{"report_id":"911a98ca-8b1d-40d3-8a04-dd15f51b6281","version":0,"status":"done","tags":[],"date":"2026-09-25T05:38:39Z","url":{"schema":"http","addr":"zd.lc/IiIw8","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"final":{"url":{"schema":"https","addr":"zd.lc/IiIw8","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"title":"Blocked Link - Pretty URL","dom":{"size":68512,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (24760)","md5":"9299405f7becea0196a65cb4d201510e","sha1":"0c2118a1fd2015cd7a7ba038fcffc19d15fb25d3","sha256":"6fce72314834df11cb04b8fa5ec952d7a33426f6590aa809c27720ab41d8a116","sha512":"86f39163944888b94b80153b65033af04bf0683ec61e78779212f9c5598a72ad522d57c9c4480dd92491596b91ed352897eb4365a5e9751e7e6319d185b53f95","ssdeep":"768:ZcK4gT+MzknLaC8AZavHIxKlky0B7Huvc8jwAF1h5cVV7olWeM:ym+MzkLr8AZZxKlkh7Huvc88AF1h25eM","tlshash":"bc63a679b1b255b78b6e72c89d712f2d54af9f0b64a04fe0e1a4c8503b905ac0c375ee","dom_hash":"domhash1aac78b710d08b204c5e029959001818","first_seen":"2026-09-25T05:38:48.840591Z","last_seen":"2026-09-25T05:38:48.840591Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"zd.lc/IiIw8","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":0,"asn":16276,"as":"OVH SAS","country":"France","country_code":"FR"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-30T05:38:39Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zd.lc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"client.crisp.chat","ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2017-06-09","domain_rank":168029,"first_seen":"2017-07-02T12:33:45Z","last_seen":"2026-09-18T11:39:46.088444Z","alert_count":0,"request_count":6,"received_data":416414,"sent_data":2971,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"pa-proxy.workers.hcloud.uk","ip":{"addr":"104.21.28.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2020-12-10","domain_rank":0,"first_seen":"2024-10-24T17:03:54Z","last_seen":"2024-10-24T17:03:54Z","alert_count":0,"request_count":2,"received_data":4666,"sent_data":921,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"client.relay.crisp.chat","ip":{"addr":"64.227.36.222","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"domain_registered":"2017-06-09","domain_rank":159579,"first_seen":"2017-07-02T12:24:26Z","last_seen":"2026-09-18T21:15:27.753699Z","alert_count":0,"request_count":1,"received_data":441,"sent_data":610,"comment":"","tags":null,"fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"zd.lc","ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"domain_registered":"2024-03-14","domain_rank":0,"first_seen":"2025-09-07T02:56:09.518338Z","last_seen":"2026-09-21T08:04:03.072086Z","alert_count":8,"request_count":8,"received_data":964727,"sent_data":8741,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]}]},{"fqdn":"fonts.bunny.net","ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"domain_registered":"1999-11-22","domain_rank":56787,"first_seen":"2022-03-21T07:38:02Z","last_seen":"2026-09-21T10:21:32.284796Z","alert_count":0,"request_count":1,"received_data":3944,"sent_data":508,"comment":"","tags":null,"fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"client.crisp.chat/l.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a31557aee2bcbe0841ad9ad191122b7d","sha1":"0956056a47c0162142c14785c50e89844dffddd3","sha256":"dfbec7f1cbd2ab3d2d7bf25f869f711972c4108c817eb3d46161ca3747bad9fa","sha512":"778da9cddb152090d16b41bcac310af72d699d15a4b516c19e2244d62b6b7cb45cb1182f07481de63d0e6f1d0f9c3d05d58d57a9aad58dc25be5903b4397e620","ssdeep":"192:8ySfZ0VsUEswg2r/gAbe39QoxdpsxGVkdlY3AnL/dCSaQwiY:++SS4/M9QoxLkjY3AxZ1O","tlshash":"81f1731732696132059362aa163b2b49f43361295cc5c15cb169ecf1297ca8fa13bffe","size":7638,"data":"","first_seen":"2026-09-23T06:45:23.725779Z","last_seen":"2026-09-25T11:39:24.638663Z","times_seen":29,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_95a50f9.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ca1443d2b0d9ab7cd01aaed9b3b2dd7","sha1":"a627adbedc9870a2a135e79448d1159e85a114a5","sha256":"24a4e5b8d0b2ca21d963ba732e47a50694fff8bd0aeecaf8b4796372509c6227","sha512":"a75151666cef1657ed2920582a95b33163038fcb871b0e3790f143d548c634cb9fbf3d15e097cd0b3167d1424c54bd55641fdd0d5082e92e544ab7f3dea7c83e","ssdeep":"3072:UOr1O5AHQxyS7tChJR8D0O7/lHIzMY98vEiTaPD7JcZ+RlNaZ6g+:Zcawxf78hJR8D0O7NHB07JeINR","tlshash":"c644294a3265a83312f642c7a4321942f37665ac6886007cb76c7def6b5cec631e7b74","size":253398,"data":"","first_seen":"2026-09-23T06:45:23.650896Z","last_seen":"2026-09-25T11:39:24.659744Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/en_default_95a50f9.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4d6e87d7c6e63eb965dde362481d16f1","sha1":"ea9666446a57b82613f87a939df9faf19fcc8559","sha256":"e4e694ff98b0818c5aaa12ab7b017ebbd358a397f0fbb2890ad0563b0595a534","sha512":"72ec050ffa7ad856bde80797d0413eb42ec481fe9c065f5abb5763aaefad0ed0db3429ad4f57d1ea7463aa82e1d4ef670bc614d9f420db11ca833f75b82042b6","ssdeep":"192:niJbPFmXDS83jwhKwPteE2WZXgkEeMeTAFSIPAU1RrUWBX4Ffj7nOmrY2FYXCYLU:nePFmX28+XgkEeMeYSIPfRrLk7sQrSRs","tlshash":"9072ca1edf32de7b02b74b83b185ba024db1117106e0687ed45d897d02a4ecab69bf49","size":16446,"data":"","first_seen":"2026-09-23T06:45:23.696165Z","last_seen":"2026-09-25T11:39:24.720408Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/BlockedLink-BV8fe4p3.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b7e246248f0b46f95f9249da997e1b0","sha1":"f4e1c343928e304ac18db1ef1ce2d913034d3738","sha256":"8799eaec8e3f9ca591535a2ce2aabb2a4e1d1bd905f982ce699602584a8f5477","sha512":"4ee9911d898ce40b948238436445d586172548cd45e6a7e40206719ead1802547534adfb9e6a341efbeb74bf8e0b3f36b1fa306c2b70e807cfe89c938cd8acbc","ssdeep":"192:Rq6XofCgpF8N8iHtFKzoCgpF8N8wHUwr+NOVFKaJ5Gy7:wmHkHvCtarV7","tlshash":"25e1613b02e077aab9cb4b8a30487514779e4b2db176e190936ee408fc55ef76135b32","size":7026,"data":"","first_seen":"2026-09-25T05:38:48.856684Z","last_seen":"2026-09-25T05:38:48.856684Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/MasterLayout-DOUC_RJM.