE0kQWKVNRvHjoLrW8fi98fqYQDlbSROZq3WQLADSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521baab518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 499\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":499,"size_decoded":1329,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"8176395cf82bc97230fc9fed4ac3f763","sha1":"b295f2eb61ee6e04ff8209fb48d1c69b3c6fc01b","sha256":"d7ea82a325a904b119f4d2cb6a405967bccc19ff2e0a8ccdc7ebaac29cc29f72","sha512":"29b32dfb4da1fda4f7e060809c75d5ccce8d2bf4ff5208015ec0b39eb3286c5f32e6f4a1a4d9a10d1ee77437af614133faa5376cef19e5331122ceb3f0c50a94","ssdeep":"","tlshash":"93f00ebe9a3f4e1ccb091211d32f484989322a58549b6367601905a89a010da82590cf","first_seen":"2025-07-04T08:06:49.887176Z","last_seen":"2026-09-26T12:52:39.928539Z","times_seen":282,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/se.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.815Z","timestamp":1790315220815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/se.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-68\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1931464\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aQOjgSpcJaWuhZrSyAgy9tBczduIgViGi4ggJWqWJG948onRRQDxW1RUFPfBHUE719FB5WO28VXhNMPm9hrGDSNZME0WDd4ER9jwgdboUAuUVse%2FpwbCJAieNCZnXQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521bb1b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 104\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":104,"size_decoded":929,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 2-bit colormap, non-interlaced","md5":"0e977a4b2bb7d710ef6678345cc615d2","sha1":"d6a098d3b7e09f80e2604a466909237360ce29c2","sha256":"8ca56d0b54b7370d3c0cc2c631e24a0d1a0aca4e3f858dd2de64f175bb6fa70c","sha512":"05276196cb581c8ff99d2cc983251b8330f66b6832886bc1fc406e5093c727c9f41dbaecf85a5e7c14b170b97873495e1d9bf7d179dac46925226f680c0ff50e","ssdeep":"","tlshash":"68b012d3a6146c70c27a0773b10a1801dd193f181596164b7a1ac716630100dc0dcacf","first_seen":"2025-07-04T08:06:49.992173Z","last_seen":"2026-09-26T12:52:39.955964Z","times_seen":209,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/bg.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.831Z","timestamp":1790315220831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/bg.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2304508\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5%2BaHgxtVOpXbPcnBMrIkEhDeMaU8E7yFcJ7Etne60b2KxRs0%2FiWfEK4xbQRrI%2BQ3FaApRKBDLrmiv60wWP92zBJJIT28Sh8i7g2G%2BfI%2F0yeIQ%2BfTtu1xEkswHnrifg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb523bbeb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99,"size_decoded":933,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 2-bit colormap, non-interlaced","md5":"4595dea969cc57753b0b24fccea2728a","sha1":"584613eb46b80617753879e45d0c2ca43b21d5cc","sha256":"e7f6afef8cd01e931b99d971b195c3c1b699c0fbe5f37361531dc0a6e2505d89","sha512":"cdc704ea3e734b68c2696cbe17cae0c21bba3beb5873cc0af8c1670a1784660d4ce7880f3503da5444b65e156a78e1a5b12ac9b24ae70870c627d3d0b2077b38","ssdeep":"","tlshash":"dcb012f272603c70d64e837785831129e6514532111507570098c42e350940c928c5db","first_seen":"2025-05-18T02:23:51.227296Z","last_seen":"2026-09-26T12:52:39.942195Z","times_seen":143,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.2.1/js/utils.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.931Z","timestamp":1790315220931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/18.2.1/js/utils.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\npriority: u=3,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 256921\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Jul 2023 16:33:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gAjqmIbRojkySKAGrvzh2gF3o2umHLv1vKQQn20fOIYs6wdkerIhzt2nsdUGFRzuACOZmzg5XD%2FSsIm1IgRDvNxCLi4r0%2FKSbURtnPdcvVSty2iiJ5QjJrwZu6%2Fd6S95UAlcPuCo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a407bb52dec0568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47340\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254105,"size_decoded":48358,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1454)","md5":"66361e32c06f29cacc63c0648bf7f31e","sha1":"265b72ed843253c595ee629d0c9201dbe5328d7e","sha256":"7b8fa25cbe5eda2c2e19eb168b100fffd42d2f75a0dcafe808ac61d139cb626e","sha512":"de8ba753ba0a78bf79f88df466705be9b580612e11b57096ee406da7cfc93aa5cb76124d2c20e47a18bd7b43bc7308d607147a1cb0af02d0cab2501c962ba749","ssdeep":"3072:3PB30j8BAJjFs3OwPss3MwP2m9OOVS2x0T3TdxQgnGHIpUsW5jkmLNjoopuDs/vq:3PB3RyBu5x0T3Tdxsnbm","tlshash":"1444e0ebd63c9737a1d97b35968eb3cd5a8cbca3c848567826c3b54f52788e0706c205","first_seen":"2023-09-12T01:07:29Z","last_seen":"2026-09-26T12:52:39.954739Z","times_seen":2050,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.699Z","timestamp":1790315220699,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 309104\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-26T13:46:12.167123Z","times_seen":298162,"resource_available":false,"data":null}},"time_used":78,"timings":{"blocked":-1,"dns":2,"connect":30,"send":0,"wait":16,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/de.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.800Z","timestamp":1790315220800,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/de.