{"report_id":"915440c1-1a68-413e-812c-6695c9f34bdc","version":6,"status":"done","tags":[],"date":"2026-04-20T10:32:36Z","url":{"schema":"http","addr":"backpackwebextension.com","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"final":{"url":{"schema":"https","addr":"backpackwebextension.com/","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"title":"Backpack","dom":{"size":86346,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (379)","md5":"b3604691c27886453bb2db1ccd666af0","sha1":"13342737b036d750c9b29b142ac4558a14e0dffe","sha256":"c0c4aa4297834a5c2a6b1d3d1fcdd36bbf38361089750e97e9e2f8d2874ad221","sha512":"26c8ca28099d81e5fa80325b6635f92ae254198449d1a4a283d697ade7a86e38dd8c3702e098ee8b6f61124e2f934f1ad18c1d1779b3b2cf225344920c7f1709","ssdeep":"384:26LpEVHgp+FnWs5ek3YuvR5trgP94y5MWRqcp35TlyJjKg5awbcqDV5Iqfn/fhRT:QD+1QHR0yYQdz08XZ","tlshash":"ae8385604a630985b65bc4e827fab7181b4980079743cca8bffc27d04fdba5699637dc","dom_hash":"domhashc73c7d5ea9e1e8bf386ae92ed6a145d4","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"backpackwebextension.com","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":0,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-25T10:32:36Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"d3e54v103j8qbb.cloudfront.net","ip":{"addr":"54.192.209.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2016-03-11T23:08:14Z","last_seen":"2026-04-13T12:19:55.120058Z","alert_count":0,"request_count":1,"received_data":90095,"sent_data":529,"comment":"","tags":null,"fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]},{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-04-19T22:35:51.253585Z","alert_count":0,"request_count":1,"received_data":2828,"sent_data":454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"maxcdn.bootstrapcdn.com","ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-25","domain_rank":6807,"first_seen":"2014-06-18T00:37:31Z","last_seen":"2026-04-20T02:35:31.681433Z","alert_count":0,"request_count":2,"received_data":195601,"sent_data":1006,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"backpackwebextension.com","ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":20,"request_count":20,"received_data":817687,"sent_data":9266,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"EmailJS:3","description":"EmailJS is a cloud-based email delivery service that allows you to send emails directly from your client-side JavaScript code without the need for a server-side implementation.","website":"https://www.emailjs.com","common_platform_enumeration":"","icon":"EmailJS.svg","categories":["Email"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper:1.12.9","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"BootstrapCDN:4.0.0","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}]},{"fqdn":"code.jquery.com","ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-04-19T23:11:39.14593Z","alert_count":0,"request_count":1,"received_data":70230,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"cdnjs.cloudflare.com","ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2009-02-17","domain_rank":1222,"first_seen":"2012-05-23T12:49:49Z","last_seen":"2026-04-19T22:33:42.593215Z","alert_count":0,"request_count":1,"received_data":20205,"sent_data":501,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"backpackwebextension.com/","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"922afa156258e18156c8286f3d2c6e44","sha1":"9ea2f020163b03c3ed702407fb6300b8ca42b3ad","sha256":"6758fd514eb17b5bccc15b281140186295b104cccacc3741091c1f982b263f18","sha512":"da81c36b0c673e5671c9e533811e084d6c02b940392134855a4e847ff55de1890bb2888e37e07a817ebfd545327483a3e4992963a8175c776df390ee15ec427e","ssdeep":"","tlshash":"979002490047b897506943451671241451d6925b4550d155311d84840f50e136c94142","size":46,"data":"","first_seen":"2026-04-20T10:32:42.170705Z","last_seen":"2026-04-20T10:32:42.170705Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"980d883a7cd0aaf9cef90765899290e9","sha1":"34615423f086fbd2404a42de91ccc2d2a71c8ea1","sha256":"40002466c07534b230b57cd7a615d8a4bac662e1b82ebdfa4eaee9e103177448","sha512":"24ee8a699385bd83438b096e00d00c32e3bdb740e6b55c2893e4ce1fcd082f20affd758ddfbcf0e562d8eaf0d45de8834c1557b2d2670f4ec6e779a1d23c4068","ssdeep":"","tlshash":"2301464a70f38ab10bfb7279076b964026b411632d04e6843edc5f890fd5e59d1ea2e8","size":729,"data":"","first_seen":"2026-04-20T10:32:42.172543Z","last_seen":"2026-04-20T10:32:42.172543Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","size":48944,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-20T17:10:26.764617Z","times_seen":104279,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19188,"data":"","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-20T17:10:26.768151Z","times_seen":105073,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","size":69597,"data":"","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-04-20T15:34:37.660481Z","times_seen":77085,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=5fd1a30a78e29a0936f57bd9","fqdn":"d3e54v103j8qbb.cloudfront.net","domain":"d3e54v103j8qbb.