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c0edc75c944ab89bab55be8aa7a2a45","sha1":"916f0022f401ca5c2edbee7447ce1bee505c2284","sha256":"144061d65e51b333b94aafd71b2135c778f766fb4ff5e249c1b75b27580f04ab","sha512":"ce7eaac908a9a4d3f2f612a5b3015799c3390e9e13222b7f3e540c86cdc1027fbf6e85981c0329b4362bd7a48e0386d4caf35c368dd60e3b9327d6e2aaa0a214","ssdeep":"384:EWbxiVw0IS0TlleURMuAi1aeanGCMCAof72X:EW1iVwPSQWURMuA+aeanGCMCAoaX","tlshash":"a172b47ea2d027bf35c68fd75c18ac04e258ab5bf27b0885d3a9c81c7c60d536936234","size":16601,"data":"","first_seen":"2026-09-25T05:38:48.858023Z","last_seen":"2026-09-25T05:42:10.11539Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/create-theme-C6LJA8jX.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"50bb332bef8103eb950b38bd4b94ad60","sha1":"374c7f32ee0a3862276aeacff6f07459c4c82d46","sha256":"d211ebaf1c28a1402bed388a862a90c3cc66c708acca6c23e7c5e79cf217617d","sha512":"902a7cae542b94a1c0385cd37693fdaa16878c1b17f82f0b1079d83fa31829c06d03788229d46212565cc4ad17902c0667d3a425ef31691f62af8c39f1592ffd","ssdeep":"1536:fmOHIkZ/SND9q5+uKIcUNzL/Efqb8dS7xWrB7D:fZHLZ/SNDSfKIcUB/6Y8I7YrB7D","tlshash":"46330a153487487e66ff93d2d06cef99d6381502e0094a9cf29b4f32af44ba9429ef1d","size":52072,"data":"","first_seen":"2026-09-25T05:38:48.859697Z","last_seen":"2026-09-25T05:42:10.086058Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pa-proxy.workers.hcloud.uk/js/script.js","fqdn":"pa-proxy.workers.hcloud.uk","domain":"hcloud.uk","tld":"uk"},"ip":{"addr":"104.21.28.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"25b5b48c4c1efed79da2c557576bff85","sha1":"f441809be456048d32225ae0d47efaf1006efbe5","sha256":"a34d5ce3e989b828c42fe4994c8c1e21693c311db3b076fcbf5202cdc505e5ac","sha512":"7e68bb787c024fb14042a4ab95b7ad5d81750b357404865fab281d16e925a0f5e5149fc46f32549f73d57fd17052ff10ce323b28eefe34cf231f29457b00aac2","ssdeep":"","tlshash":"80512db96a02757909b9d167b62fb3163a3366263116b401542cd9c13e28eefc323ecd","size":3005,"data":"","first_seen":"2025-10-28T15:34:03.371103Z","last_seen":"2026-09-25T05:42:10.089954Z","times_seen":6704,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/IconBase-8HXsI3KG.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ed9979e1c1d8df519ead3b61ddf6ce7","sha1":"d5d566949738501ee45aa631e6d34035bb28fb7f","sha256":"79bec8fe872a1d200abc3214fa31fead4b81b481bcbf298310bbff9ffcf9bc1f","sha512":"12471587d5e5a47b2c66027305c31a9e23a5b160e2a9b6ffad2d8f1eff195a991936f7c73dbbbdfaaa01d53aaf0fb1cb93b9cc3df870301489424611d16c2c3e","ssdeep":"","tlshash":"e12154a6223876f2e3af50df50d85844e2146998b07c85f2fb8cc82b30a5486751fe71","size":1208,"data":"","first_seen":"2026-09-25T05:38:48.854129Z","last_seen":"2026-09-25T05:42:10.119505Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/app-6EGRTRuv.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"introduction_type":"scriptElement","is_inline":false,"md5":"78e30525119525dc028078f1445ee42c","sha1":"afc245c220080d50e93e413ed52ad47e050dec26","sha256":"fdeda8d46462bcda148e2e19751bf1fc7672ffcc31821d32c8a5408e895f61b9","sha512":"28b5aa0adb06d8f73e9d6789482c10b655984069b7367f827a50825660e55f8cd567c2e8396781512868443237db70dd8e224dc3f4b9dc122f2a516ce14de2d1","ssdeep":"3072:muU3e5EQB5tRdRXw8rJV1c6uZXqOvIM1L6KZ9aujwzJisWWnMuhRWLW5l:mv3e5B5bXFc6uZohv5M3W5l","tlshash":"d76439d831e6f57253e716e4006f1203f23c2a26684d8460f615fdea7ab940a91b7fbd","size":327190,"data":"","first_seen":"2026-09-25T05:38:48.852971Z","last_seen":"2026-09-25T05:42:10.068716Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"client.crisp.chat/l.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.533Z","timestamp":1790314689533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 11:12:49 GMT","end":"Sat, 12 Dec 2026 12:12:43 GMT"},"fingerprint":{"sha1":"2D:FF:86:97:19:EC:C3:5E:6F:0B:81:C1:D8:A6:A3:0C:E4:47:8C:29","sha256":"7B:40:D9:E4:5E:C7:B8:DF:1F:9B:99:4A:B8:C0:09:9B:A6:A7:AD:B5:ED:A0:B5:22:61:D6:FB:5F:EE:00:36:A0"}}},"request":{"raw":"GET /l.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=10800\r\netag: W/\"6ab3702e-1dd6\"\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Fri, 25 Sep 2026 08:38:09 GMT\r\nlast-modified: Wed, 23 Sep 2026 06:22:38 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\nage: 83538\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a407ae59ada523eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7638,"size_decoded":3670,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7543)","md5":"a31557aee2bcbe0841ad9ad191122b7d","sha1":"0956056a47c0162142c14785c50e89844dffddd3","sha256":"dfbec7f1cbd2ab3d2d7bf25f869f711972c4108c817eb3d46161ca3747bad9fa","sha512":"778da9cddb152090d16b41bcac310af72d699d15a4b516c19e2244d62b6b7cb45cb1182f07481de63d0e6f1d0f9c3d05d58d57a9aad58dc25be5903b4397e620","ssdeep":"192:8ySfZ0VsUEswg2r/gAbe39QoxdpsxGVkdlY3AnL/dCSaQwiY:++SS4/M9QoxLkjY3AxZ1O","tlshash":"81f1731732696132059362aa163b2b49f43361295cc5c15cb169ecf1297ca8fa13bffe","first_seen":"2026-09-23T06:45:23.725779Z","last_seen":"2026-09-25T11:39:24.638663Z","times_seen":29,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":3,"connect":9,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"pa-proxy.workers.hcloud.uk/api/event","fqdn":"pa-proxy.workers.hcloud.uk","domain":"hcloud.uk","tld":"uk"},"ip":{"addr":"104.21.28.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.613Z","timestamp":1790314689613,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcloud.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 20:02:52 GMT","end":"Sun, 01 Nov 2026 21:02:50 GMT"},"fingerprint":{"sha1":"09:1F:4D:21:1B:3E:66:E9:3D:8F:4F:30:28:C6:10:22:26:8C:17:B7","sha256":"C1:8B:4A:85:9D:23:42:53:37:8E:FB:B5:38:3F:1A:E3:69:BB:B4:67:29:5F:DA:F7:E3:24:F3:05:1B:D4:8B:84"}}},"request":{"raw":"POST /api/event HTTP/1.1\r\nHost: pa-proxy.workers.hcloud.