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1984736\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NsmblRKzxp2KU5YsF6DUplU0WNLh2BIoBJFCHsosJdROT%2BncR1PfdAQQqUpUHFvDZVtjIElgilTCY6qgi%2FmrOMznESCQ8xkRYbyXmdLSFWMuNdvKtTCfIj3XOUphkw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521ba8b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 99\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":99,"size_decoded":925,"mime_type":"image/png","magic":"PNG image data, 40 x 24, 2-bit colormap, non-interlaced","md5":"52ce5902ed51d2db9393c9439c46b82c","sha1":"6cf73d922d72ac8fce47e6f494a04129d719483e","sha256":"4bf08b86243b0c5d79c196728100dd278a398ab57edaf56c871fceb9d879dbeb","sha512":"d1b9b9a226dfcd6a78015f4209da23e287052086df89bf2711ae407294c954c76102bc98faa0e7fce389584bf07d41a09a8470b657fb4443ce5cb1e383fe3f85","ssdeep":"","tlshash":"b1b012ee7154ac65d34c43331f028023ea61c12582155143a095d123051550883c4e9b","first_seen":"2025-02-01T01:01:45.04509Z","last_seen":"2026-09-26T12:52:39.911163Z","times_seen":542,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/tw.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.825Z","timestamp":1790315220825,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/tw.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-ea\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2442162\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hdER6QJttaizrMdTpTTIx%2B9WdwIbrmbByJTtYK0h2n1s0RylGjLVa1BG2Ls46rAKL9bN2Ll1AUwk2my5r4pYeZJgtqJDjOXdjkeuRU3QbajxG%2BXSbSdcOlQuN4pt1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb522bb9b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":234,"size_decoded":1061,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"3437714821bd246bec6e6b7f7cc323f3","sha1":"e23ffe316252ee23f4580822f171bcb3459dae5f","sha256":"71c8c267a0c40f39d84de53b46c7f7c9a893a3f14beb2a5968d8f781e213b234","sha512":"d5ebdc5f39e9e5552fbf51d587d96c917fc06819e8588f040a80ad6c43131790a6f1c21111f6386a6c23d0e016d6b5346fd6b1a3070975931ffbe0749b0f7bf4","ssdeep":"","tlshash":"3bd0a7fd29185cb59aa51529b25203d0da3649a68241c92d558606661759108d568383","first_seen":"2025-08-17T01:17:19.046657Z","last_seen":"2026-09-26T12:52:39.915587Z","times_seen":95,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/font-awesome/6.5.2/css/all.min.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.494Z","timestamp":1790315220494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/font-awesome/6.5.2/css/all.min.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 270832\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Wed, 03 Apr 2024 02:35:32 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QwZgNUXwAKdKOTWzRg9RmyNvWfEnOgaKU8kxxj0JZrgYoKf1z0VUxwLz4RxwLhe7IC6EhubwJN0lbOeqHiZbdvmI8dNcXxg0nLB1pGGF33aWINoCc8Qfbbw33dTjxlMVZxSSILka\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a407bb502e9c568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18938\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":103009,"size_decoded":19936,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52282)","md5":"c325be79a5ecca85d68eb9e5b65a547a","sha1":"f2a96686228994a46961657df4c9405afec8e9c2","sha256":"5ceaaba22d75b58e04150311f596306562a3e595e27ed4b1dfa451b82dda9e50","sha512":"4a71f958af9b67180f1ece38b96217f8b2c9009f7fd8f90f299e508808fa4daf3ac3e7ec6f64e47267d1c955f7a419cc15c57ba103c9925f507af4825abdd6e8","ssdeep":"1536:t1MCMPMCMjMCM4MCMwMCM3sVM3709gbQZMfjSFOlyPG9dXgRM0J:W709gUGGFwyPG9dwRM0J","tlshash":"16a3a7f9e44c05d97732c44bab95b37c65b6f738d5810ca9f02f580c1ad26a822c6f7a","first_seen":"2024-04-05T18:44:57Z","last_seen":"2026-09-26T12:52:39.954181Z","times_seen":13464,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":2,"connect":10,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.703Z","timestamp":1790315220703,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:55:16 GMT\r\nexpires: Tue, 21 Sep 2027 15:55:16 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nage: 309104\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-09-26T13:46:12.167123Z","times_seen":298162,"resource_available":false,"data":null}},"time_used":59,"timings":{"blocked":10,"dns":0,"connect":0,"send":0,"wait":26,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/br.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.809Z","timestamp":1790315220809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/br.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-1c4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1998467\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bV1EgMyPuOKQ%2F2mUAI%2BGkHYIMTi86jhBlSBMm6WNLx1PHSCj8530KpfYXo%2BAi6OUacWTUa6WgdVsykukHHHFJHVvydNoRNk8efvW3aG%2Ff15MpS08cTfSYUw1XswR%2BA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521babb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 452\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":452,"size_decoded":1286,"mime_type":"image/png","magic":"PNG image data, 40 x 28, 8-bit colormap, non-interlaced","md5":"baa16cc45e552750665dfbac3bce7e33","sha1":"7829320e91d88c1f4671cc43d171c23c5ec2f2e5","sha256":"12d4080ba2138d1a7b0cde97a52a0e5f26b314d48490cf6cebe24dde1227ab76","sha512":"1dec338211aa99c42e7bfdd12435015790fcbd9881cb337e2a6083bdd8982c9eec4a3fe083d8f12b3e072036447576c05c4a592b7a959f2a7c57d46499b44d7f","ssdeep":"","tlshash":"92f02393df05fda9c994d3556d49c955ff6579df03648b1fd02e2cda300245d0143190","first_seen":"2025-07-04T08:06:49.862808Z","last_seen":"2026-09-26T12:52:39.937311Z","times_seen":234,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/dk.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.817Z","timestamp":1790315220817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/dk.