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89476,"data":"","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-20T17:02:24.977332Z","times_seen":225211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@emailjs/browser@3/dist/email.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"aaf4b4c066039688024b3eb28b99260d","sha1":"3d7499d713898a2798f449d8b3528d4094475208","sha256":"249f5139f01396e20b067fbe6db17315981fb1c36c64d64df224bcf0f8750eab","sha512":"9bf344ac90c909cb03955757565b9e442bdc411bdf90303c894fb571005f9c1ed211852bca4503be8b59c1f2980b2d94b6e511690db475a51ad7672fb05e22dc","ssdeep":"","tlshash":"fa41615613f4f0f663edc3ea54bd2200e107c468be92d4e1d6f80e272847c976269e22","size":2058,"data":"","first_seen":"2024-01-11T04:46:50Z","last_seen":"2026-04-20T11:03:59.514698Z","times_seen":690,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"introduction_type":"scriptElement","is_inline":true,"md5":"68a3cd9daf06763ca2b2a632a2afe68b","sha1":"7175c01fd460e7a8c59625fb8aae229e7533e669","sha256":"e7817c4b03cd443db51715928de12a24de05d9cef09b84153fdd0549c4e9f44c","sha512":"a270f4b0cc86bcf7f17fcfe3e8728de02556d570f4e2723a4e36eef77b1d0eb90f5481a3380a90f109594b7456a3e3b971df66a462229017e66527331d4a6b80","ssdeep":"","tlshash":"4831eb577dd211f2197771fac68fab143aa880030101c8917e2caa400f7a0b9f1aebc9","size":1449,"data":"","first_seen":"2026-04-20T10:32:42.173848Z","last_seen":"2026-04-20T10:32:42.173848Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.964Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:27:05 GMT","end":"Wed, 03 Jun 2026 06:27:01 GMT"},"fingerprint":{"sha1":"04:A8:A2:DB:A5:D9:6E:A1:96:19:8E:E4:20:63:9D:DD:4B:05:E5:4A","sha256":"86:F0:31:59:6F:27:50:6B:1C:65:39:9A:BF:6D:0C:A8:82:D5:B2:A6:36:4B:9C:0A:EB:05:EE:13:0F:EE:25:EC"}}},"request":{"raw":"GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://backpackwebextension.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\ncontent-type: text/css; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"450fc463b8b1a349df717056fbb3e078\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1076\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-cachedat: 03/22/2026 17:39:02\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: 61c76456a530fe4517758a8e6cb7dd41\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\ncf-ray: 9ef37be58a9db51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":144877,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65325)","md5":"450fc463b8b1a349df717056fbb3e078","sha1":"895125a4522a3b10ee7ada06ee6503587cbf95c5","sha256":"2c0f3dcfe93d7e380c290fe4ab838ed8cadff1596d62697f5444be460d1f876d","sha512":"93bf1ed5f6d8b34f53413a86efd4a925d578c97abc757ea871f3f46f340745e4126c48219d2e8040713605b64a9ecf7ad986aa8102f5ea5ecf9228801d962f5d","ssdeep":"1536:GcoqwrUPyDHU7c7TcDEBi82NcuSELL4d/+oENM6HN26Q:VoPgPard2oENM6HN26Q","tlshash":"f6e37667f591322da097ca1851c0bbfa466f8156d6221ffbf4273b604b8a6c70a73d0d","first_seen":"2023-04-05T03:09:34Z","last_seen":"2026-04-20T15:41:53.756438Z","times_seen":54014,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":5,"dns":21,"connect":1,"send":0,"wait":55,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/_next/photo_2022.jpg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.972Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /_next/photo_2022.jpg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"71e2-68c35bde-df2271479fa2135e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 29154\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":29154,"size_decoded":0,"mime_type":"image/jpeg","magic":"ISO Media, AVIF Image","md5":"4344fb90f72511068d3a9df757ec7f96","sha1":"2266896b56ca2e380d665377a686fdcf1cf29411","sha256":"6f38fec2b67ef0ae33b83bbed94e36e4289d89a88ebf04487cf9ea9092873911","sha512":"c7194a6d10b935c71529df3bc7e89530e780c06e0c5a6b8da1db62d3484b2160a0802cde04e8267c343c6de638482921a0667f3d9e28ad141782100b19437071","ssdeep":"768:hYyMixhvNQO7rrlc+VpONtFWaO490tZciMXcKPY:hRN13hc+VpAtFM4ytZUcKPY","tlshash":"cbd2e16bbbf9558efc42af7c58924bf833c7832413e5427986489a1630a45b2c94f39d","first_seen":"2026-04-20T10:32:42.119272Z","last_seen":"2026-04-20T10:32:42.119272Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":233,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/brands/jump.svg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.977Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /brands/jump.svg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"a8e-68c35bde-1098a8b74dcebc59;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1124\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2702,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"2e27189195322100d73057456b9a4fd0","sha1":"bbe603ada0c40395593796f2d2ab49227cafb739","sha256":"422fffb057d002a82d7c0f8abcb72776c1c3909c37cb6fb9026df6398041294f","sha512":"14743a614944bc49a2212845f979c3393e6683228c92bf0b55066cbcb18bf94c57103827ebd3cd39dffc8616ecbafc4bbdf09e47f98ec60c60eefa7473553898","ssdeep":"","tlshash":"375184e517ecd6f8c841337ac9351438a62a34f87d7ad2c486487995ec1a7ed4d94cc2","first_seen":"2026-04-20T10:32:42.121674Z","last_seen":"2026-04-20T10:32:42.121674Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/_next/twitter.png","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.984Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /_next/twitter.png HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"f56-68c35bde-4082874ea64ef215;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3926\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3926,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"eb31b3b3934480869c1631a3e3681234","sha1":"18cb14ad0f276dda578be00c81c55eee89a23861","sha256":"f3a7d9bc51e1bb33a5ae3cb11459e69440e89e8e03b75b7cb479bbcd7ce2beb9","sha512":"05eeee01cf8a4f98c92d991a5f61580fc31bc6694e29176c2071a68a10eb7f904e4553884f91844e4c05001fff02623695ffe493d7a87cd39d7b2ae58c374272","ssdeep":"","tlshash":"e1812a79e7769b63e86ac37858f66b80b2d27338d37236412420fb2502552c0db8e09a","first_seen":"2026-04-20T10:32:42.123938Z","last_seen":"2026-04-20T10:32:42.123938Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/js/script.js","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:15.215Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-20T16:51:20.289431Z","times_seen":120052,"resource_available":true,"data":null}},"time_used":145,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":145,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/brands/multicoin.svg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.982Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /brands/multicoin.svg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"4d5e-68c35bde-25f779a50b04e01e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 8406\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19806,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"04bda07e01fe14d15631028d250ad10a","sha1":"f76269d1634e828260dd76ce1594f6acb98f4c32","sha256":"9b005007ee1f4a8842d6f294dbdd71215ea74943a3b7c3751950fb87bf1d4b56","sha512":"d352084549103b4bc1b9f37fc1dcaf21f27770fca07347b8750317a3e27b891fed14eebb4ce6d15282fb88cf0828b567ce29adc3ef337c545790dd5098944b55","ssdeep":"384:0OcyK5bpRA9H6pCO/ID5AggkEvIvT6eqYbr5y838PV7El+mKAzAJ:0OWbpm9aYmq5AggkEgvxMv7El+9+4","tlshash":"1d92c6dd1bf552f8a448f7ee9b53447c7d42a8f13a48dd45c3e84e1aa48582c9c8acc7","first_seen":"2026-04-20T10:32:42.128562Z","last_seen":"2026-04-20T10:32:42.128562Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/brands/anagram.svg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.983Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /brands/anagram.svg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"1d90-68c35bde-179a40ff6e01aaaa;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3181\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7568,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"258bc37be68c9dd0409e7140be874479","sha1":"5c17129af4acca0e567ffd6ab1dc4c2dcf075a33","sha256":"593c880c6827d21021f9e9d22bf8b0f92979a682854f09a9261a99fe9f384e4a","sha512":"90b7f338be4bbacb276b0ef7a1d69441d527071dbcd5257f5026a9d83ac93acff7e097b8a414ecd6f84f9317dcc0faa1d9c3757456d165a2d3db46d39e841f45","ssdeep":"192:2+ZHKPcg7iL1Rh5XJQ0LkPF/3yllJwBvx4/lC:2+RKViLbJQ0k2w8/lC","tlshash":"75f1b7dd2bb54ae8dcd0e2fe6b02d0b5384588eb55198929c3644d077482828af75def","first_seen":"2026-04-20T10:32:42.130584Z","last_seen":"2026-04-20T10:32:42.130584Z","times_seen":1,"resource_available":false,"data":null}},"time_used":220,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":220,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-04-20T10:32:14.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Mon, 06 Apr 2026 12:52:09 GMT\r\netag: \"1812b-69d3ac79-90796fe10f905127;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 7902\r\ndate: Mon, 20 Apr 2026 10:32:14 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:3.2.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"cdnjs","description":"cdnjs is a free distributed JS library delivery service.","website":"https://cdnjs.com","common_platform_enumeration":"","icon":"cdnjs.svg","categories":["CDN"]},{"name":"EmailJS:3","description":"EmailJS is a cloud-based email delivery service that allows you to send emails directly from your client-side JavaScript code without the need for a server-side implementation.","website":"https://www.emailjs.com","common_platform_enumeration":"","icon":"EmailJS.svg","categories":["Email"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Bootstrap:4.0.0","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Popper:1.12.9","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"BootstrapCDN:4.0.0","description":"BootstrapCDN is a powerful and reliable Content Delivery Network (CDN) that delivers static resources, including CSS, JavaScript, and font files, for the widely-used Bootstrap framework. By leveraging multiple server locations worldwide, BootstrapCDN accelerates website loading times, ensuring a smooth