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: text/plain\r\nReferer: https://zd.lc/\r\nContent-Length: 78\r\nOrigin: https://zd.lc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":78,"data":"{\"n\":\"pageview\",\"v\":33,\"u\":\"https://zd.lc/IiIw8\",\"d\":\"prettyurl.net\",\"r\":null}"}},"response":{"raw":"HTTP/3 202 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Fri, 25 Sep 2026 05:38:10 GMT\r\ncontent-type: text/plain; charset=utf-8\r\npriority: u=4,i=?0\r\ncf-ray: a407ae5a3ade56af-OSL\r\ncf-cache-status: DYNAMIC\r\naccess-control-allow-origin: *\r\ncache-control: max-age=0, private, must-revalidate\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: \r\nalt-svc: h3=\":443\"; ma=86400\r\nx-request-id: GNh5uaThbiiU93EAuNvB\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=36Z235vqpb3A7VuuROhtid5uu05secpy45qAe0kOC0nace%2Fa88Lpvj0g5ZmTgn8Gk4UUHzfe%2FVZfhL08c7awkmQ%2BcBYX4DDWA1EDyQsKNT5pAvBG1%2FLnSuG60n5ze7YnLTkdG5a9H9%2F03DmHPQ%3D%3D\"}]}\r\ncontent-length: 2\r\n\r\n","headers":null,"cookies":null,"status_code":"202","status_text":"Accepted","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2,"size_decoded":819,"mime_type":"text/plain; charset=utf-8","magic":"ASCII text, with no line terminators","md5":"444bcb3a3fcf8389296c49467f27e1d6","sha1":"7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb","sha256":"2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df","sha512":"9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570","ssdeep":"","tlshash":"c710000000000000300000000000000000000000000000000000000000000c0000c000","first_seen":"2023-03-08T02:32:37Z","last_seen":"2026-09-25T12:27:49.560291Z","times_seen":480101,"resource_available":true,"data":null}},"time_used":655,"timings":{"blocked":1,"dns":0,"connect":16,"send":0,"wait":638,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://client.relay.crisp.chat/w/95a/?EIO=4\u0026transport=websocket","fqdn":"client.relay.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"64.227.36.222","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United Kingdom","country_code":"GB"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:10.020Z","timestamp":1790314690020,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.relay.crisp.chat","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Mon, 09 Mar 2026 00:00:00 GMT","end":"Fri, 09 Apr 2027 23:59:59 GMT"},"fingerprint":{"sha1":"D6:77:52:86:F5:CD:F8:10:0F:40:54:04:1E:4B:73:AE:72:FB:C8:6F","sha256":"89:E0:2C:E5:3B:95:C3:4D:F9:9C:21:BC:FB:7B:F9:71:C8:21:87:5E:A8:72:2E:79:82:E7:64:63:52:83:E5:05"}}},"request":{"raw":"GET /w/95a/?EIO=4\u0026transport=websocket HTTP/1.1\r\nHost: client.relay.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://zd.lc\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Q29acgRRVOMn7/toljZVng==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nServer: nginx\r\nDate: Fri, 25 Sep 2026 05:38:10 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: 09UEF3ZOWIg3CpTBJ97Of/IVwRk=\r\nX-Crisp-Ray: website w:95a 10.133.254.92:3000\r\nAccess-Control-Allow-Headers: Content-Type, Origin, Upgrade\r\nAccess-Control-Allow-Methods: HEAD, GET, OPTIONS\r\nAccess-Control-Allow-Credentials: false\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Max-Age: 300\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"WebSocket","description":"WebSocket is a communication protocol that provides full-duplex communication channels over a single, long-lived connection, enabling interactive communication between web browsers and servers.","website":"https://en.wikipedia.org/wiki/WebSocket","common_platform_enumeration":"","icon":"WebSocket.svg","categories":["Miscellaneous"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":441,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-25T12:27:37.283953Z","times_seen":18651356,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":0,"dns":73,"connect":93,"send":0,"wait":41,"receive":0,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/settings/website/3acdb410-6c32-4d48-99d1-400814a70edb/?1730818251249","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:10.316Z","timestamp":1790314690316,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 11:12:49 GMT","end":"Sat, 12 Dec 2026 12:12:43 GMT"},"fingerprint":{"sha1":"2D:FF:86:97:19:EC:C3:5E:6F:0B:81:C1:D8:A6:A3:0C:E4:47:8C:29","sha256":"7B:40:D9:E4:5E:C7:B8:DF:1F:9B:99:4A:B8:C0:09:9B:A6:A7:AD:B5:ED:A0:B5:22:61:D6:FB:5F:EE:00:36:A0"}}},"request":{"raw":"GET /settings/website/3acdb410-6c32-4d48-99d1-400814a70edb/?1730818251249 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/\r\nOrigin: https://zd.lc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:38:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=14400\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Fri, 25 Sep 2026 09:38:10 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 25 Sep 2026 05:38:10 GMT\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a407ae5e7db84c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1293,"size_decoded":1398,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"a5beb3bbf82b9cee9aa003abc1db8b8c","sha1":"271151c7ccc0fbbf99545cc00d5291739dbff4d9","sha256":"3d424c282ffd9693d6d78867d3a6d355f05cac596e71efefad782c49dd4dab0d","sha512":"e8deebaf7e6a8b0ee974121d4d214019e147e39331a67e5ee14dde4281ba5cf9efcc683ad48d44eb5e87e797159a0fd8fc278ff65a194853d5c483f3c888623b","ssdeep":"","tlshash":"e421c01f58a908bec668438ae8463e410bad10aba548b844f55c4c1d23f76cb7373237","first_seen":"2026-09-25T05:38:48.844114Z","last_seen":"2026-09-25T05:42:10.105882Z","times_seen":2,"resource_available":true,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/IiIw8","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-25T05:38:08.750Z","timestamp":1790314688750,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.lc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 