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-7e\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1659323\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RSn02OvZLKujnW2MisOxeWxFus2mvujQBe4YNwe8XAMkyIbinejCsCrJAG3mR5qyVe8yQcTcAcfb7xt8PtsggGXCdTgf%2BKPaRV2jrwXkDvJFV%2B334wej62qrK6ZViQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521bb2b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 126\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":126,"size_decoded":953,"mime_type":"image/png","magic":"PNG image data, 40 x 30, 4-bit colormap, non-interlaced","md5":"c09f1b8df021d56af996f5198c35b569","sha1":"0c7bbd3f3078539cf263badf0226df20bd06cee8","sha256":"ca559221f91cd71210fa5deaccf8af0e754d03b2e7cd13277f771ae11c402534","sha512":"b6de5068bf2198e28f864838403f7b137d436e46a180f3432fb24be0c695dff7e0334e88f21bc2ae568e04f640197a2e03feca93cbe9217dd788143973e3c036","ssdeep":"","tlshash":"0db02bd77260cc10d6464193818d0001ac40890c0062308b4209991cd44c091d04c047","first_seen":"2025-02-12T08:32:15.792337Z","last_seen":"2026-09-26T12:52:39.941598Z","times_seen":249,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/cz.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.819Z","timestamp":1790315220819,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/cz.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-10d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1812885\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kSRhJPPCozjPiwzZX%2BPRlaWjgW6ueEGWBk3fG0JFwq%2BiIOPhRQE2aq3oI5ATTzM2hQ9F%2BjhX0Zi8eEcQNB1Dhu7DmB91aFL7qddwzbY8IbNpkpfYi4dD1sLHfUptyg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521bb3b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 269\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":269,"size_decoded":1099,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"896cccb33b897bce17c2f10fcae80191","sha1":"434bcbc51a10d332f593622c6efa0c9a5d6b2384","sha256":"a6a0fb9794ba47fbbbb967ad45d6a9468e1a0fa0ec5fd2d6e6e31f3e5322c7b1","sha512":"42c16b20a22c7ac681c83fe5fb31a9d4f802e889d516988408d9a43fe4aa357045e782fa6285ff197932a9dfe5fc9e628556a8ca2e0b8437af6275477caecd91","ssdeep":"","tlshash":"3cd02be67f2d0d2985b95333437688228f3cf240d26ad253a02988568491339d24c126","first_seen":"2025-06-27T03:22:22.736257Z","last_seen":"2026-09-26T12:52:39.939776Z","times_seen":201,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ee.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.841Z","timestamp":1790315220841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/ee.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-72\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1995109\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ADqBB5wTKOHWXY%2FEEs9BS03IsPqO%2FtKRHNdb2KkxHgdEb7r6v2e4OyBziDMRq%2BDyRZ9lx4Qzjd9imPeMtEjZVMNrGImyjJ55RGwKIYvsr33pSwvvfChLayBvfILcpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb524bc7b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 114\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":114,"size_decoded":943,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 4-bit colormap, non-interlaced","md5":"4f1dcbd3bd669261844dcbce2aeb2aeb","sha1":"ce90dbdb06ca5f03daf21c9064acb1b150689521","sha256":"2177f43c512ef7781ba75e53d177a0d743d8462c093a7d77d8d90a423ea9160c","sha512":"3299c8ef613f7de6170496e66fff51c55ea36ae25b5bf4d6429c0c94b1fa71573bef2fd9953095fe83c228b2b087b92eaed0a849958031aa8c8a6a2dff695032","ssdeep":"","tlshash":"0fb012e3b7516e39c64b213a6b15d042dcf90a0c5d32b60f8c567c16250104e778e346","first_seen":"2025-07-04T08:06:49.96887Z","last_seen":"2026-09-26T12:52:39.9298Z","times_seen":124,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/intl-tel-input/18.2.1/css/intlTelInput.css","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.24.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.497Z","timestamp":1790315220497,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Sep 2026 14:43:48 GMT","end":"Sun, 06 Dec 2026 15:43:45 GMT"},"fingerprint":{"sha1":"70:B5:44:5C:25:65:CF:4A:4B:DB:6F:16:E1:4E:D9:85:C7:F3:75:4E","sha256":"63:B5:DA:B8:4F:95:99:9A:4B:77:FF:DB:3F:8D:7E:3D:1A:62:AD:A9:D9:06:9E:C3:59:6F:4A:61:A2:D2:20:CB"}}},"request":{"raw":"GET /ajax/libs/intl-tel-input/18.2.1/css/intlTelInput.css HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: text/css; charset=utf-8\r\npriority: u=2,i=?0\r\ncf-cache-status: BYPASS\r\naccess-control-allow-origin: *\r\nage: 117920\r\ncache-control: no-transform, public, s-maxage=30672000, max-age=30672000, immutable\r\ncontent-encoding: br\r\nlast-modified: Mon, 31 Jul 2023 16:33:02 GMT\r\nvary: Accept-Encoding\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/r2\r\nx-cdnjs-cache: HIT\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gXHVR3xYpefOZARRXBHGVhsg5FoEK7dp%2BmojFPyYeM%2FOBDOJVI0TWeIykeiefCcD3OoxALl%2B6yeWPZ69DHqrVslP5RoThPd8QzIuGCqNE5GWtW54E6Ymn0QZ%2FVllkvlU1rS09FnM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\ncf-ray: a407bb502e9d568b-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2066\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":24504,"size_decoded":3071,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6474cd50bf0031ad62305728a886c259","sha1":"5a74af07ec9aca09a0d03789c6f504a48a0adece","sha256":"69e8eadb82de98033b1ccfb0100f0d0bbcd34248f30e408df6e62530d677c1a2","sha512":"b39d530ec21c32a961d587506c5dd58f84ad714ff9b3ded5c8b104a643d6c0fd0225f8d9fc2e7301a1e71be0d9ae81839f551a8107b30c4cbad633f8ca88b8bd","ssdeep":"384:15oFjFgXku1imOgs2J9ZE+xfmYqFD1+vSE8k2eOYcyML:1KFjFgXkuzCFz","tlshash":"87b252674bb27914f92be1e13c6006a2373f5c03b81e5b3d66e63dbd66850e0a4f3691","first_seen":"2023-08-03T08:00:52Z","last_seen":"2026-09-26T12:52:39.947879Z","times_seen":2020,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@400;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.498Z","timestamp":1790315220498,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css2?family=Inter:wght@400;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 