and visually appealing user experience. Additionally, it ensures website compatibility with various devices and browsers. The service reduces bandwidth usage and server load, improving web performance for developers and end-users alike.","website":"https://www.bootstrapcdn.com/","common_platform_enumeration":"","icon":"BootstrapCDN.png","categories":["CDN"]}],"data":{"size":98603,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"7e936573cadf18ddff8d42e4dd913029","sha1":"ce88fbb5c09e726fe595323fecdcdff7c5af5537","sha256":"66bcd705bf247aa61c2749831b76ed5b7bbd5dc037bcd682c76fbfc232bd0521","sha512":"034562762e2ddcfe481c30d52336d656865b07c5dc53905b0fbf66bd4ef6c7f1499691eb1befabc5b36c47b43cd785bf410f089f5ebb2ed529a5ec0d485cfe82","ssdeep":"384:3yLpEVHgp+FnWs5ek3YuvR5trgP94y5MWRqcp35TlyJjKg5awbcqDV5IqXH5vxMY:bD+1QH/Q/Ep1iiXd","tlshash":"f8a352505aa709c4a25ec4f827fab7181b4980079743cc99bffc37e04fdaa5299627dc","first_seen":"2026-04-20T10:32:42.132937Z","last_seen":"2026-04-20T10:32:42.132937Z","times_seen":1,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":200,"dns":43,"connect":63,"send":0,"wait":85,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/_next/static/css/3f3232e43cf184e2.css","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.961Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /_next/static/css/3f3232e43cf184e2.css HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:14 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"4d03-68c35bde-42588fdf192716bb;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4405\r\ndate: Mon, 20 Apr 2026 10:32:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":19715,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19651)","md5":"037a05521258a2108974b7e493183741","sha1":"3dbffa94f6a386263c00e2270b30ea061f3f7751","sha256":"ff2ea3a4f21069d49b9421d8d733b1ebda03ad287b92048a6e557a5cf903465c","sha512":"f1b4305f54bb44185b070eae2151931a3f70d01eda024a90185fe5f9445f9c8f93d2f6801ebf7cb405888d622910841e47e5f95821d2dc7348fe440a2df065ab","ssdeep":"192:n6yxCoKECUp2ohdx7JyYY7JyY1XtegNMY7J2eQNVeZNcKsfdttVR3nZ:6yUKVwX/NSemeZNcVZZ","tlshash":"9a92741f6b02012e7c2388fad5a4f69cb11a70c5de2aa3e7e9472510dfd93e75ca3158","first_seen":"2026-04-20T10:32:42.135682Z","last_seen":"2026-04-20T10:32:42.135682Z","times_seen":1,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/screenshot.png","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.967Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /screenshot.png HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:14 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"44fb6-68c35bde-42f2c3245f45c244;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 282550\r\ndate: Mon, 20 Apr 2026 10:32:14 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":282550,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 754 x 1204, 8-bit/color RGBA, non-interlaced","md5":"b6e698c723af6efd6f1be0eca2c63b9d","sha1":"bd01ac16459ac2b0db17d455913f7e959e7a65c3","sha256":"99c69e331668d9e22e46662bef72b773981baf7633eaa1c1cfe9bbbe3dd948da","sha512":"da4e6ee64549179798274ea85bcb8e4493fe19fcb3ea7851a42ddc6aa4875a0e0929a8c6fea9d216231e6aeece77fd8073d7c1aa09cd0d18228bf399dcda1171","ssdeep":"6144:cskIWh3QxitRZJT4ATkDI5M11Vj5FhhU+O8/OoVKwJBAHwomk:cZ34it7GATkDI5M3V5hfdZgHwomk","tlshash":"ca54122bb6b0e0ae7d524ffe185c1fce1a668097c5323e6df499a9c46c30d5a346604f","first_seen":"2026-04-20T10:32:42.143141Z","last_seen":"2026-04-20T10:32:42.143141Z","times_seen":1,"resource_available":false,"data":null}},"time_used":570,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":401,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/_next/funding-generic.jpg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.974Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /_next/funding-generic.jpg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"122c9-68c35bde-6b7a09ea9c8d0b70;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 74441\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":74441,"size_decoded":0,"mime_type":"image/jpeg","magic":"ISO Media, AVIF Image","md5":"9f7e4662be78b134be778984eb39edda","sha1":"f87b95e29ffcee3952b97beb67b88cd227bf08f0","sha256":"ac011fefef4cb93d36c86667d7f8b9b82ba2340eb22d77e8e73a789b9c8df338","sha512":"fc1099980f3374a526c5806ac7e4e4960da24ae8c30487c02aed0fd39d2dae103885ec5c24e2d1a2cb92338378b424bd4459458999c43b0aa05711873769eff4","ssdeep":"1536:qXwD0cggrh1JyitBm3R7HhzTvx88Cfyxs+/5dM5cadMe+:qA4cRhXyinmh7FvxLCaxs+RHaL+","tlshash":"ab7302c661a66256e9f472b56a8037dba91ea2fde57106070b24cf3e5c22fcc0a0b355","first_seen":"2026-04-20T10:32:42.149815Z","last_seen":"2026-04-20T10:32:42.149815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/brands/solana.svg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.975Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /brands/solana.svg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"143f-68c35bde-f35cedcb9d0aa9d;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2235\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