22:00:46 GMT","end":"Fri, 27 Nov 2026 22:00:45 GMT"},"fingerprint":{"sha1":"36:E4:10:C4:5B:DB:BB:67:1D:84:91:F1:CD:A2:1A:FF:3E:42:17:6F","sha256":"FE:B0:3C:4D:6E:1D:67:D4:63:E4:B8:C0:A6:5B:84:2C:ED:71:A6:6B:4C:16:37:FD:02:D1:65:F7:3F:39:BA:45"}}},"request":{"raw":"GET /IiIw8 HTTP/1.1\r\nHost: zd.lc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: no-cache, private\r\ncontent-encoding: gzip\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\nlink: \u003chttps://zd.lc/build/assets/app-DlSdrAVq.css\u003e; rel=\"preload\"; as=\"style\", \u003chttps://zd.lc/build/assets/app-6EGRTRuv.js\u003e; rel=\"modulepreload\", \u003chttps://zd.lc/build/assets/BlockedLink-BV8fe4p3.js\u003e; rel=\"modulepreload\", \u003chttps://zd.lc/build/assets/MasterLayout-DOUC_RJM.js\u003e; rel=\"modulepreload\", \u003chttps://zd.lc/build/assets/IconBase-8HXsI3KG.js\u003e; rel=\"modulepreload\", \u003chttps://zd.lc/build/assets/create-theme-C6LJA8jX.js\u003e; rel=\"modulepreload\"\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nset-cookie: XSRF-TOKEN=eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 17:38:09 GMT; Max-Age=43200; path=/; secure; samesite=lax\npretty_url_session=eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 17:38:09 GMT; Max-Age=43200; path=/; secure; httponly; samesite=lax\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding, X-Inertia\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"XSRF-TOKEN","value":"eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-25T17:38:09Z","raw_expires":"Fri, 25 Sep 2026 17:38:09 GMT","max_age":43200,"secure":true,"http_only":false,"same_site":"Lax","partitioned":false,"raw":"XSRF-TOKEN=eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 17:38:09 GMT; Max-Age=43200; path=/; secure; samesite=lax"},{"name":"pretty_url_session","value":"eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D","quoted":false,"path":"/","expires":"2026-09-25T17:38:09Z","raw_expires":"Fri, 25 Sep 2026 17:38:09 GMT","max_age":43200,"secure":true,"http_only":true,"same_site":"Lax","partitioned":false,"raw":"pretty_url_session=eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D; expires=Fri, 25 Sep 2026 17:38:09 GMT; Max-Age=43200; path=/; secure; httponly; samesite=lax"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Google AdSense","description":"Google AdSense is a program run by Google through which website publishers serve advertisements that are targeted to the site content and audience.","website":"https://www.google.com/adsense/start/","common_platform_enumeration":"","icon":"Google AdSense.svg","categories":["Advertising"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Inertia.js","description":"Inertia.js is a protocol for creating monolithic single-page applications.","website":"https://inertiajs.com","common_platform_enumeration":"","icon":"Inertia.svg","categories":["JavaScript frameworks"]}],"data":{"size":64545,"size_decoded":16421,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (24760)","md5":"76609bf96a1c646fc34ed65d59ae551d","sha1":"5230bc6423ab2a5029caf622571c93f9c275fb54","sha256":"64ecaff82241d91870868dead14a64f4192c6f6e375533e907bb38cc038c7cd0","sha512":"da06e257e815273d70802912d0f86b0075baba29e6379e60aff3fc9a9fd5c0e54975e93946e9f208554a3878cabe24aa041f6b0d2deefaf77f6cf75d812b2f96","ssdeep":"768:LyK4gT+MzknLaC8AZavHIxKlny0B7Hl0E6YAFr9cVV7olI:um+MzkLr8AZZxKlnh7Hl0E6YAFra1","tlshash":"f8539575b1b255b78b6e72c89d712f2e54af9f0b64a04fe0e1a4c8403b905ad0c375ee","first_seen":"2026-09-25T05:38:48.845265Z","last_seen":"2026-09-25T05:38:48.845265Z","times_seen":1,"resource_available":true,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":134,"connect":40,"send":0,"wait":112,"receive":0,"ssl":52},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zd.lc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/app-DlSdrAVq.css","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.258Z","timestamp":1790314689258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.lc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 22:00:46 GMT","end":"Fri, 27 Nov 2026 22:00:45 GMT"},"fingerprint":{"sha1":"36:E4:10:C4:5B:DB:BB:67:1D:84:91:F1:CD:A2:1A:FF:3E:42:17:6F","sha256":"FE:B0:3C:4D:6E:1D:67:D4:63:E4:B8:C0:A6:5B:84:2C:ED:71:A6:6B:4C:16:37:FD:02:D1:65:F7:3F:39:BA:45"}}},"request":{"raw":"GET /build/assets/app-DlSdrAVq.css HTTP/1.1\r\nHost: zd.lc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/IiIw8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D; pretty_url_session=eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\netag: W/\"6ab14bf4-1e7a4\"\r\nlast-modified: Mon, 21 Sep 2026 15:23:32 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":124836,"size_decoded":19957,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65528), with no line terminators","md5":"bb5f31acecaba9530f8e71eaf9638e63","sha1":"c3c4ac62ad25a4b58fdbbd9499901773a8bad75a","sha256":"3f947c364498cce6e76284c81afeaf14ff34b44f51f9efacfc3ceadf0fc29158","sha512":"24f20916cce50e6e85b7b1b1aaa9afc0d6fe20f49d0d581b3663054d6fe1b9ee054aa147a1549b7fafd602f329677b608b78a439057eb30ac85a06cdae8e8be0","ssdeep":"3072:HoWWbpvJluybcqasKFqOS5H9nqTzHrR7e/TdWbd+uUbDjWNDtmhwf1MId2Px8Bx:HovruQasQDl1MId2Px8Bx","tlshash":"12c393b4e365d63bbc33986c529cf82c7a297041ed750bfee911b22187d6af20967314","first_seen":"2026-09-25T05:38:48.846989Z","last_seen":"2026-09-25T05:42:10.109302Z","times_seen":2,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zd.lc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pa-proxy.workers.hcloud.uk/js/script.js","fqdn":"pa-proxy.workers.hcloud.uk","domain":"hcloud.uk","tld":"uk"},"ip":{"addr":"104.21.28.79","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.487Z","timestamp":1790314689487,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"hcloud.uk","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 