25 Sep 2026 05:47:00 GMT\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7581,"size_decoded":1405,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"053e580dd54b26338a22e4cb549690c3","sha1":"c55e4b6acd019be1820230bacd9aaec4b548337c","sha256":"9d981e129460bc838afb4f5c3ae0a09a9b454c98004adce11470f729a814d764","sha512":"4707e1eb1367e61aa8e1cab1d9792790a2eb9dd9e3efadd937ffc7c091d5269a758fcb24f6417d6be86ca5ab99f0869d4f8957a42e68c1f308acb7417c15d5b7","ssdeep":"192:9NNIxO34OxDNNryfO3iExlONEhYO3RrxGx:vXJp2+4","tlshash":"57f18992002ba400ab971dc233cf7f3aaece50896085d1b95ffd0dc59cead66436876d","first_seen":"2025-09-11T03:48:36.324085Z","last_seen":"2026-09-26T12:52:39.935459Z","times_seen":9658,"resource_available":true,"data":null}},"time_used":124,"timings":{"blocked":-1,"dns":2,"connect":28,"send":0,"wait":48,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/include/handler.js","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.506Z","timestamp":1790315220506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"GET /31626547862/include/handler.js HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/31626547862/\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 23 Sep 2026 11:15:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gQL9SpNqXBFsV9LjB7P1%2FJMzX4xlITOvLFBn0cBZHD0U%2BQ%2BY7NayHRhDxKuNKyQTS03gVgOxl4oZ%2F05TuvuIQe1cEDSAYLePF3yOmmyFHzZYO1zbfzXUdEUSh%2BA7MP61PsGgzA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: \"6ab3b4ed-71ab\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407bb50286549c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29099,"size_decoded":9656,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"89204121eb04886674e7479fa78e6304","sha1":"2187273cfb63dec1625e321693782a3e03ed6b1b","sha256":"8d53c01dc39167d563277c26624f494158d5c24df2a62dedb2357518fe9608b0","sha512":"13ee8174ce0ec550b82a316a9d421414e63fc9e5a8b14929499d88a00f3f48ca6c347d4d7dfb1e5fb58d00408ff9391e450a1bb5461bf8e53d8b42b5dc0b7cfd","ssdeep":"384:B7FPpNx2iNL4AWq/x5deIJPnTvgvnXDSk9DRAuNZSB6pYizs93obh:TPV2oJReIVgvTzTAuqAOO","tlshash":"28d2b69ab8f7243148bb307b77ef994a367240034845ea00bd5cda895f90de09776fe8","first_seen":"2026-09-24T13:26:26.403557Z","last_seen":"2026-09-26T12:52:39.927834Z","times_seen":18,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/pl.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.826Z","timestamp":1790315220826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/pl.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-62\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1653327\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G04ybM5y3K9L51LjcIl%2BnmmxFP2VwZ7BxxV%2B1N2UhJEkOX4l8klCQbCJ9CJMjsDc32H%2BNHhgsr1mYJL61X2HorP6HEKL%2FElGcuK8kfOqdaA4XShVXBFapfqL8s6%2Fyw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb522bbab518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":98,"size_decoded":930,"mime_type":"image/png","magic":"PNG image data, 40 x 25, 2-bit colormap, non-interlaced","md5":"ff792ee41b2c7ca1a07e3ed13e4a81a7","sha1":"a1b754f6d272423a13752616576db8015b35a21c","sha256":"7cf97156d1bf9045a798c475f59dcb75d541e7b8c6673ac8388507a9c5d548a8","sha512":"a5011e53b0c0e84edbe7b3cd64c336f3d716929547cd94c9025072f003609f047e1d545113172b96323fc6a9990da69abb4d5c14c86a9b7dbc5ad7cbb7c09cd1","ssdeep":"","tlshash":"41b012e55614adf0da641d3763184404ac211d610790044b1c15c835b022015d0e8746","first_seen":"2023-12-19T05:02:32Z","last_seen":"2026-09-26T12:52:39.9523Z","times_seen":279,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:30.807Z","timestamp":1790315250807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundarya2b0efe95cd57de518573afc7c273df2\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundarya2b0efe95cd57de518573afc7c273df2\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundarya2b0efe95cd57de518573afc7c273df2\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundarya2b0efe95cd57de518573afc7c273df2--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:30 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FjHwoA6OYOomVnJg3Skm3TFhIcTJkvGvyzls7gXs4yh4kTLKPkGea5gLnZ2V9wDuHYZruwKPoeCQxFB5CfsG44euhppptXLpH%2BE6KhOK6DPFPPkEcGJE7twCUkeb%2FjVMnNBLFw%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bc0d8d9c49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":991,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/include/style.css","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.500Z","timestamp":1790315220500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"GET /31626547862/include/style.css HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/31626547862/\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 23 Sep 2026 11:15:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XZFn%2B2O3f8FujlL0a1DQHAyfHy4r40RD5Txx3tQDvTz6RPJJXzvE2Iv6mvlYdlYRWCcUiryQQzHMayEQx8jpBF9reIsQczzzPo%2Fo5qPGKT4ukoIMQ108hhpmlG4c%2F4mVT9uzfA%3D%3D\"}]}\r\npriority: u=2,i=?0\r\netag: \"6ab3b4ed-92e2\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407bb50286249c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37602,"size_decoded":8626,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"42dcff107ef51dcb93497735ea1df1c7","sha1":"e25f3de1379f3f1319262a81cb23ceb1dd7b4ffe","sha256":"4df73e91a622308b14454ce7f27d2346d1447b76363d5d03f2a9d6784c525333","sha512":"b5bfd704defa2636b7b81906165c97cda9f7339b4459c24d996325807c660e59914ed9ee71ad86bda5a619998166e182286918b066607fc2dcf243e352a8b88c","ssdeep":"192:R7cbPl2KZRnNRZMdywSxBIcpd6TI2fppGptHQ+ysWcZaNwHrdRzr7/LdUs9tkqkk:RS7yGcCJpZxEYtoeGNu/uTMcgqQx","tlshash":"14f20e5fa67320997e13aa782feb1b573265c003c509cca97fdc32598f852e89991b4c","first_seen":"2026-09-24T13:26:26.4065Z","last_seen":"2026-09-26T12:52:39.948511Z","times_seen":18,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/ph.