5183,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a5830a469a1f2f6e66db4dc2b48c5ccb","sha1":"ddc598f631c563aa21ed51ced031cf2bf29e5b24","sha256":"4a10a705c81a7966ac0db391b511598587c25f727433b5d4f9d0d08258aaba2c","sha512":"5d3413674742a69fe7713e18255f30387bb14001235c8dabff9c8f8a4ac0150dd052b009e0b25de9149b51847aaff9474ef1b397abf002e80d6749342bbab7b9","ssdeep":"96:nDJXbRE06TBLTzSlelgrEDhOFTajBlF1pFEacmVcmtAdvnITAjqG+mgiL+GkkwAC:nDJX1L6TBXzJqmGOBlFBEaMmCfITASiM","tlshash":"8ab1c9e453a5d2d0f909e7e9ed36a070371720f77e81d6c8c2e5ea2cb41659c6d49ec0","first_seen":"2026-04-20T10:32:42.152565Z","last_seen":"2026-04-20T10:32:42.152565Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":227,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/brands/wormhole.svg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.978Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /brands/wormhole.svg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"3a43-68c35bde-e1e4aa081b9c09aa;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 5887\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14915,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"355b49cf17108d35948fbe07f06711ac","sha1":"66ae9c250cfd571b204a176ccfb38e2613f88b97","sha256":"2229f6b5b450a117bdc77c836a52794509263b396e8a7486a3629cf376cd99e6","sha512":"8e3437a213ac7b808c4ef005a0ec5a3e676b733ae08705dbb06c91fd2bf7e4a2d561ab4c2985b9689569cbdcc76be95b6bc21e32f17da2da4eb5b982abbadce7","ssdeep":"192:8M95vDNhxs0W8Cl7XbcgzNnoLSf4yoOLW9gEdFPRDE1053V9kqFd6MtwrrH19:rD/Cl7BxntnEDREy3kxrrH19","tlshash":"5c6293dfb7f5b3f8e405a3e19a7784743b1724fb6a52cb1483a88d5ab91115c8868cc3","first_seen":"2026-04-20T10:32:42.155019Z","last_seen":"2026-04-20T10:32:42.155019Z","times_seen":1,"resource_available":false,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":226,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/_next/Armani-Ferrante.jpg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.969Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /_next/Armani-Ferrante.jpg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:14 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"2409b-68c35bde-4795eef538c52658;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 147611\r\ndate: Mon, 20 Apr 2026 10:32:14 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":147611,"size_decoded":0,"mime_type":"image/jpeg","magic":"ISO Media, AVIF Image","md5":"a8cf6ae8e3dd00c9bf133bba54e1adec","sha1":"04ce59d891cd634b1df6ff3cf5cef28bcf648666","sha256":"86ab3bedfee7baec48f0f3e8c9802c4cd4c4f12520cb13631017872aec26d61f","sha512":"7ed15d4e4777890fc654ebf7b35c83799c287d3dae8afe7b09f1857d5d3bdc7b92eb9fe38049ca5b5a3f12d4411345e4fa472ecd69039db4b422c75e4b2b1ecd","ssdeep":"3072:QYIQmMNOCKs2+j6Kz6aFtYK+G9VfpS0V0BWihNKXvl61Zt8Vm8eS2mS8i:hmMNzbj6Kz6aH+G9VfvwphNA819SfSX","tlshash":"d6e312d08b876f9addb1f5b9f8fa3675f2d29819c06d3033812814532f985c8be9c51a","first_seen":"2026-04-20T10:32:42.156811Z","last_seen":"2026-04-20T10:32:42.156811Z","times_seen":1,"resource_available":false,"data":null}},"time_used":441,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":316,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-3.2.1.slim.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.2.137","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.986Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Thu, 12 Jun 2025 00:00:00 GMT","end":"Fri, 26 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"56:36:FB:D3:E0:9E:71:88:98:A4:C9:34:94:9B:43:3A:C4:C5:1E:BE","sha256":"9A:64:20:6F:F5:DC:F1:8A:D6:B2:D0:93:C2:7E:62:86:0B:1A:D5:24:CF:CE:4A:9F:4C:0D:F1:FB:F2:A0:A8:1E"}}},"request":{"raw":"GET /jquery-3.2.1.slim.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://backpackwebextension.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-10fdd\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nage: 850153\r\nx-served-by: cache-lga21963-LGA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 38, 6402\r\nx-timer: S1776681135.039698,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 23856\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":69597,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32012)","md5":"5f48fc77cac90c4778fa24ec9c57f37d","sha1":"9e89d1515bc4c371b86f4cb1002fd8e377c1829f","sha256":"9365920887b11b33a3dc4ba28a0f93951f200341263e3b9cefd384798e4be398","sha512":"cab8c4afa1d8e3a8b7856ee29ae92566d44ceead70c8d533f2c98a976d77d0e1d314719b5c6a473789d8c6b21ebb4b89a6b0ec2e1c9c618fb1437ebc77d3a269","ssdeep":"1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT","tlshash":"b663d5d9b2c67062db7730b950bf410bf07a98dab44c8c60e198d8d47d78a99817bf2d","first_seen":"2023-03-07T01:02:43Z","last_seen":"2026-04-20T15:34:37.660481Z","times_seen":77085,"resource_available":true,"data":null}},"time_used":141,"timings":{"blocked":36,"dns":1,"connect":26,"send":0,"wait":27,"receive":6,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js","fqdn":"cdnjs.cloudflare.com","domain":"cloudflare.com","tld":"com"},"ip":{"addr":"104.17.25.14","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.990Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdnjs.cloudflare.