03 Aug 2026 20:02:52 GMT","end":"Sun, 01 Nov 2026 21:02:50 GMT"},"fingerprint":{"sha1":"09:1F:4D:21:1B:3E:66:E9:3D:8F:4F:30:28:C6:10:22:26:8C:17:B7","sha256":"C1:8B:4A:85:9D:23:42:53:37:8E:FB:B5:38:3F:1A:E3:69:BB:B4:67:29:5F:DA:F7:E3:24:F3:05:1B:D4:8B:84"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: pa-proxy.workers.hcloud.uk\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UFaCIDEmoshBFMswdvKzhsoiHETf%2FjESvaH3tHzyVSIo0z4nSXVtQrl8VAlLx1wZAsERdd0rXdJeK%2BWwb2WO0lrBhbrqLQgSr5tubZp23xFiVl%2FV3WOiZnJLTact%2FgH9L4GmFmUVsHP1WFpHYg%3D%3D\"}]}\r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\ncontent-type: application/javascript\r\ncontent-encoding: zstd\r\ncf-ray: a407ae599da856bf-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 55482\r\ncache-control: public, max-age=86400, must-revalidate\r\nlast-modified: Thu, 24 Sep 2026 14:13:26 GMT\r\nserver: cloudflare\r\nvia: 1.1 Caddy\r\nalt-svc: h3=\":443\"; ma=86400\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3005,"size_decoded":2208,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3005), with no line terminators","md5":"25b5b48c4c1efed79da2c557576bff85","sha1":"f441809be456048d32225ae0d47efaf1006efbe5","sha256":"a34d5ce3e989b828c42fe4994c8c1e21693c311db3b076fcbf5202cdc505e5ac","sha512":"7e68bb787c024fb14042a4ab95b7ad5d81750b357404865fab281d16e925a0f5e5149fc46f32549f73d57fd17052ff10ce323b28eefe34cf231f29457b00aac2","ssdeep":"","tlshash":"80512db96a02757909b9d167b62fb3163a3366263116b401542cd9c13e28eefc323ecd","first_seen":"2025-10-28T15:34:03.371103Z","last_seen":"2026-09-25T05:42:10.089954Z","times_seen":6704,"resource_available":true,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":26,"connect":21,"send":0,"wait":58,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/client_default_95a50f9.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.608Z","timestamp":1790314689608,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 11:12:49 GMT","end":"Sat, 12 Dec 2026 12:12:43 GMT"},"fingerprint":{"sha1":"2D:FF:86:97:19:EC:C3:5E:6F:0B:81:C1:D8:A6:A3:0C:E4:47:8C:29","sha256":"7B:40:D9:E4:5E:C7:B8:DF:1F:9B:99:4A:B8:C0:09:9B:A6:A7:AD:B5:ED:A0:B5:22:61:D6:FB:5F:EE:00:36:A0"}}},"request":{"raw":"GET /static/javascripts/client_default_95a50f9.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/\r\nOrigin: https://zd.lc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\netag: W/\"6ab3704b-3ddd6\"\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Mon, 22 Sep 2036 05:38:09 GMT\r\nlast-modified: Wed, 23 Sep 2026 06:23:07 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a407ae5a1b6a4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":253398,"size_decoded":75958,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65174)","md5":"7ca1443d2b0d9ab7cd01aaed9b3b2dd7","sha1":"a627adbedc9870a2a135e79448d1159e85a114a5","sha256":"24a4e5b8d0b2ca21d963ba732e47a50694fff8bd0aeecaf8b4796372509c6227","sha512":"a75151666cef1657ed2920582a95b33163038fcb871b0e3790f143d548c634cb9fbf3d15e097cd0b3167d1424c54bd55641fdd0d5082e92e544ab7f3dea7c83e","ssdeep":"3072:UOr1O5AHQxyS7tChJR8D0O7/lHIzMY98vEiTaPD7JcZ+RlNaZ6g+:Zcawxf78hJR8D0O7NHB07JeINR","tlshash":"c644294a3265a83312f642c7a4321942f37665ac6886007cb76c7def6b5cec631e7b74","first_seen":"2026-09-23T06:45:23.650896Z","last_seen":"2026-09-25T11:39:24.659744Z","times_seen":27,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":7,"send":0,"wait":46,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/favicon.ico","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.695Z","timestamp":1790314689695,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.lc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 22:00:46 GMT","end":"Fri, 27 Nov 2026 22:00:45 GMT"},"fingerprint":{"sha1":"36:E4:10:C4:5B:DB:BB:67:1D:84:91:F1:CD:A2:1A:FF:3E:42:17:6F","sha256":"FE:B0:3C:4D:6E:1D:67:D4:63:E4:B8:C0:A6:5B:84:2C:ED:71:A6:6B:4C:16:37:FD:02:D1:65:F7:3F:39:BA:45"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: zd.lc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/IiIw8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D; pretty_url_session=eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncontent-encoding: gzip\r\ncontent-type: image/x-icon\r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\netag: \"6ab14b64-59918-gzip\"\r\nlast-modified: Mon, 21 Sep 2026 15:21:08 GMT\r\nreferrer-policy: strict-origin-when-cross-origin\r\nserver: nginx\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":366872,"size_decoded":367383,"mime_type":"image/x-icon","magic":"PNG image data, 623 x 617, 8-bit/color RGBA, non-interlaced","md5":"ca7078160f34638a7d67345831d21200","sha1":"846f2769dee60c0388808aa42450ccc5dece3d54","sha256":"6db885a5ca493a1ce9f04fa93fe01cac3aa810f806318717c2a8b39e218273ea","sha512":"107acff71df6fbdd884d919c9167ce9b5b493c7feba8ceec2268081b4dc80b145222dce81588d3bef627e11fae3867daad2d321bb9f8b6c8051c08f0c65767d0","ssdeep":"6144:TI0JpxQFTD2ReAi/9N5RuipEOt/NFmyFmZ6R7D6gGI1FrCFN9u0oR0MKt2k:TI0JpyFTD2cFN5RuajVFmhwR7YIag8R","tlshash":"6f7423d23c6b4efecc84ba3d40daa6d2ab74d7147a059afd22c71281187bc7519e1f12","first_seen":"2026-09-25T05:38:48.850217Z","last_seen":"2026-09-25T05:42:10.118715Z","times_seen":2,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zd.lc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/settings/website/3acdb410-6c32-4d48-99d1-400814a70edb/prelude/?2026-8-25-5-38","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.918Z","timestamp":1790314689918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 11:12:49 GMT","end":"Sat, 12 Dec 2026 12:12:43 