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.849Z","timestamp":1790315220849,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/ph.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-166\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2304507\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Lg7n%2Bq6WAtqZEmELjEItaoqVDE2od9hofxNZqDZzhahzayHUxcxGyCbS%2FRF9S8C20Sgfl6W1E435INgLrRLJyaxBjMuRJWZgFwwv8o%2Bg5LpeGCCrAPpQxpbt45ttWg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb525bd0b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 358\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":358,"size_decoded":1188,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"d99d30f15160f7fa062a83257bb943f4","sha1":"7e477a7fccd6c8cc8852a1a906091dbe8b556a00","sha256":"fe9eb7f98f49ff4ef471832f59a586b62ddbee262bd3046a0dab5487a1daeda8","sha512":"03303d1486a0d0fad31a162eea5b9821e5ee1f19af6154a2b55313259b559149113758251027350f67f6e6b7c86b20339c6b3efdb19007a3b39f95b82f5ccab6","ssdeep":"","tlshash":"ede0c0c273ca5e310fd6c3e2ea1d303d4cda053e9a952d071725e131093e95d90b8782","first_seen":"2024-10-31T19:28:53.368615Z","last_seen":"2026-09-26T12:52:39.956552Z","times_seen":141,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/hr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.843Z","timestamp":1790315220843,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/hr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-150\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2442163\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YCXC%2Fl7IRf8%2FuTD3O9JAcy5u%2BAKPKsHQSaPns5N4kjUF0SBygyT3EQrvpetpv1SgDUROxmRaL26qoyy%2BZCfGkbU0odptTFgjBnIuK11EUagIAWYyaYiumvD0Kwvmcg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb524bc8b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 336\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":336,"size_decoded":1168,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"20f4ee2a7889932d77e5b6e0e2aadc42","sha1":"8aa95129ea13c2b775794fea0a57ce92306274d3","sha256":"5cd7795f670dc14e83b97cc49403b011f5aa91bae36247be1f1aa0cbf2597fe9","sha512":"f04cd90bfd87f27afcd58c14ab789511d1645e01c794507af8438f54ea9e261c33476a36af42cba065bd86d50133a0fc93c101ec248a12185e46e4635b31b714","ssdeep":"","tlshash":"0de0c0f77ed2cc75f8e40342ca6b05e02d11ca181934a1422700a006f250205218d2b1","first_seen":"2024-10-31T19:28:53.345658Z","last_seen":"2026-09-26T12:52:39.912894Z","times_seen":160,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/img/support.png","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.519Z","timestamp":1790315220519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"GET /31626547862/img/support.png HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/31626547862/\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 23 Sep 2026 11:15:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fYVz5Em8V0WOJzv6v0TwBBnV%2BBAm0sP78GC6crxqjJd%2FO7b0cprTGWMxWHe5ZE3wUXEEf%2Bgu6I5zzvf0Fnkvu19vkOD%2FqjFU5vqyRPPVXhEkL3y%2F4AF%2FXYH3F2YY5j2RILfjuA%3D%3D\"}]}\r\npriority: u=5,i\r\netag: \"6ab3b4ed-87e\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407bb50386d49c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2174,"size_decoded":2911,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0216f5c9f9093eae958c5aa258380559","sha1":"d149dbc89b2232333abd9dd77b515f4bc8788110","sha256":"ef314312abf6817484c5cb94bb9d784bff7fc2b451f50410c5673a84a76f46e4","sha512":"17b3551ccc849c2915fb659a4576df836ed9a96e35856380f1db985cd5110c9f7e927328a3c0b1f5a6b2caef978b1fe66851129ffb836145da79b9429646707e","ssdeep":"","tlshash":"e1410bc6c5049bac9d5f6ec10e9962358fbb09243f5b8c6d5b2f5841179cd24714f4a2","first_seen":"2025-12-26T11:15:01.437788Z","last_seen":"2026-09-26T12:52:39.944069Z","times_seen":21,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/include/lang.js","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.505Z","timestamp":1790315220505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"GET /31626547862/include/lang.js HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/31626547862/\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Wed, 23 Sep 2026 11:15:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gEB4h70K6PghsvOMV%2Fin75uohxeuDuOCUcx42c6p2F4QXPEpXcLgNeTz%2BIThELl8yYoAhzRO4KQ2ft7YRlmoFHIY4pk%2BGx0o22zUCChO7i1SZ44kEJzfzHkGwQVqIQmws3YgEg%3D%3D\"}]}\r\npriority: u=3,i=?0\r\netag: \"6ab3b4ed-56ae8\"\r\ncontent-encoding: gzip\r\ncache-control: max-age=14400\r\ncf-cache-status: REVALIDATED\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a407bb50286449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":355048,"size_decoded":107850,"mime_type":"application/javascript; charset=utf-8","magic":"Unicode text, UTF-8 