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sat, 14 Mar 2026 00:38:49 GMT","end":"Fri, 12 Jun 2026 01:38:45 GMT"},"fingerprint":{"sha1":"7A:4A:F6:D6:63:62:70:CA:51:C5:5A:06:41:17:71:BF:9D:2C:C9:42","sha256":"7F:F5:F5:FE:73:1F:E7:AF:1A:82:5B:59:EE:E8:E9:65:D6:87:68:61:8C:11:1E:94:4A:9A:C4:14:BD:4B:04:BA"}}},"request":{"raw":"GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1\r\nHost: cdnjs.cloudflare.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://backpackwebextension.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:32:14 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 6157\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=30672000\r\ncontent-encoding: br\r\netag: \"5eb03fa9-4af4\"\r\nlast-modified: Mon, 04 May 2020 16:15:37 GMT\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\nx-content-type-options: nosniff\r\ncf-cdnjs-via: cfworker/kv\r\nvary: Accept-Encoding\r\ncf-cache-status: HIT\r\nage: 2253868\r\nexpires: Sat, 10 Apr 2027 10:32:14 GMT\r\naccept-ranges: bytes\r\nstrict-transport-security: max-age=15780000\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=buarWvd5x%2Fx2dViu%2Fvv6fW4IavhwN31mDvtSnKzH%2BjbSuAtz1tokiS5mPiJRn1ik8qijgBK5aPmHx4IB3yYhDBeBTYp88o6HA6NJXR25AsGHCq%2Fz5kKMSpS9WzWkRYq85nJ%2FqzHc\"}]}\r\ncf-ray: 9ef37be5acab76ef-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19188,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"70d3fda195602fe8b75e0097eed74dde","sha1":"c3b977aa4b8dfb69d651e07015031d385ded964b","sha256":"a52f7aa54d7bcaafa056ee0a050262dfc5694ae28dee8b4cac3429af37ff0d66","sha512":"51affb5a8cfd2f93b473007f6987b19a0a1a0fb970ddd59ef45bd77a355d82abbbd60468837a09823496411e797f05b1f962ae93c725ed4c00d514ba40269d14","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f","tlshash":"1c82a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-20T17:10:26.768151Z","times_seen":105073,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":1,"connect":1,"send":0,"wait":8,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js","fqdn":"maxcdn.bootstrapcdn.com","domain":"bootstrapcdn.com","tld":"com"},"ip":{"addr":"104.18.11.207","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.991Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bootstrapcdn.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 05 Mar 2026 05:27:05 GMT","end":"Wed, 03 Jun 2026 06:27:01 GMT"},"fingerprint":{"sha1":"04:A8:A2:DB:A5:D9:6E:A1:96:19:8E:E4:20:63:9D:DD:4B:05:E5:4A","sha256":"86:F0:31:59:6F:27:50:6B:1C:65:39:9A:BF:6D:0C:A8:82:D5:B2:A6:36:4B:9C:0A:EB:05:EE:13:0F:EE:25:EC"}}},"request":{"raw":"GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1\r\nHost: maxcdn.bootstrapcdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://backpackwebextension.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nserver: cloudflare\r\ncdn-pullzone: 252412\r\ncdn-requestcountrycode: DE\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=31919000\r\ncontent-encoding: br\r\netag: \"14d449eb8876fa55e1ef3c2cc52b0c17\"\r\nlast-modified: Mon, 25 Jan 2021 22:04:04 GMT\r\ncdn-proxyver: 1.49\r\ncdn-requestpullcode: 200\r\ncdn-requestpullsuccess: True\r\ncdn-edgestorageid: 1054\r\ntiming-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncdn-cachedat: 03/22/2026 17:38:51\r\ncdn-status: 200\r\ncdn-requesttime: 0\r\ncdn-requestid: f1201a8cd56e1bfeb1af7dc64908536f\r\ncdn-cache: HIT\r\ncf-cache-status: HIT\r\ncf-ray: 9ef37be5aab2b51e-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":48944,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (48664)","md5":"14d449eb8876fa55e1ef3c2cc52b0c17","sha1":"a9545831803b1359cfeed47e3b4d6bae68e40e99","sha256":"e7ed36ceee5450b4243bbc35188afabdfb4280c7c57597001de0ed167299b01b","sha512":"00d9069b9bd29ad0daa0503f341d67549cce28e888e1affd1a2a45b64a4c1bc460d81cfc4751857f991f2f4fb3d2572fd97fca651ba0c2b0255530209b182f22","ssdeep":"768:9VG5R15WbHVKZrycEHSYro34CrSLB6WU/6DqBf4l1B:9VIRuo53XiwWTvl1B","tlshash":"7523c84a7254b4a202dfa476913f450bb73b389aa60bc16cb95994ed1d7cd8c3227f3c","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-04-20T17:10:26.764617Z","times_seen":104279,"resource_available":true,"data":null}},"time_used":77,"timings":{"blocked":-1,"dns":1,"connect":3,"send":0,"wait":53,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=5fd1a30a78e29a0936f57bd9","fqdn":"d3e54v103j8qbb.cloudfront.net","domain":"d3e54v103j8qbb.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.192.209.44","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.993Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Tue, 24 Feb 2026 00:00:00 GMT","end":"Wed, 09 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"C9:18:5B:88:98:FA:65:52:EE:3F:8C:AC:85:C1:E4:56:E1:0D:39:DA","sha256":"C6:C6:D5:C7:F7:92:11:BB:D5:98:B6:EB:43:02:E5:65:7B:E8:32:E7:75:CE:E0:A8:29:B0:DE:A3:5E:AF:4E:02"}}},"request":{"raw":"GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=5fd1a30a78e29a0936f57bd9 HTTP/1.1\r\nHost: d3e54v103j8qbb.