GMT"},"fingerprint":{"sha1":"2D:FF:86:97:19:EC:C3:5E:6F:0B:81:C1:D8:A6:A3:0C:E4:47:8C:29","sha256":"7B:40:D9:E4:5E:C7:B8:DF:1F:9B:99:4A:B8:C0:09:9B:A6:A7:AD:B5:ED:A0:B5:22:61:D6:FB:5F:EE:00:36:A0"}}},"request":{"raw":"GET /settings/website/3acdb410-6c32-4d48-99d1-400814a70edb/prelude/?2026-8-25-5-38 HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/\r\nOrigin: https://zd.lc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:38:10 GMT\r\ncontent-type: application/json; charset=utf-8\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=14400\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Fri, 25 Sep 2026 09:38:10 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=4,i=?0\r\nlast-modified: Fri, 25 Sep 2026 05:38:10 GMT\r\ncf-cache-status: MISS\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a407ae5bffaf4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":354,"size_decoded":945,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"5aa05cb9f5052f3eb236e8878f7f69fb","sha1":"4623c62493561316945f38b039b663913537eb91","sha256":"3c6b70763c63989317a558f10bfdaf6182fc15adc4c895832892a98742e2375f","sha512":"00fd870d2bd4498afc779b9d15c2a3ad33a37591ce52c4dea7cada13e7b089c56624bad07cbfb5a04c35e711cc524362c81d61e006d1b3c969519b554a3dd4d3","ssdeep":"","tlshash":"d2e0d8de199640705a78039d580ea94e6573919f60f5307d98889c6c18320991e26630","first_seen":"2026-09-25T05:38:48.851443Z","last_seen":"2026-09-25T05:38:48.851443Z","times_seen":1,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":91,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/app-6EGRTRuv.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.261Z","timestamp":1790314689261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.lc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 22:00:46 GMT","end":"Fri, 27 Nov 2026 22:00:45 GMT"},"fingerprint":{"sha1":"36:E4:10:C4:5B:DB:BB:67:1D:84:91:F1:CD:A2:1A:FF:3E:42:17:6F","sha256":"FE:B0:3C:4D:6E:1D:67:D4:63:E4:B8:C0:A6:5B:84:2C:ED:71:A6:6B:4C:16:37:FD:02:D1:65:F7:3F:39:BA:45"}}},"request":{"raw":"GET /build/assets/app-6EGRTRuv.js HTTP/1.1\r\nHost: zd.lc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/IiIw8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D; pretty_url_session=eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\netag: W/\"6ab14bf4-4fe16\"\r\nlast-modified: Mon, 21 Sep 2026 15:23:32 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":327190,"size_decoded":104050,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (15468)","md5":"78e30525119525dc028078f1445ee42c","sha1":"afc245c220080d50e93e413ed52ad47e050dec26","sha256":"fdeda8d46462bcda148e2e19751bf1fc7672ffcc31821d32c8a5408e895f61b9","sha512":"28b5aa0adb06d8f73e9d6789482c10b655984069b7367f827a50825660e55f8cd567c2e8396781512868443237db70dd8e224dc3f4b9dc122f2a516ce14de2d1","ssdeep":"3072:muU3e5EQB5tRdRXw8rJV1c6uZXqOvIM1L6KZ9aujwzJisWWnMuhRWLW5l:mv3e5B5bXFc6uZohv5M3W5l","tlshash":"d76439d831e6f57253e716e4006f1203f23c2a26684d8460f615fdea7ab940a91b7fbd","first_seen":"2026-09-25T05:38:48.852971Z","last_seen":"2026-09-25T05:42:10.068716Z","times_seen":2,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":86,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zd.lc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/IconBase-8HXsI3KG.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.265Z","timestamp":1790314689265,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.lc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 22:00:46 GMT","end":"Fri, 27 Nov 2026 22:00:45 GMT"},"fingerprint":{"sha1":"36:E4:10:C4:5B:DB:BB:67:1D:84:91:F1:CD:A2:1A:FF:3E:42:17:6F","sha256":"FE:B0:3C:4D:6E:1D:67:D4:63:E4:B8:C0:A6:5B:84:2C:ED:71:A6:6B:4C:16:37:FD:02:D1:65:F7:3F:39:BA:45"}}},"request":{"raw":"GET /build/assets/IconBase-8HXsI3KG.js HTTP/1.1\r\nHost: zd.lc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/IiIw8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D; pretty_url_session=eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\netag: W/\"6ab14bf4-4b8\"\r\nlast-modified: Mon, 21 Sep 2026 15:23:32 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1208,"size_decoded":1034,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (1207)","md5":"7ed9979e1c1d8df519ead3b61ddf6ce7","sha1":"d5d566949738501ee45aa631e6d34035bb28fb7f","sha256":"79bec8fe872a1d200abc3214fa31fead4b81b481bcbf298310bbff9ffcf9bc1f","sha512":"12471587d5e5a47b2c66027305c31a9e23a5b160e2a9b6ffad2d8f1eff195a991936f7c73dbbbdfaaa01d53aaf0fb1cb93b9cc3df870301489424611d16c2c3e","ssdeep":"","tlshash":"e12154a6223876f2e3af50df50d85844e2146998b07c85f2fb8cc82b30a5486751fe71","first_seen":"2026-09-25T05:38:48.854129Z","last_seen":"2026-09-25T05:42:10.119505Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zd.lc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.bunny.net/css?family=figtree:400,500,600\u0026display=swap","fqdn":"fonts.bunny.net","domain":"bunny.net","tld":"net"},"ip":{"addr":"194.242.11.186","port":443,"asn":34989,"as":"ServeTheWorld AS","country":"Norway","country_code":"NO"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.484Z","timestamp":1790314689484,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"fonts.bunny.net","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Mon, 07 Sep 2026 09:02:14 GMT","end":"Sun, 06 Dec 2026 09:02:13 GMT"},"fingerprint":{"sha1":"2E:01:6D:98:30:DB:1C:CD:3F:AB:0D:7D:8A:EB:CB:69:F9:E3:42:DE","sha256":"34:42:57:B6:3E:6F:39:37:67:C6:D5:3E:59:9B:70:81:94:C3:F6:15:C1:B0:36:AF:C4:3C:32:2C:95:05:DA:B6"}}},"request":{"raw":"GET /css?family=figtree:400,500,600\u0026display=swap HTTP/1.1\r\nHost: fonts.bunny.