text","md5":"0c13689f2d5fb7850df1e2a77b6aa7f7","sha1":"e080fe8889b61ca455e2612b515235cd2e9f475d","sha256":"44e01a8f39caf9419cc69d74978b62a4b185f358468f9dab89f1cc83d278bc04","sha512":"2295c61f1c5a725d20e265e245c707a7009fbc376ddf1e9b86c35bc00cc1a9e51f8dd3a31d99037c47df2baef794cc18178135e10108c26c3533d78a6f135f83","ssdeep":"6144:OD1x6Y/uyc2KS/pjK1stgqVjqRapBah3P:OD3pjK1sC4jqRap0","tlshash":"53740abad6d05c5700d07756b88a7a2701a843372f41b9dabb9ce65c0fced6f81b211d","first_seen":"2026-09-24T13:26:26.414885Z","last_seen":"2026-09-26T12:52:39.938585Z","times_seen":18,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/fr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.802Z","timestamp":1790315220802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/fr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-6d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1915969\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXJve3jDIBwhiEdmGCgstLMuZrs81HM8WDOqUr%2Bf40uINpGN33BKYPvNPJ0VBtgwkhqxoaBNqFsu3%2BvcpWfA2k1%2F%2BiwZZQemj5hdmdz8GWGzH4cf7zEK9oLZ5R7GfQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521ba6b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 109\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":109,"size_decoded":940,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"808bbabec19fd88024f346a3c1b6da93","sha1":"a7baf6237774ca9b643c9f2da0bc5b9a0a7b5e15","sha256":"eec284175556a77e98f09db03f88aa064c2ff7500b56264dc119fbf8ee4ef6bc","sha512":"a5047a3e9b032fe529dc89a6e4cabb0e259f7d892493e30a5a013b54cdbe5d11c07925fbb6d3767132a5ca71730f895fec0321200dcfe4040c65fdcaf2e47155","ssdeep":"","tlshash":"04b092e3aa687c29db924d2211241244d426307e21a082457d689125219251ec0de286","first_seen":"2025-07-04T08:06:49.894286Z","last_seen":"2026-09-26T12:52:39.958821Z","times_seen":583,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/it.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.807Z","timestamp":1790315220807,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/it.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-70\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1998981\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Av%2FB9XUIa0UGqFqJsKfrJ7ByuuY%2F1nNkniNtNHa4cPXwrs%2F3QxTltTtGhZHM4RhxzhlTmDuxOVZYQ%2FRh6DD3T7McK5kPCJuSpn5ef1jUrldoO1EHFE2MfkAH5miRhw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb521ba9b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 112\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":112,"size_decoded":943,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"c489137a2e2358b55b00ecd4e6c48f52","sha1":"b3904337d1e042782b5eec1cfd8575adb6ba3452","sha256":"13ac00068b4541fdac777c9710eea64044c365df6a72a1a94bc0c5765b8ba123","sha512":"4310bdd00e8dff466cfc2a4435f6b445e92f7a5c82055420ce4e877896fed32bb0487753f4dc3479db62bef3a15ca003f41d6a9562322c5a0709e95b10c9a682","ssdeep":"","tlshash":"3ab012c2b35cbd38878b1167842c91089976236f06b8c6fa650a85142b5204f85c9e9b","first_seen":"2025-02-12T08:32:15.804049Z","last_seen":"2026-09-26T12:52:39.931063Z","times_seen":355,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/kr.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.834Z","timestamp":1790315220834,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/kr.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-22c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2075363\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oAOONrLSnA2sRRSk9ABvZGD2CtZHAGTDflz8gGpxCC2GxAbJ5a1cc%2FS97XVDxemtuFgQrZ%2BE71vx1qgqbempSOn5pTSs7G5bo43C%2F%2Fl%2FlXZAeVsYsVi%2BQkUFtHljAw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb523bc0b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 556\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":556,"size_decoded":1392,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"2cc630642583d04a3600c322a657cc95","sha1":"b3bd5036243125c7eb05624202bfb544b2fd84c6","sha256":"e4da4c40c5f0a6e69c2dfa07918d487fabcb9a2aa64165af04f8385afba79872","sha512":"0935359ebe2c76d6ae3f57f16f5aee3bf613ec291218cfb7f47b60148e2003bb3049130d3f6ffe67d2d4315f274db4915c18ddb61c063479d78b73c32d0c586f","ssdeep":"","tlshash":"42f026501394fdc6c1415637f1385957c476bedb517bc02e5b024b31185228d248c3da","first_seen":"2025-07-04T08:06:50.041268Z","last_seen":"2026-09-26T12:52:39.932308Z","times_seen":226,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/lv.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.836Z","timestamp":1790315220836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/lv.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-5d\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2003355\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NlueYpvtwM2a6wlQXziD2pwdwNqqqV5bAgszi3WQQwSRPdiFAQ8aXA%2BfuRBPTwMpq8x4c8NxB6XM6NYRJI1ByUBZtkAiDZf5YJDiRwi1UA9%2FvGDLuy%2FCY9Su2qKHbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb523bc2b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 93\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":93,"size_decoded":921,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 1-bit colormap, non-interlaced","md5":"c3338fc6ce4d1d45d8cc0faaa3c15244","sha1":"2a0c2cbf8f8d5887943b7d8c3890e8f5c94a4311","sha256":"15b73ff5d64cefefbbc98e5ccd8360f15b6d6806fcce76422e4bc764779358be","sha512":"aa3728df6cc7bf395f0bb33f7118e45594ea79ee07220402052ee6bdb779e1f133730c83d8804be4039a42de9cae5ea6f98e931860fe08eb1507c37500e12ab3","ssdeep":"","tlshash":"93b012d17d900c32f5c60ae7510c25b0ec22c644461081074000cd16543100c88ad3c2","first_seen":"2025-06-27T03:22:22.696544Z","last_seen":"2026-09-26T12:52:39.952958Z","times_seen":133,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/si.