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://backpackwebextension.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET\r\naccess-control-max-age: 3000\r\nlast-modified: Mon, 20 Jul 2020 17:53:02 GMT\r\ncontent-encoding: gzip\r\nserver: AmazonS3\r\ndate: Mon, 20 Apr 2026 01:23:31 GMT\r\ncache-control: max-age=84600, must-revalidate\r\netag: W/\"dc5e7f18c8d36ac1d3d4753a87c98d0a\"\r\nvary: Accept-Encoding\r\nvia: 1.1 a82071c7a558f0fabf37ee3b940ad600.cloudfront.net (CloudFront)\r\nage: 39186\r\nx-cache: Hit from cloudfront\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: EltsFtloDrktUjHKgK2q90QjVhmpstiquOILF046zgC3mrQrMPklzQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":89476,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"dc5e7f18c8d36ac1d3d4753a87c98d0a","sha1":"c8e1c8b386dc5b7a9184c763c88d19a346eb3342","sha256":"f7f6a5894f1d19ddad6fa392b2ece2c5e578cbf7da4ea805b6885eb6985b6e3d","sha512":"6cb4f4426f559c06190df97229c05a436820d21498350ac9f118a5625758435171418a022ed523bae46e668f9f8ea871feab6aff58ad2740b67a30f196d65516","ssdeep":"1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1","tlshash":"a993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:02:01Z","last_seen":"2026-04-20T17:02:24.977332Z","times_seen":225211,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":23,"connect":1,"send":0,"wait":3,"receive":0,"ssl":7},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/js/webflow.js","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.994Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /js/webflow.js HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-20T16:51:20.289431Z","times_seen":120052,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/js/script.js","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /js/script.js HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-20T16:51:20.289431Z","times_seen":120052,"resource_available":true,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":132,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/@emailjs/browser@3/dist/email.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"151.101.193.229","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.995Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"jsdelivr.net","organization":""},"issuer":{"commonName":"GlobalSign Atlas R3 DV TLS CA 2025 Q2","organization":"GlobalSign nv-sa"},"validity":{"start":"Mon, 02 Jun 2025 15:43:52 GMT","end":"Sat, 04 Jul 2026 15:43:51 GMT"},"fingerprint":{"sha1":"21:17:81:78:41:C6:8F:86:D6:CF:8D:98:CC:74:A8:F1:03:F8:C9:D4","sha256":"D0:E6:8D:08:11:05:7E:0C:2A:0D:C7:E0:ED:AE:9E:18:C8:74:32:12:3D:56:43:98:62:CD:A2:08:6F:64:5B:B0"}}},"request":{"raw":"GET /npm/@emailjs/browser@3/dist/email.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=604800, s-maxage=43200\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\ncontent-type: application/javascript; charset=utf-8\r\nx-jsd-version: 3.12.1\r\nx-jsd-version-type: version\r\netag: W/\"80a-PXSZ1xOJiieY9EnYs1KNQJRHUgg\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nage: 6184\r\nx-served-by: cache-fra-etou8220105-FRA, cache-hel1410033-HEL\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 967\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2058,"size_decoded":0,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (2058), with no line terminators","md5":"aaf4b4c066039688024b3eb28b99260d","sha1":"3d7499d713898a2798f449d8b3528d4094475208","sha256":"249f5139f01396e20b067fbe6db17315981fb1c36c64d64df224bcf0f8750eab","sha512":"9bf344ac90c909cb03955757565b9e442bdc411bdf90303c894fb571005f9c1ed211852bca4503be8b59c1f2980b2d94b6e511690db475a51ad7672fb05e22dc","ssdeep":"","tlshash":"fa41615613f4f0f663edc3ea54bd2200e107c468be92d4e1d6f80e272847c976269e22","first_seen":"2024-01-11T04:46:50Z","last_seen":"2026-04-20T11:03:59.514698Z","times_seen":690,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":26,"dns":18,"connect":13,"send":0,"wait":14,"receive":0,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/backpack.svg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.965Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /backpack.svg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:14 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"2232-68c35bde-fcfa4bb87aace8fe;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 3345\r\ndate: Mon, 20 Apr 2026 10:32:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8754,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"eee26eb14c98bc25df9fb93ccd2a6565","sha1":"03267e352a8df0be66e83f06db12ddf3c230dc4c","sha256":"40e976facb33970c0d068d9496581cf0d556f7aff3bb3bfb41747646aca1fce7","sha512":"c96dfcb171f1cc5575addda2dedc0ebd00307309a1360623426a0196d7feddb8677106a173dd081ceb159e0cd493d6171056735744ef86d425ae44957a1301d4","ssdeep":"192:KpaXvQ6s7rzzaZ/5DBWQxdUs322qkV0mlzrlpa7u6IcvyZ:E2Rfxd322rN/lpOIcvc","tlshash":"0c0273fa77d4a2e8f441b7f4d52680a23e5f38faab9ac798c3517d49b800018c9ccd95","first_seen":"2026-04-20T10:32:42.16365Z","last_seen":"2026-04-20T10:32:42.16365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/brands/pyth.svg","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.981Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /brands/pyth.svg HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"12fd-68c35bde-f64a6e2c71672e95;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 1595\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":4861,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9c31f884cc3af2c85105b55b64c1cc94","sha1":"17e4b094add97fa5688782bf420a1d0f4120260c","sha256":"4e80751342f34bdfac65bbcf6c4832c17ffad70770bfdd35255b0aea727817e9","sha512":"03017894a92158f11ca9e6540ec24b5ec47f1365d1b70de9106f083bf27399c86e441b6ef466f3330a9e050f1fe38bbb0ced5849db53902137243c2da9158815","ssdeep":"96:bLoMvOXM5FKFfwunDhjj/w4kQqkCD6V3e1yRESARE:bLLvOXM5sFDhjjo4kQqkw6V3e1bW","tlshash":"0ba11f944364c2f03484e7f447197997bb272cff3fa2845487a2ad5278a14ed0d8aadf","first_seen":"2026-04-20T10:32:42.165326Z","last_seen":"2026-04-20T10:32:42.165326Z","times_seen":1,"resource_available":false,"data":null}},"time_used":225,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":225,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/_next/github.png","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:14.985Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /_next/github.png HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Mon, 27 Apr 2026 10:32:15 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 11 Sep 2025 23:31:42 GMT\r\netag: \"f9e-68c35bde-33d5c03d107581e;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 3998\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3998,"size_decoded":0,"mime_type":"image/png","magic":"ISO Media, AVIF Image","md5":"e5801e529193482d23edc127ee5d4e74","sha1":"581cf10c60991b0f760fefc84f66db132e37841b","sha256":"14aee6d95a7130087dd6920bbee9d9972ea149721ef0edfe5897d1adcd70bba0","sha512":"62497b49fb2eed05e22b6e09e6d8d7058fb959c91e6a8f6cb429124817e03e5a71000f32f6faf0d24fcf0b93b0250b9292e86ce39eedb62f2713692e6d38ecb7","ssdeep":"","tlshash":"2e813c79fb66cba7e82ad37814e26bd572a2b738d37235815454bb2501412d0df8f08e","first_seen":"2026-04-20T10:32:42.167044Z","last_seen":"2026-04-20T10:32:42.167044Z","times_seen":1,"resource_available":false,"data":null}},"time_used":229,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":221,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/videos/backpack-safari.mp4","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:15.163Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /videos/backpack-safari.mp4 HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 206 Partial Content\r\ncontent-type: video/mp4\r\nlast-modified: Thu, 11 Sep 2025 23:31:43 GMT\r\netag: \"690069-68c35bdf-d98b74f2f45e891d;;;\"\r\ncontent-range: bytes 0-6881384/6881385\r\ncontent-length: 6881385\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":81875,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 v2 [ISO 14496-14]","md5":"48ae443269f429c31de2cb068c16d7f1","sha1":"4974c813deb276252b37ac3e8e0dddaed33eb1cd","sha256":"d902b4c2ee31c1a0da6af2e933ffd056c303551f98f46e51df9f9a8b5e5f6dee","sha512":"f6b1cd1ae840ac94827d8634328f3435f9d4b5f1520fb782d7ffecffdf5323d726d42d55d966c26aea91136347e72ff541f4b0252c368e4218b5937d79b38793","ssdeep":"1536:j1aZqULzM+nbNQJRMPL4TbaiVOuOvdDguQYsb/LlHMM:j1aZrxaJRmLSaa+D4T/lt","tlshash":"ec83cd0473b81c1ec8555e3d9853d36e9773e6efd48d13838764388a3eaa9ac4c1ead1","first_seen":"2026-04-20T10:32:42.169015Z","last_seen":"2026-04-20T10:32:42.169015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":244,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":108,"receive":136,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"backpackwebextension.com/favicon.ico","fqdn":"backpackwebextension.com","domain":"backpackwebextension.com","tld":"com"},"ip":{"addr":"198.251.84.236","port":443,"asn":53667,"as":"PONYNET","country":"Luxembourg","country_code":"LU"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://backpackwebextension.com/","date":"2026-04-20T10:32:15.473Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"backpackwebextension.com","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Mon, 06 Apr 2026 12:01:05 GMT","end":"Sun, 05 Jul 2026 12:01:04 GMT"},"fingerprint":{"sha1":"E6:1C:1F:52:F3:C8:88:2C:7B:F2:C4:EA:37:89:2F:27:02:A9:63:71","sha256":"30:06:73:F4:33:7B:C8:1B:C4:1A:26:AC:11:04:21:8D:6B:CB:20:56:8B:4F:D4:29:BB:C8:56:1C:82:21:E5:FB"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: backpackwebextension.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://backpackwebextension.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Mon, 20 Apr 2026 10:32:15 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-20T16:51:20.289431Z","times_seen":120052,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":64,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-04-20","alert":"Sinkholed","trigger":"backpackwebextension.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}