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\ncontent-type: text/css; charset=utf-8\r\nvary: Accept-Encoding\r\nserver: BunnyCDN-NO1-830\r\ncdn-pullzone: 781720\r\ncdn-requestcountrycode: NO\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\naccess-control-expose-headers: Server, x-goog-meta-frames, Content-Length, Content-Type, Range, X-Requested-With, If-Modified-Since, If-None-Match\r\ncache-control: public, max-age=2592000\r\ncdn-proxyver: 1.70\r\ncdn-requestpullsuccess: True\r\ncdn-requestpullcode: 200\r\ncdn-cachedat: 09/23/2026 10:43:16\r\ncdn-edgestorageid: 830\r\ncdn-requestid: 044bd1361e60c872b35dec464cb4898e\r\ncdn-cache: HIT\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bunny","description":"","website":"https://bunny.net","common_platform_enumeration":"","icon":"Bunny.svg","categories":["CDN"]}],"data":{"size":3108,"size_decoded":1305,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"7b238fa25f860aa62445dab10cdc59d2","sha1":"66074cb94c302104737c71123148ea9508d3bcfa","sha256":"9c26d9155c092f800c8378cca7f462bed26bd912342a2fbe5924e5245736cc79","sha512":"ab157d3f0d99e4eb66f2571569e90dda3f1c289735f0784eabe241feecf61fcbedda5cf1f5fc22054566effdd9fec51ed6af853f884d290f48996d11be76fffb","ssdeep":"","tlshash":"6c5111f14c9a308493871d6323c6bd075f1fa11a604566b5ae261cd84ef8d3ac393bae","first_seen":"2025-01-19T23:28:28.551734Z","last_seen":"2026-09-25T05:42:10.057381Z","times_seen":930,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":10,"connect":8,"send":0,"wait":2,"receive":-1,"ssl":4},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/stylesheets/client_default_95a50f9.css","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.610Z","timestamp":1790314689610,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 11:12:49 GMT","end":"Sat, 12 Dec 2026 12:12:43 GMT"},"fingerprint":{"sha1":"2D:FF:86:97:19:EC:C3:5E:6F:0B:81:C1:D8:A6:A3:0C:E4:47:8C:29","sha256":"7B:40:D9:E4:5E:C7:B8:DF:1F:9B:99:4A:B8:C0:09:9B:A6:A7:AD:B5:ED:A0:B5:22:61:D6:FB:5F:EE:00:36:A0"}}},"request":{"raw":"GET /static/stylesheets/client_default_95a50f9.css HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\ncontent-type: text/css\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\netag: W/\"6ab3704b-205e6\"\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Mon, 22 Sep 2036 05:38:09 GMT\r\nlast-modified: Wed, 23 Sep 2026 06:23:07 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=2,i=?0\r\nage: 83536\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a407ae5a1e7123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":132582,"size_decoded":14537,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65437)","md5":"b2aa2d3f15259596af6cbdd2563a5115","sha1":"bfb3cbaa97a1e75c11da0dc74b50318596c8219c","sha256":"da8221adf91ff5fddab706940c8d9e69071ff4f88e08cb7a589c4f928e4ef7a4","sha512":"1aca2bb0c0b4bbf15792cc620682ff910283e3ea4913025719074459747cd7d63a97eb383d09aad74cd3181d4e368b305d4cff25ddc80baa54fd168fdabd33b1","ssdeep":"768:+dekiy6i3XX4s4y6jbbCDjwN7Fq4ADxbXWNrVa6QdJSbSuSESiS17DRn94yMR2cy:sekiyp6+jwrq4ADxbXWn0Rn7v","tlshash":"9bd3824fb259143014d749a2b9c8bb3d943e64bf82927a3cd5206afd0e954ff1b78728","first_seen":"2026-09-23T06:45:23.722072Z","last_seen":"2026-09-25T11:39:24.660422Z","times_seen":27,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"client.crisp.chat/static/javascripts/en_default_95a50f9.js","fqdn":"client.crisp.chat","domain":"crisp.chat","tld":"chat"},"ip":{"addr":"104.18.29.104","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:10.364Z","timestamp":1790314690364,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"crisp.chat","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 13 Sep 2026 11:12:49 GMT","end":"Sat, 12 Dec 2026 12:12:43 GMT"},"fingerprint":{"sha1":"2D:FF:86:97:19:EC:C3:5E:6F:0B:81:C1:D8:A6:A3:0C:E4:47:8C:29","sha256":"7B:40:D9:E4:5E:C7:B8:DF:1F:9B:99:4A:B8:C0:09:9B:A6:A7:AD:B5:ED:A0:B5:22:61:D6:FB:5F:EE:00:36:A0"}}},"request":{"raw":"GET /static/javascripts/en_default_95a50f9.js HTTP/1.1\r\nHost: client.crisp.chat\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://client.crisp.chat/static/javascripts/client_default_95a50f9.js\r\nOrigin: https://zd.lc\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Fri, 25 Sep 2026 05:38:10 GMT\r\ncontent-type: application/javascript\r\naccess-control-allow-credentials: false\r\naccess-control-allow-headers: Content-Type, Origin\r\naccess-control-allow-methods: HEAD, GET, OPTIONS\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 300\r\ncache-control: public, max-age=315360000\r\netag: W/\"6ab3704b-403e\"\r\ncross-origin-resource-policy: cross-origin\r\nexpires: Mon, 22 Sep 2036 05:38:10 GMT\r\nlast-modified: Wed, 23 Sep 2026 06:23:07 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncontent-encoding: br\r\ncf-ray: a407ae5ece4c4c11-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16446,"size_decoded":6120,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16351)","md5":"4d6e87d7c6e63eb965dde362481d16f1","sha1":"ea9666446a57b82613f87a939df9faf19fcc8559","sha256":"e4e694ff98b0818c5aaa12ab7b017ebbd358a397f0fbb2890ad0563b0595a534","sha512":"72ec050ffa7ad856bde80797d0413eb42ec481fe9c065f5abb5763aaefad0ed0db3429ad4f57d1ea7463aa82e1d4ef670bc614d9f420db11ca833f75b82042b6","ssdeep":"192:niJbPFmXDS83jwhKwPteE2WZXgkEeMeTAFSIPAU1RrUWBX4Ffj7nOmrY2FYXCYLU:nePFmX28+XgkEeMeYSIPfRrLk7sQrSRs","tlshash":"9072ca1edf32de7b02b74b83b185ba024db1117106e0687ed45d897d02a4ecab69bf49","first_seen":"2026-09-23T06:45:23.696165Z","last_seen":"2026-09-25T11:39:24.720408Z","times_seen":26,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/BlockedLink-BV8fe4p3.