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.847Z","timestamp":1790315220847,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/si.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-c4\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1992187\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MMaOM6pMcIxK5C9oRBc%2BcEyBO479FKEDJeQvwCSsbBBvOnS2qNFTywUUvrZimX0Z37aP0VnNqUJI3GYvTkvfimaeg%2Fzl7m4PDc3c72y%2BOSIYwJ%2F%2Bg%2BTcvM8nZcdG3g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb524bcdb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 196\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":196,"size_decoded":1031,"mime_type":"image/png","magic":"PNG image data, 40 x 20, 8-bit colormap, non-interlaced","md5":"c579ccbca408893c48de1ceb452e2a35","sha1":"410483a2652ef1bb68acfd0b9d5ecf02a724b530","sha256":"d4272756e6664abfbcd5bd1be48a83c679340fdf15589ff58eed6add9fb5943b","sha512":"e61f4913d38333e604501268a907d20694a2222e3127bb60f48966ad3bed677926e379801be7a32c1ba8c5bd50fc497bad234504921b4e4a6dbd3dc75fb6dc2f","ssdeep":"","tlshash":"50d022d32226fca4f28202375f264f9bc932411800104d37205f4d1a182a328b1d8283","first_seen":"2024-10-31T19:28:53.412439Z","last_seen":"2026-09-26T12:52:39.929215Z","times_seen":128,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/us.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.512Z","timestamp":1790315220512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/us.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\ncontent-length: 252\r\nserver: cloudflare\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-fc\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nage: 2224765\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RWQmKVrxn76TabvXJUpEarUGUcDaAT6COE51Z9Hi7zDVUYxe5nbwDB%2FtplzU9tV%2Fr485Htv3kOrtYSBzl6nEIacAN%2BV5wPCOqkmWlDl%2FleE%2F3pKAV%2B7Mc%2Bk0dflwVA%3D%3D\"}]}\r\ncf-ray: a407bb509da15a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":252,"size_decoded":1067,"mime_type":"image/png","magic":"PNG image data, 40 x 21, 4-bit colormap, non-interlaced","md5":"893a96612ae6640a35ecb21eb66c59da","sha1":"31837ce8ddd2a679753c22bddb78a60dd3bafb4c","sha256":"09dd59a3417221f62c23c3abb37e9b598357502643a0ea9ad6561a50b2dcc1dc","sha512":"e5a34cc77562d700b57f3d86ddc1a89170c5f7a03d6dd0f03a3c89861ca87f91d2dd7a95211f8ebad1177ce942860d76e33b657d53f20f34d34d5beb69fe9652","ssdeep":"","tlshash":"ebd02be5f155bd210b4186121b4c59965c229579a292005e6071aa6d620d11af6f0583","first_seen":"2025-07-04T08:06:49.924394Z","last_seen":"2026-09-26T12:52:39.91021Z","times_seen":1027,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":52,"dns":0,"connect":1,"send":0,"wait":6,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/jp.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.822Z","timestamp":1790315220822,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/jp.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-ef\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2224765\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QlJjFOA3xwHTl3CKpj7%2BWPBjiEj%2Flc9ZvzmD9qYIkAAvJETx%2FSY0gKghUROVtS7WbqRgObpaFEQk%2FhFKrrTC7Q%2B6%2FOwObymmhhF3zYdO1kYVkNI9Og0KNfJYnB0bgw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb522bb6b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 239\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":239,"size_decoded":1074,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 8-bit colormap, non-interlaced","md5":"83e65aec2cc399a5d434f2662bfa842e","sha1":"005c45af9a8ce06d3dfba29f2ae01d818cd25edb","sha256":"ec7131f162be04e0c5ef2680ef5bd4b433e482f20913bab1fe9ae9f748ec3693","sha512":"188e7fff29afed8562028cba7033d1d46c27629c452c528ad2f7fcc58f1ecc8a4118b8ef26e5fc7fbba2e891ab04f8eea0d026fc6b44b3557a154ee0facb6532","ssdeep":"","tlshash":"5ad097af61280830c9688272d039020ccef89023d3a60071056c83f218c230598cc9af","first_seen":"2025-02-12T08:32:15.782071Z","last_seen":"2026-09-26T12:52:39.945213Z","times_seen":301,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/vn.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.848Z","timestamp":1790315220848,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/vn.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-d8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 1658152\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wnmB%2Fz4aHIJ0odBiu9XkQXLesjD0abd40Uo0Uj%2F6yFPaDgSWTjd1FvhhbRhCRVoMYt4HTsywIeHLvWLWcnXb%2B%2B2u6PluaWnLBfTrcKqokL26No2Cvd5fwKAKCtoMbw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb524bceb518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 216\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":216,"size_decoded":1047,"mime_type":"image/png","magic":"PNG image data, 40 x 27, 4-bit colormap, non-interlaced","md5":"9b292ea2b16c872ce5b25c9915836d02","sha1":"ab2f792228d4052a600400ab9f4142b3fe7fdf93","sha256":"9349fe9d726e98d34e6ee0496c1f5fe12e910df528ebaab9c9bbe24a2fe2bc64","sha512":"a2909c1d61d20e084b4b558378a12396a1873bc15cd116473c69e5c90da34a888c77f514b4872c71a7860117472bda74892c948e4b42028d924cd80f453fb6bb","ssdeep":"","tlshash":"a0d02299e3752f2053c22a71aa783715aa381029bb18836ba00e46bda05055acb44382","first_seen":"2025-07-04T08:06:49.895597Z","last_seen":"2026-09-26T12:52:39.9162Z","times_seen":180,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"flagcdn.com/w40/is.png","fqdn":"flagcdn.com","domain":"flagcdn.com","tld":"com"},"ip":{"addr":"172.67.180.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:00.851Z","timestamp":1790315220851,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"flagcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Wed, 29 Jul 2026 01:47:23 GMT","end":"Tue, 27 Oct 2026 02:42:40 GMT"},"fingerprint":{"sha1":"DB:70:D4:5F:B8:7E:38:F4:35:F1:23:C7:66:98:1A:51:08:78:F6:40","sha256":"47:2A:A2:91:C2:CC:37:AC:9C:8E:B5:A6:FD:21:5C:06:B6:3E:13:2D:D0:DF:E8:55:90:D7:80:3D:D5:34:02:A8"}}},"request":{"raw":"GET /w40/is.png HTTP/1.1\r\nHost: flagcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://homesdowttups.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:00 GMT\r\ncontent-type: image/png\r\nserver-timing: cfExtPri\r\nlast-modified: Tue, 01 Jul 2025 15:39:58 GMT\r\netag: \"6864014e-8f\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2678400, s-maxage=2678400\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nage: 2304506\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qes8aldufQVN3ppuPOEnteIdNwi2w6Zm2YwE66%2FU2fAdmG2d5lCaaRNvhf7wp4SYj3eF72RhgMNCy1dmWxZkoySIQ5Gr6l2aZ3nyU5bDTQo4H5tpqRPLnByUfW%2FpEw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncf-ray: a407bb525bd1b518-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 143\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":143,"size_decoded":970,"mime_type":"image/png","magic":"PNG image data, 40 x 29, 4-bit colormap, non-interlaced","md5":"092fb9aa7a548346697234f13a6c8800","sha1":"fdc10eb7c0fde5798dc41bae7f592944804aff32","sha256":"f7b5faba922a008bcc6d640cc38ba7629cd168ab0e155cda593a914900a59113","sha512":"26c74bb6ff4b4e9163c40c7ca19be5e2eeba4a6bc7539da187c6480a2072ebbe8baf6270afd11ef279931fda42d4f74cba1432846be90bcd74318241ca75f17f","ssdeep":"","tlshash":"a4c02bcad20f6cb9c90a4e3131103005ec37846d580214078189a921134a04a91c724b","first_seen":"2025-07-04T08:06:50.00083Z","last_seen":"2026-09-26T12:52:39.932944Z","times_seen":107,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:24.734Z","timestamp":1790315244734,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary22bf138df14c5fe0399c472a72f39fc8\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundary22bf138df14c5fe0399c472a72f39fc8\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundary22bf138df14c5fe0399c472a72f39fc8\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundary22bf138df14c5fe0399c472a72f39fc8--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:25 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lPZW%2FqVHrhx1um1OqMRFzNV%2BRmNNJSp0tE6Kxc6vqXyIhv3d8XDsBODShWA6nnkDMc9vqAZ3vIYg5X7ccR1T2CSKAcZifwwYGvI9RdHPsMqRcDZJU6UnWM3xCLHnYTVtnOoz9Q%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bbe79d6049c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":989,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":678,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":678,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"homesdowttups.com/31626547862/api/request/page/","fqdn":"homesdowttups.com","domain":"homesdowttups.com","tld":"com"},"ip":{"addr":"104.21.8.15","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://homesdowttups.com/31626547862/","date":"2026-09-25T05:47:27.736Z","timestamp":1790315247736,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"homesdowttups.com","organization":""},"issuer":{"commonName":"YE1","organization":"Let's Encrypt"},"validity":{"start":"Wed, 23 Sep 2026 10:27:30 GMT","end":"Tue, 22 Dec 2026 10:27:29 GMT"},"fingerprint":{"sha1":"4F:C5:91:46:54:93:57:19:C7:05:C1:3F:7C:23:2E:63:E5:9B:2C:2A","sha256":"5A:1D:79:C2:2F:41:9C:DE:57:A6:FE:F4:57:E5:F5:F0:E6:2C:4D:97:95:89:17:D2:56:16:52:D3:4D:15:C8:46"}}},"request":{"raw":"POST /31626547862/api/request/page/ HTTP/1.1\r\nHost: homesdowttups.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://homesdowttups.com/31626547862/\r\nContent-Type: multipart/form-data; boundary=----geckoformboundary8055de2de20e4bf58e5b6f768866c9cb\r\nContent-Length: 295\r\nOrigin: https://homesdowttups.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=onc26uuujdnrphklelugqbl2na; UID=2ILDVPHD\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":295,"data":"------geckoformboundary8055de2de20e4bf58e5b6f768866c9cb\r\nContent-Disposition: form-data; name=\"link_id\"\r\n\r\n31626547862\r\n------geckoformboundary8055de2de20e4bf58e5b6f768866c9cb\r\nContent-Disposition: form-data; name=\"log_id\"\r\n\r\n2ILDVPHD\r\n------geckoformboundary8055de2de20e4bf58e5b6f768866c9cb--\r\n"}},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 25 Sep 2026 05:47:27 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wgXjD6RHl1ctkuQjv%2B96iEu%2FCRsssX%2BLUyB1eN9vKYQSH24E%2B4i%2B7nHAcbHlmycmsLlM58HdaKvGVLYIrMAfPS96y7wqaAJ%2BDXY8s5t6%2BJV9EynUQOefG1re69GeJcO8dMzCww%3D%3D\"}]}\r\ncontent-encoding: zstd\r\ncf-ray: a407bbfa58a449c5-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":634,"size_decoded":999,"mime_type":"application/json","magic":"JSON text data","md5":"ee91d325991d08be113778c6279ce2da","sha1":"b809534596f76be3ce9f8b9faae683ebf50c0fb6","sha256":"0d0171a19fea800d1cdd23afac2f51d4ceba907b5094677a38bc037e36d9f679","sha512":"35a1373bfd51278d9107636a004eb6ce7ff6158166848512d6fce7e7f0f59394512d5c1151ba02da7e646550d13ec35b677f8dd4c28a925f7673e4d69e7ff932","ssdeep":"","tlshash":"0bf00241cfb63015bb1ba268f14d3d0f736c522cd52cac99a9cdc05d2a45ba04f2f481","first_seen":"2026-09-24T13:26:26.400343Z","last_seen":"2026-09-26T12:52:39.909496Z","times_seen":18,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-25","alert":"Phishing Block","trigger":"homesdowttups.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"homesdowttups.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}