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.262Z","timestamp":1790314689262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.lc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 22:00:46 GMT","end":"Fri, 27 Nov 2026 22:00:45 GMT"},"fingerprint":{"sha1":"36:E4:10:C4:5B:DB:BB:67:1D:84:91:F1:CD:A2:1A:FF:3E:42:17:6F","sha256":"FE:B0:3C:4D:6E:1D:67:D4:63:E4:B8:C0:A6:5B:84:2C:ED:71:A6:6B:4C:16:37:FD:02:D1:65:F7:3F:39:BA:45"}}},"request":{"raw":"GET /build/assets/BlockedLink-BV8fe4p3.js HTTP/1.1\r\nHost: zd.lc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/IiIw8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D; pretty_url_session=eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\netag: W/\"6ab14bf4-1b72\"\r\nlast-modified: Mon, 21 Sep 2026 15:23:32 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7026,"size_decoded":2817,"mime_type":"application/javascript; charset=utf-8","magic":"Java source, ASCII text, with very long lines (7025)","md5":"7b7e246248f0b46f95f9249da997e1b0","sha1":"f4e1c343928e304ac18db1ef1ce2d913034d3738","sha256":"8799eaec8e3f9ca591535a2ce2aabb2a4e1d1bd905f982ce699602584a8f5477","sha512":"4ee9911d898ce40b948238436445d586172548cd45e6a7e40206719ead1802547534adfb9e6a341efbeb74bf8e0b3f36b1fa306c2b70e807cfe89c938cd8acbc","ssdeep":"192:Rq6XofCgpF8N8iHtFKzoCgpF8N8wHUwr+NOVFKaJ5Gy7:wmHkHvCtarV7","tlshash":"25e1613b02e077aab9cb4b8a30487514779e4b2db176e190936ee408fc55ef76135b32","first_seen":"2026-09-25T05:38:48.856684Z","last_seen":"2026-09-25T05:38:48.856684Z","times_seen":1,"resource_available":true,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":46,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zd.lc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/MasterLayout-DOUC_RJM.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.264Z","timestamp":1790314689264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.lc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 22:00:46 GMT","end":"Fri, 27 Nov 2026 22:00:45 GMT"},"fingerprint":{"sha1":"36:E4:10:C4:5B:DB:BB:67:1D:84:91:F1:CD:A2:1A:FF:3E:42:17:6F","sha256":"FE:B0:3C:4D:6E:1D:67:D4:63:E4:B8:C0:A6:5B:84:2C:ED:71:A6:6B:4C:16:37:FD:02:D1:65:F7:3F:39:BA:45"}}},"request":{"raw":"GET /build/assets/MasterLayout-DOUC_RJM.js HTTP/1.1\r\nHost: zd.lc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/IiIw8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D; pretty_url_session=eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\netag: W/\"6ab14bf4-40d9\"\r\nlast-modified: Mon, 21 Sep 2026 15:23:32 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":16601,"size_decoded":5177,"mime_type":"application/javascript; charset=utf-8","magic":"ASCII text, with very long lines (16600)","md5":"1c0edc75c944ab89bab55be8aa7a2a45","sha1":"916f0022f401ca5c2edbee7447ce1bee505c2284","sha256":"144061d65e51b333b94aafd71b2135c778f766fb4ff5e249c1b75b27580f04ab","sha512":"ce7eaac908a9a4d3f2f612a5b3015799c3390e9e13222b7f3e540c86cdc1027fbf6e85981c0329b4362bd7a48e0386d4caf35c368dd60e3b9327d6e2aaa0a214","ssdeep":"384:EWbxiVw0IS0TlleURMuAi1aeanGCMCAof72X:EW1iVwPSQWURMuA+aeanGCMCAoaX","tlshash":"a172b47ea2d027bf35c68fd75c18ac04e258ab5bf27b0885d3a9c81c7c60d536936234","first_seen":"2026-09-25T05:38:48.858023Z","last_seen":"2026-09-25T05:42:10.11539Z","times_seen":2,"resource_available":true,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zd.lc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zd.lc/build/assets/create-theme-C6LJA8jX.js","fqdn":"zd.lc","domain":"zd.lc","tld":"lc"},"ip":{"addr":"57.131.147.220","port":443,"asn":0,"as":"","country":"France","country_code":"FR"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://zd.lc/IiIw8","date":"2026-09-25T05:38:09.482Z","timestamp":1790314689482,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"zd.lc","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 29 Aug 2026 22:00:46 GMT","end":"Fri, 27 Nov 2026 22:00:45 GMT"},"fingerprint":{"sha1":"36:E4:10:C4:5B:DB:BB:67:1D:84:91:F1:CD:A2:1A:FF:3E:42:17:6F","sha256":"FE:B0:3C:4D:6E:1D:67:D4:63:E4:B8:C0:A6:5B:84:2C:ED:71:A6:6B:4C:16:37:FD:02:D1:65:F7:3F:39:BA:45"}}},"request":{"raw":"GET /build/assets/create-theme-C6LJA8jX.js HTTP/1.1\r\nHost: zd.lc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://zd.lc/IiIw8\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: XSRF-TOKEN=eyJpdiI6IngwUHU0NGJEMm9CVVZscy9VNGVSaUE9PSIsInZhbHVlIjoiZWNUWk9OdFNJSmlNWUpqUm5rQ0wyNGJrZmNQWGRrMVI3UG14cUh3eWxHSFVZQUVPREx3OHZLK3NnM0pGdE9ZVjlBdjNyS21xazJwVklNNmRHNTJiQmpaYzRzR3gxc2w2Zmtia3dUMktrR0plVWUvWnp1cmwxV3N3VEE4Mm1nOEIiLCJtYWMiOiI1ZjBjOWRjMTYzZDZkN2EyNmMxYjBhZGE0YzljMDIyMjUwNjcwZmRjZmE5NDI3Y2VkNDgzY2ZkN2E4MGJhOTcwIiwidGFnIjoiIn0%3D; pretty_url_session=eyJpdiI6ImQzR3BkOUM1cHRTMktNaUtvOHIvSmc9PSIsInZhbHVlIjoickl6VjhlTGFSb2F5YS8rZEsrY0dzNDdjdnE1Znl4U3ROTlNGclFFYTlqNHNpcUNCQlh3K1VLb09Pa05BdG11ZHRHY3VlMXQveUtyMHNUaUFYUCtRZGh1M0U5TU9pMzdUVU1yMHhROFA4S2hnL2FiZTF1ZjRJUmk3eVcxWG5KWFkiLCJtYWMiOiJlNjllM2Q2ZTM4YzY5YjMyNTExODJiNjY2MjJjYzUzZmRlNTY1ZWRkMmVmYzQ2N2VlY2E1ZjM1YjFkYWY5N2IyIiwidGFnIjoiIn0%3D\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nalt-svc: h3=\":443\"; ma=2592000\r\ncache-control: public, max-age=31536000, immutable\r\ncontent-encoding: gzip\r\ncontent-type: application/javascript; charset=utf-8\r\ndate: Fri, 25 Sep 2026 05:38:09 GMT\r\netag: W/\"6ab14bf4-cb68\"\r\nlast-modified: Mon, 21 Sep 2026 15:23:32 GMT\r\nserver: nginx\r\nvary: Accept-Encoding\r\nvia: 1.1 Caddy\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":52072,"size_decoded":13685,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (52071)","md5":"50bb332bef8103eb950b38bd4b94ad60","sha1":"374c7f32ee0a3862276aeacff6f07459c4c82d46","sha256":"d211ebaf1c28a1402bed388a862a90c3cc66c708acca6c23e7c5e79cf217617d","sha512":"902a7cae542b94a1c0385cd37693fdaa16878c1b17f82f0b1079d83fa31829c06d03788229d46212565cc4ad17902c0667d3a425ef31691f62af8c39f1592ffd","ssdeep":"1536:fmOHIkZ/SND9q5+uKIcUNzL/Efqb8dS7xWrB7D:fZHLZ/SNDSfKIcUB/6Y8I7YrB7D","tlshash":"46330a153487487e66ff93d2d06cef99d6381502e0094a9cf29b4f32af44ba9429ef1d","first_seen":"2026-09-25T05:38:48.859697Z","last_seen":"2026-09-25T05:42:10.086058Z","times_seen":2,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-25","alert":"Sinkholed","trigger":"zd.lc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}